Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/647E02F0753511F18E3974DECE1D38B0.roa
File: 647E02F0753511F18E3974DECE1D38B0.roa (raw, json)
Hash identifier: xKBb/SHJ/6UiPb5L7oEAFDNfhF2/kjoVITp1UjEzsf4=
Subject key identifier: 7F:D6:E7:9E:22:F4:B4:AB:CB:29:75:F4:BC:41:51:44:1E:10:24:E1
Certificate issuer: /CN=F36F8F06AF/serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Certificate serial: 02
Authority key identifier: DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/647E02F0753511F18E3974DECE1D38B0.roa
Signing time: Wed 01 Jul 2026 10:12:41 +0000
ROA not before: Wed 01 Jul 2026 10:12:35 +0000
ROA not after: Mon 31 Dec 2035 10:12:35 +0000
asID: 329671
IP address blocks: 102.203.232.0/22 maxlen: 24
2c0f:2a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F06AF, serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Validity
Not Before: Jul 1 10:12:35 2026 GMT
Not After : Dec 31 10:12:35 2035 GMT
Subject: CN=6a44e819-2c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:c6:45:25:3c:0d:74:c2:3a:06:94:c7:06:
19:43:de:5d:08:d8:b6:65:11:ea:30:6f:d5:45:10:
9e:22:5b:0c:6c:6f:c8:f2:6d:bf:a7:ac:89:b0:f7:
ac:d2:5b:51:6b:5e:24:6f:f8:b5:66:66:b2:85:9b:
bc:9b:6d:56:95:c6:95:33:ad:fa:fe:7d:0c:c2:17:
50:f7:03:c5:77:56:c0:18:8d:2a:0d:ec:dd:32:0a:
04:a0:c9:d0:f7:c3:e7:70:4c:7b:ce:72:9e:de:2c:
82:24:26:de:f4:27:b2:e4:9a:05:63:d3:42:20:00:
cb:6f:4c:e2:53:9b:5d:11:66:08:97:05:d2:e2:d0:
ff:91:69:85:43:6c:cf:27:d7:fe:e6:b3:19:ef:89:
24:c2:9f:f7:e9:cd:38:2f:47:62:32:a0:fd:3c:f5:
86:e6:d0:c9:3b:4b:e4:8f:9d:27:c4:95:bb:4f:19:
74:a7:25:17:7d:e3:2a:6a:c4:6b:48:ab:06:6e:7b:
74:b7:86:a5:0b:8b:9a:5d:7d:1d:c3:4e:56:54:d6:
a5:76:8e:f6:cf:87:3b:39:40:6c:e4:4c:fa:30:d6:
10:da:34:98:2c:5e:f9:4e:38:2f:0e:3d:8e:c3:fd:
c3:b9:ac:3d:e5:11:2c:fc:60:4d:95:37:bf:6e:5e:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:E7:9E:22:F4:B4:AB:CB:29:75:F4:BC:41:51:44:1E:10:24:E1
X509v3 Authority Key Identifier:
keyid:DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/647E02F0753511F18E3974DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.232.0/22
IPv6:
2c0f:2a0::/32
Signature Algorithm: sha256WithRSAEncryption
76:d7:13:50:27:dc:2c:6a:ca:be:ad:f8:e0:39:9a:c2:ca:73:
77:4b:8c:19:40:2b:51:43:81:5b:f1:38:8b:a4:ac:09:5c:2c:
89:d8:6f:4d:81:84:33:63:be:e2:7e:a5:72:53:dc:88:8b:dd:
f6:1d:d0:cb:e7:6d:6b:00:51:41:80:3a:3a:ad:3b:d2:4f:94:
27:02:56:03:ce:31:59:40:99:8c:c7:f4:dd:db:75:cb:42:3f:
18:1e:04:d6:91:8c:51:ac:b6:b5:c4:f6:77:41:a0:29:75:c8:
3e:7e:cd:b1:f8:b6:53:71:b9:80:06:f2:c8:5f:4b:47:a4:80:
93:42:32:07:12:b3:23:2c:d0:f3:35:52:1f:c6:dc:54:01:e1:
9a:bc:f6:fd:d5:fa:19:e2:1f:6c:4b:49:98:4f:e7:9f:bd:d2:
97:8f:c7:3a:ac:6b:20:a5:7f:ba:1c:1e:a1:24:59:d1:36:ff:
09:56:51:2d:00:75:dc:ef:3d:94:af:ca:68:df:f2:01:31:97:
22:e7:da:8b:9f:e7:34:d9:a9:e4:f1:63:2c:9b:a7:0e:c7:be:
20:fc:80:dc:fc:c8:08:ed:4f:a6:d7:44:64:5b:28:0a:fb:3d:
63:46:87:5e:3d:c2:9c:4e:39:ea:c4:95:78:59:cd:64:99:f3:
55:f8:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:45:56 2026 by rpki-client