Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/383BEA7E873A11F1878DF408CF1D38B0.roa
File: 383BEA7E873A11F1878DF408CF1D38B0.roa (raw, json)
Hash identifier: V583EW/K8C0P/Ms6xCkqcw6DMAeSTriRFoAJ45sih64=
Subject key identifier: 40:A1:D4:91:E0:C7:1D:80:F2:D6:CF:53:D2:D1:5B:AB:B3:0B:A2:55
Certificate issuer: /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial: 0714
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/383BEA7E873A11F1878DF408CF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:32:35 +0000
ROA not before: Fri 24 Jul 2026 08:32:31 +0000
ROA not after: Mon 22 Sep 2031 08:32:31 +0000
asID: 60171
IP address blocks: 102.222.200.0/22 maxlen: 24
2c0f:e890::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Validity
Not Before: Jul 24 08:32:31 2026 GMT
Not After : Sep 22 08:32:31 2031 GMT
Subject: CN=6a632323-d943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:22:5f:50:de:1b:00:f9:ea:75:f4:33:19:
03:78:cd:c0:7a:61:4a:7d:26:e5:2f:c8:97:b1:f4:
e1:af:c0:17:3a:7d:3f:fe:fe:8f:31:56:9e:5a:05:
52:ce:a0:88:5d:1a:2a:d8:1d:da:3c:84:9f:f9:a5:
20:6f:f2:de:3d:23:7e:87:af:2b:24:0b:04:67:81:
8b:42:17:a6:ae:c2:8e:f6:63:47:6a:cc:64:b4:2b:
49:d6:51:09:72:e1:f6:86:82:f1:f6:22:d4:3d:19:
f9:38:9c:46:4c:be:2b:2f:77:e6:b2:b0:60:d6:1e:
53:16:32:7c:b4:c0:1c:eb:56:20:f5:51:8e:97:64:
75:74:1b:f9:03:57:d9:4e:dc:51:e3:d4:13:53:f9:
f9:68:88:a0:f4:a2:71:1d:de:2d:2f:60:24:0e:ec:
b6:21:d6:0a:34:1b:82:68:9b:7c:3e:74:e9:68:0d:
80:93:69:ef:cf:96:f9:d0:55:8f:01:b0:53:a0:16:
75:c4:e4:a8:25:9d:b4:ac:04:db:ac:6f:80:f9:2c:
7b:75:90:b6:60:40:2e:81:86:42:ac:5a:94:cf:c7:
3b:e0:46:46:cc:f7:ac:8b:aa:05:21:15:b2:77:4d:
d6:34:14:f9:ef:eb:57:7f:78:b3:38:ea:70:b2:ca:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:D4:91:E0:C7:1D:80:F2:D6:CF:53:D2:D1:5B:AB:B3:0B:A2:55
X509v3 Authority Key Identifier:
keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/383BEA7E873A11F1878DF408CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.200.0/22
IPv6:
2c0f:e890::/32
Signature Algorithm: sha256WithRSAEncryption
2e:88:6b:82:79:b2:d0:82:f5:76:7b:92:c2:26:86:09:81:7b:
ca:22:83:3f:d5:df:47:e3:72:4c:57:d2:f5:d4:f3:65:02:08:
4b:d9:e5:86:7e:70:1e:02:df:4e:ca:92:14:91:11:dd:94:f2:
c7:df:db:bb:b4:0d:22:63:d2:7e:8e:76:b3:5d:02:0d:d9:5c:
f6:12:d5:b7:e9:68:e3:06:89:33:93:63:c3:66:ff:f1:87:a5:
31:f7:86:75:b7:f8:17:9d:b2:aa:a9:58:50:a3:16:81:19:89:
da:11:e7:2e:48:a2:6c:69:f7:f9:86:d5:22:e9:35:51:8b:06:
de:32:d8:6c:5b:e2:db:59:53:57:58:33:b2:51:14:42:8a:ef:
b8:12:ac:9b:3e:02:8e:43:52:19:e9:c1:58:83:4c:9a:24:66:
12:0c:cd:2d:04:3c:0b:e5:83:a8:39:24:2e:a7:4d:9a:94:c0:
58:c5:32:66:65:d2:73:53:c9:05:41:00:8b:96:ba:2a:3b:cb:
56:59:6e:96:13:c0:f9:b4:4b:55:43:8d:14:0e:b5:ee:80:d5:
7c:84:c8:c8:8a:ba:ac:f6:a5:6b:35:8c:1d:aa:03:10:39:71:
70:c7:c6:ed:2d:8d:81:f9:60:fd:5a:f1:b2:f3:2e:c9:d3:80:
a5:a8:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:14 2026 by rpki-client