Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/6079B38285A911F1813D3FFACE1D38B0.roa
File: 6079B38285A911F1813D3FFACE1D38B0.roa (raw, json)
Hash identifier: HKUnWMBlRiw5f9CmNCu81saZ+U9zzyZA66WEg7qXgWM=
Subject key identifier: 1F:DB:92:1A:A0:19:AA:56:32:B8:AA:06:68:DA:A6:2A:47:C6:EF:8B
Certificate issuer: /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial: 061C
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/6079B38285A911F1813D3FFACE1D38B0.roa
Signing time: Wed 22 Jul 2026 08:43:14 +0000
ROA not before: Wed 22 Jul 2026 08:43:10 +0000
ROA not after: Thu 31 Jul 2036 08:43:10 +0000
asID: 328222
IP address blocks: 102.128.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Validity
Not Before: Jul 22 08:43:10 2026 GMT
Not After : Jul 31 08:43:10 2036 GMT
Subject: CN=6a6082a2-bbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:5c:1d:d6:12:ce:93:a8:08:02:53:90:fb:
95:fd:ba:00:9c:fc:13:ab:47:ce:1f:4f:cb:ec:17:
da:7b:9b:c2:b7:e1:60:02:08:f2:69:09:d9:aa:35:
9d:3f:d3:30:55:fc:c5:c5:9a:5c:16:09:9d:29:07:
1e:8b:4c:a1:64:51:90:63:01:8d:3f:f6:af:01:07:
6f:36:62:d7:92:5f:69:3c:cf:d2:5e:b0:e5:85:15:
6a:a8:cd:e8:7b:65:f1:46:b8:90:b5:16:92:94:e3:
d7:b1:00:f5:77:44:cd:73:14:7f:30:58:c5:be:10:
3f:7a:4f:d5:39:56:ba:14:f7:c7:f0:f7:ae:45:68:
11:6f:92:92:8e:24:cc:c2:7d:23:40:81:7a:f3:2c:
d4:ac:fb:06:4c:1f:33:ec:f4:c2:c6:e7:13:c8:62:
80:55:74:4b:c4:c3:4a:4b:0c:2f:1a:06:70:80:b7:
d3:8c:8b:96:84:0c:79:38:f2:21:9a:5c:eb:8c:07:
96:eb:ab:1b:4f:f6:a5:21:82:06:d5:c0:d7:7f:96:
f7:d1:76:10:fb:cf:94:38:c9:19:4e:ee:3b:a8:59:
a9:8a:37:f5:fd:7b:2a:85:04:1a:a9:a5:18:00:e5:
1b:cf:0d:4e:38:31:11:16:f4:b1:15:ed:28:4e:3a:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:92:1A:A0:19:AA:56:32:B8:AA:06:68:DA:A6:2A:47:C6:EF:8B
X509v3 Authority Key Identifier:
keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/6079B38285A911F1813D3FFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.160.0/22
Signature Algorithm: sha256WithRSAEncryption
81:cf:ad:54:d5:c6:35:4f:ab:cf:4f:07:dc:5d:54:90:8c:e8:
78:ec:af:76:96:c4:13:7a:f4:04:26:37:8d:9c:1a:88:28:ea:
9e:7a:5f:98:66:86:28:6e:9d:6e:5a:97:41:07:ab:fe:db:ba:
84:70:c2:f7:b6:90:6f:86:bf:8c:03:60:d0:a4:5f:8f:d2:42:
1e:ec:31:3c:02:b5:85:a7:97:7d:69:89:1e:2f:80:a0:29:1c:
e5:b4:c4:5f:3e:46:89:b5:0e:bd:6a:20:68:44:c3:94:1e:20:
d2:9b:75:7e:ab:4e:ff:28:37:ae:da:01:cb:c3:a4:ec:e7:a5:
f9:77:7b:85:83:d0:37:67:e9:32:3e:8b:3d:39:42:45:cb:a1:
d3:d6:25:9d:32:d6:1b:3d:74:8e:fc:fe:09:2e:12:af:0f:d3:
5b:9f:d3:ca:c8:10:5f:d3:31:79:57:2f:da:3a:ab:a1:51:ce:
8f:37:c6:e0:b6:7b:68:64:71:00:0b:1d:4e:cb:16:ce:7e:ca:
bd:ee:50:eb:b5:d1:ca:df:91:ea:56:90:24:08:a0:69:5b:62:
ec:4f:ad:a9:f7:c6:32:ec:86:60:c5:e5:7e:1a:51:f9:66:48:
69:e6:3e:66:a8:a3:4a:50:2e:4f:9f:97:e2:4e:ee:74:4b:12:
68:ee:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:44 2026 by rpki-client