Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/D8B7CB286ED811F19A665DB2CE1D38B0.roa
File: D8B7CB286ED811F19A665DB2CE1D38B0.roa (raw, json)
Hash identifier: mMNXtOYCnuBwvr7qzFaW+gy6yRDfvySr9zLAUot0/c4=
Subject key identifier: 95:65:2B:44:75:40:09:70:10:54:A9:85:42:CB:3A:96:62:A6:DB:D7
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 070F
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/D8B7CB286ED811F19A665DB2CE1D38B0.roa
Signing time: Tue 23 Jun 2026 07:55:06 +0000
ROA not before: Tue 23 Jun 2026 07:55:01 +0000
ROA not after: Mon 23 Jun 2036 07:55:01 +0000
asID: 328585
IP address blocks: 102.23.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Jun 23 07:55:01 2026 GMT
Not After : Jun 23 07:55:01 2036 GMT
Subject: CN=6a3a3bd9-ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:f1:e8:26:bc:f5:47:bb:29:c4:c4:90:ec:
4a:ff:96:14:63:7f:e5:e6:86:22:b6:8f:5b:8d:19:
62:6f:1f:08:6c:33:db:05:0a:da:f3:e4:32:c3:d9:
51:4b:17:07:6b:ac:1e:6a:12:e9:39:ea:9a:e6:54:
cb:91:d4:43:83:6c:31:0f:03:dd:02:bd:f6:3a:b8:
77:83:c5:e0:62:c4:9a:ca:ae:47:8a:70:86:52:30:
b5:5d:76:05:58:ec:56:28:e6:fa:3e:40:39:07:93:
eb:0e:46:51:9e:bd:63:8d:2a:d2:11:e6:55:f7:12:
07:16:68:fa:c2:28:f7:20:1e:23:23:63:6d:46:fd:
93:0b:0e:2f:7f:c5:48:17:66:e2:1f:1b:8c:64:2f:
88:b3:49:46:a0:43:b8:b5:34:88:8a:c1:54:6e:0f:
61:44:2b:58:f3:fd:ba:bc:ef:29:9a:de:8d:1c:f6:
d0:67:fd:44:a4:77:66:5b:b0:c1:77:86:79:cd:a5:
9d:c9:10:72:42:d6:b3:bd:2f:b1:5b:51:08:d8:31:
06:ee:e6:8c:20:f5:c5:ae:ad:bd:82:88:dd:6c:ba:
1a:7a:fe:d2:d3:17:cf:f8:41:b3:64:15:f0:36:13:
b3:13:97:4c:0c:67:6f:28:7a:b4:d3:30:57:65:67:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:2B:44:75:40:09:70:10:54:A9:85:42:CB:3A:96:62:A6:DB:D7
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/D8B7CB286ED811F19A665DB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b6:fa:c4:75:0c:8d:d8:6b:68:45:e9:2f:3a:6c:4c:e7:96:
6b:27:3f:05:ce:f0:c3:7a:59:6c:37:63:9a:c8:be:53:e4:88:
36:06:47:ff:cf:60:90:2b:28:50:31:06:60:0a:33:c5:5f:08:
c5:58:e6:99:29:e1:d2:03:7e:b9:6c:87:0d:b0:3d:d5:88:d7:
54:a7:0d:e7:71:55:9f:0b:13:52:b9:eb:4a:c8:8e:bc:78:10:
0d:dd:4a:13:64:18:b0:91:8c:b0:6e:db:d1:22:d1:da:24:33:
8f:6e:0e:d0:eb:72:7a:61:6f:08:ba:db:fb:fd:9b:77:3a:3c:
0c:8e:16:ab:97:8e:7d:a0:d4:15:2d:9d:69:f7:e0:7d:b0:cc:
a4:34:f1:cb:f1:51:7d:d9:81:c9:e3:83:91:1b:a9:8f:ad:f1:
77:83:d2:fd:44:d3:8a:d9:7c:f0:1a:de:ad:d5:27:29:73:33:
a4:8f:87:ae:74:7d:24:fc:f4:9b:aa:c5:e3:fe:13:ae:2f:db:
e7:ae:29:df:34:24:19:7c:9f:e2:5c:a7:82:a0:92:a7:38:ad:
fe:2e:b9:89:32:66:ae:f1:3f:79:f8:98:92:7a:86:02:d6:ab:
82:63:be:4d:bd:cf:9c:f9:d4:cf:28:5f:f9:b6:4d:ae:fc:c2:
bb:f8:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:26 2026 by rpki-client