Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/D025818C847A11F1B5502AB7CE1D38B0.roa
File: D025818C847A11F1B5502AB7CE1D38B0.roa (raw, json)
Hash identifier: s3DKvzZqZ1yrsDDeKf3A4fFbQn6aVQ+8rQd1FiSdSzk=
Subject key identifier: 2B:86:6F:43:DA:C4:C0:39:55:A6:B6:FA:36:6B:C2:A7:B9:C0:28:15
Certificate issuer: /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial: 04F4
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/D025818C847A11F1B5502AB7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 20:37:24 +0000
ROA not before: Tue 21 Jul 2026 20:37:20 +0000
ROA not after: Mon 21 Jul 2036 20:37:20 +0000
asID: 329160
IP address blocks: 102.216.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Validity
Not Before: Jul 21 20:37:20 2026 GMT
Not After : Jul 21 20:37:20 2036 GMT
Subject: CN=6a5e8704-ae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:ee:6e:2a:8f:4d:40:0b:fc:1c:93:00:4d:
33:db:1a:e2:ba:8f:0b:57:ed:46:23:54:4a:c9:22:
bc:5d:58:52:75:5e:3c:4c:cd:c2:5c:0c:04:e3:d7:
4d:9c:1d:69:c6:aa:b9:f5:45:16:55:59:20:fb:7c:
e8:28:55:e2:f5:dc:12:7a:e3:dc:64:4c:28:f1:98:
18:16:a7:69:e1:57:e2:ee:2d:55:94:74:60:be:85:
6d:b6:9a:5a:cc:2a:cc:0f:d4:e1:4e:99:d2:bb:cb:
1a:0a:53:2f:09:ac:45:8b:de:63:19:38:7c:c5:00:
02:8c:11:b3:46:d4:93:ed:b0:8c:95:95:37:1a:a8:
84:02:1e:43:1e:30:93:d5:e9:72:fe:62:7a:4f:8a:
91:c7:72:38:15:15:d3:34:ea:58:11:27:5e:f7:38:
47:a4:fc:0a:16:96:5b:c5:13:f7:94:d2:c0:a8:b4:
03:aa:2f:23:1c:0d:de:1b:b8:f5:8f:03:06:3b:dd:
30:7c:94:90:8b:14:92:d4:9b:18:fb:7c:13:98:64:
2a:b6:17:63:95:1d:de:2c:c4:34:c0:ae:cc:c5:1b:
95:69:ed:02:6b:4e:45:f5:a5:f2:08:52:73:ee:fa:
e7:f5:b1:f6:85:1d:ea:28:02:cf:d5:c3:f6:66:6f:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:6F:43:DA:C4:C0:39:55:A6:B6:FA:36:6B:C2:A7:B9:C0:28:15
X509v3 Authority Key Identifier:
keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/D025818C847A11F1B5502AB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.136.0/24
Signature Algorithm: sha256WithRSAEncryption
19:27:e9:e7:79:67:ee:d4:9e:fa:bf:81:09:b0:a7:d4:e4:1f:
88:c7:c2:e2:4b:bb:93:f3:73:59:9e:e5:21:62:fb:6a:db:67:
73:15:5b:af:62:51:f1:32:e5:2b:0c:ba:2f:b5:a5:dc:a8:d1:
bb:ad:fe:69:59:79:df:59:53:75:4a:84:17:5e:8f:ba:d9:60:
49:14:10:bb:fc:14:2c:5f:25:dd:80:3b:d1:15:7a:51:30:4d:
2b:9e:38:34:0f:8c:ca:b9:a3:66:2d:1a:c3:5b:ee:4a:56:a2:
21:b9:51:20:3b:1f:b6:a7:29:b0:f5:d8:c9:13:a4:fc:2a:1a:
0c:0b:0e:48:06:43:24:65:21:c4:9c:f2:53:85:ec:42:d1:3a:
ea:1e:1a:b4:bc:ab:5e:6f:9a:ea:62:72:94:04:32:8a:31:9d:
de:93:09:e6:93:13:a8:a3:94:42:83:3a:40:fb:4d:ae:85:7c:
a6:25:aa:6a:94:33:d7:30:de:a9:f9:fc:60:5f:2d:b1:d9:ef:
89:c1:a0:2d:e7:27:56:65:e1:af:e6:91:cc:56:ad:94:44:ea:
c6:6c:ff:fe:07:47:7a:47:2d:1a:f3:2c:92:a2:38:b4:65:d8:
3a:a3:b5:db:64:9d:9d:82:a1:22:18:77:f4:b3:a8:46:de:67:
1e:ee:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:58 2026 by rpki-client