Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/800DBED485E311F1A69754D4CE1D38B0.roa
File: 800DBED485E311F1A69754D4CE1D38B0.roa (raw, json)
Hash identifier: gIjXIokhBTqr9NfKMjABZHd19gtr0Nhw1HH6PPnE5Jg=
Subject key identifier: 4D:B4:18:BB:97:83:1F:8E:35:27:29:3E:DC:E4:7B:75:36:2D:9D:25
Certificate issuer: /CN=F36F8F06AF/serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Certificate serial: 19
Authority key identifier: DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/800DBED485E311F1A69754D4CE1D38B0.roa
Signing time: Wed 22 Jul 2026 15:39:18 +0000
ROA not before: Wed 22 Jul 2026 15:39:14 +0000
ROA not after: Mon 31 Dec 2035 15:39:14 +0000
asID: 329737
IP address blocks: 102.203.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F06AF, serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Validity
Not Before: Jul 22 15:39:14 2026 GMT
Not After : Dec 31 15:39:14 2035 GMT
Subject: CN=6a60e426-c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:b3:7c:17:25:45:0c:2f:54:13:a4:80:91:
e3:bc:6e:25:51:32:71:eb:a7:75:5b:c8:0a:4f:a7:
6d:6d:e4:50:9c:5e:4e:68:27:06:52:a2:d0:62:2b:
ad:33:69:cc:88:e3:21:da:38:34:d8:9f:2f:be:75:
4a:70:79:5d:b5:19:75:0e:eb:01:9f:9d:6c:c2:10:
7e:1b:a1:3a:31:0f:24:cf:ab:1f:47:b0:86:fc:79:
c6:05:dd:2b:db:28:08:a5:e7:07:89:5e:35:bd:44:
95:dd:44:53:4a:2e:3b:6c:16:74:b4:e3:b0:de:aa:
d2:de:1a:64:ba:6b:1c:1a:9e:f6:d8:c0:0b:dc:8b:
85:76:96:3f:04:4c:76:6e:4b:05:24:b9:08:32:42:
3e:57:dc:1f:97:a2:7d:3c:57:ed:c1:16:40:27:cb:
aa:16:f6:f2:b3:9a:e3:3f:df:ee:91:64:63:66:d7:
9d:f8:06:26:d5:2d:1f:e3:14:34:08:2d:43:60:25:
2e:a0:a1:bb:7a:b9:b2:0b:2d:24:91:23:7c:4a:20:
48:07:8c:6e:fc:e5:01:9c:cc:af:95:db:e7:79:74:
f9:f5:8f:e2:a5:24:70:91:2a:fd:0c:c8:eb:84:4d:
55:49:77:ea:6c:55:f1:45:de:9f:83:fa:5e:86:24:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:18:BB:97:83:1F:8E:35:27:29:3E:DC:E4:7B:75:36:2D:9D:25
X509v3 Authority Key Identifier:
keyid:DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/800DBED485E311F1A69754D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.235.0/24
Signature Algorithm: sha256WithRSAEncryption
70:75:d4:93:27:58:8d:65:03:2c:ea:66:7e:50:2a:eb:bc:23:
59:88:5e:bc:71:39:42:a2:07:41:11:81:cf:16:60:76:6d:aa:
3c:83:94:ca:37:51:ee:cd:16:9e:e3:32:9d:58:cd:74:0d:0f:
93:f3:3a:8c:7b:c8:93:26:30:99:0f:fb:c0:3f:16:80:6e:31:
40:5f:5f:4b:e1:d1:63:36:77:dd:39:48:bd:e0:eb:ca:52:f0:
fb:ea:96:c5:08:19:bc:51:f0:ef:c3:90:d8:98:7b:90:ab:6e:
66:2c:a0:f5:e4:7a:6d:a6:49:3d:f6:08:0d:f4:67:4a:97:38:
8d:98:78:55:ca:32:4f:a1:ee:bd:66:83:b1:2a:48:0e:03:51:
ce:de:ac:5c:57:05:d6:8f:17:b7:23:8e:04:63:46:b2:a5:90:
8d:eb:65:f4:ee:5c:43:30:9f:5e:2f:40:f9:2c:e0:71:b0:a5:
d8:a6:22:d8:01:02:7d:da:a8:37:e3:34:c1:91:5d:c0:97:6f:
f9:9f:fb:6c:24:df:84:55:f5:e6:b3:d4:29:7b:32:ee:ea:78:
f1:87:9c:32:e4:13:5b:0b:9e:18:f3:df:58:51:c8:61:3e:ff:
87:4c:d8:96:0d:74:f7:79:e9:16:9e:15:9e:35:cd:c8:1d:49:
2b:e8:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:15 2026 by rpki-client