Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/DEB2A540851511F19367D3F0CE1D38B0.roa
File: DEB2A540851511F19367D3F0CE1D38B0.roa (raw, json)
Hash identifier: sYepgmDznNmmNReOcG4umYZCEZRALxnqg21zsuyQF/k=
Subject key identifier: 37:40:01:4A:78:30:76:9A:0E:22:9C:EA:72:5D:DE:8E:F9:D7:01:54
Certificate issuer: /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial: 0600
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/DEB2A540851511F19367D3F0CE1D38B0.roa
Signing time: Tue 21 Jul 2026 15:07:20 +0000
ROA not before: Tue 21 Jul 2026 15:07:17 +0000
ROA not after: Sat 01 Nov 2036 15:07:17 +0000
asID: 328948
IP address blocks: 102.218.16.0/24 maxlen: 24
102.218.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Validity
Not Before: Jul 21 15:07:17 2026 GMT
Not After : Nov 1 15:07:17 2036 GMT
Subject: CN=6a5f8b28-9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:d8:9e:df:6b:ff:32:9d:76:10:16:2a:ac:
24:07:59:95:b3:1e:69:d5:b9:18:c2:4b:93:ce:14:
a7:51:64:ee:c9:1d:89:17:9d:8c:41:7d:c6:f2:c6:
73:cd:6d:fb:42:e1:1e:e2:e3:69:70:4b:c1:c4:46:
4c:cf:cb:6b:a0:65:ac:6e:5f:ca:76:cc:8f:e0:13:
8a:f1:71:d8:a2:ce:2c:c6:c2:56:45:d7:17:7e:fc:
90:89:bb:6d:6b:2f:17:0d:6d:23:6b:1f:9f:4e:00:
11:e3:d0:27:fe:5d:81:67:d4:2a:d1:7e:56:a4:af:
0f:65:a8:5e:70:42:dd:7a:b1:d5:56:e2:22:c1:50:
11:2d:24:3c:6a:b2:4d:9a:47:95:45:d6:a5:71:72:
d3:09:34:dd:63:d7:75:11:f4:83:75:af:57:b2:ec:
a4:47:da:46:ea:65:c0:f9:d5:5d:29:7e:cd:cc:53:
bc:68:fa:1f:d9:47:e6:a8:48:ac:0a:19:75:1b:a9:
fa:1c:84:bd:d2:df:47:b7:04:ec:3f:15:cd:5c:66:
d8:3f:04:12:c9:a7:81:dc:79:de:5f:3b:22:d5:51:
f0:f3:bc:c2:ee:b3:75:63:62:cc:5e:2c:21:35:0d:
5f:bd:91:4e:30:3e:d8:25:5c:7e:69:d3:56:a0:f3:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:40:01:4A:78:30:76:9A:0E:22:9C:EA:72:5D:DE:8E:F9:D7:01:54
X509v3 Authority Key Identifier:
keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/DEB2A540851511F19367D3F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.16.0/23
Signature Algorithm: sha256WithRSAEncryption
44:91:78:9e:7e:cb:b3:dc:bc:1c:13:c1:3c:4f:b9:55:98:72:
c6:2f:f3:36:10:66:16:d5:8a:b2:f9:75:35:36:84:55:e2:81:
a5:fe:e4:31:99:fc:23:8b:92:84:97:07:d5:34:e5:ed:2a:0f:
ec:04:23:01:48:da:62:dc:d8:61:63:12:72:7e:10:cd:2b:67:
2c:91:df:84:70:70:a7:eb:a3:1b:de:3b:1c:28:ab:e2:5d:05:
5b:ef:79:f0:36:70:e0:27:12:90:fd:73:bb:81:3b:20:f6:f9:
4e:55:5c:cc:4a:6f:2e:e5:89:8f:e4:54:92:e9:b0:05:f3:14:
31:40:6a:19:3a:5b:06:5c:bd:ab:d3:e6:24:f7:3d:cd:03:8d:
a7:7f:14:51:96:73:4b:a9:5d:97:2c:71:6f:db:63:d9:4a:7c:
70:2b:1d:60:df:85:3f:10:4a:11:a0:6f:b5:1f:f2:3d:65:d7:
26:cf:db:de:ff:48:c6:fe:06:e6:e9:60:9a:eb:2b:7a:36:21:
db:f0:47:e7:ca:85:2e:74:f6:33:bc:08:31:86:93:79:59:bd:
af:d6:c4:8a:04:5c:ef:8b:43:04:15:a7:42:5b:dd:bf:a0:80:
c5:81:43:87:d1:7b:f1:b0:14:9b:a4:b8:4a:b8:89:48:53:c7:
da:9d:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:19 2026 by rpki-client