Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C344D7B886D411F19995CB11CF1D38B0.roa
File: C344D7B886D411F19995CB11CF1D38B0.roa (raw, json)
Hash identifier: g0atapPUjho3Gfa8TRDQpf+KufFAmvHSn9sPaUKwzok=
Subject key identifier: 46:0D:62:42:BF:DA:00:17:B3:F2:36:CF:01:FD:E5:23:C9:BB:A8:D8
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 05E1
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C344D7B886D411F19995CB11CF1D38B0.roa
Signing time: Thu 23 Jul 2026 20:26:20 +0000
ROA not before: Thu 23 Jul 2026 20:26:15 +0000
ROA not after: Wed 31 Dec 2036 20:26:15 +0000
asID: 328977
IP address blocks: 102.203.72.0/22 maxlen: 24
2c0f:6300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 20:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Jul 23 20:26:15 2026 GMT
Not After : Dec 31 20:26:15 2036 GMT
Subject: CN=6a6278eb-5697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:65:c8:45:26:47:4a:73:4d:79:52:77:74:
01:d7:f0:b2:8e:41:e3:86:f3:b1:af:bf:b4:cf:fa:
96:ff:fb:73:77:6c:25:73:69:79:ee:f5:8f:16:bb:
0d:ea:c2:41:61:b9:e3:64:e7:aa:1b:7a:28:4e:ec:
dd:e7:de:78:4d:ab:db:a5:dc:49:d5:8a:53:49:60:
bc:5e:1c:74:1f:4f:d6:8b:ce:c8:d0:56:52:4e:b7:
fe:ca:52:ea:02:fc:3f:51:6d:9f:91:55:4c:45:5c:
77:2a:b0:10:de:9b:21:30:cb:39:6d:09:27:d6:6a:
f5:58:bd:7c:1f:07:95:61:65:07:2d:ae:fb:1f:8b:
06:4b:a2:e2:dc:83:7d:bb:bb:e8:b7:02:34:30:98:
66:cc:46:f3:5b:9f:04:96:94:31:e4:0d:0b:97:9d:
07:4f:12:b0:ea:81:ff:cc:a4:42:03:af:b3:24:34:
ed:ce:5c:6f:d5:2e:1c:67:b9:0e:48:82:5d:65:e8:
4b:40:90:75:10:83:ec:07:53:99:7f:ca:85:a5:db:
4e:e2:6c:f6:5e:66:28:61:d1:08:17:79:6f:dc:80:
da:25:0e:a8:32:d2:00:43:f4:c8:06:54:55:9f:b8:
a0:e4:0f:2d:37:5e:c4:cc:eb:fe:4e:10:dd:9a:72:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:62:42:BF:DA:00:17:B3:F2:36:CF:01:FD:E5:23:C9:BB:A8:D8
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C344D7B886D411F19995CB11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.72.0/22
IPv6:
2c0f:6300::/32
Signature Algorithm: sha256WithRSAEncryption
84:5e:01:69:b4:f3:36:40:55:cf:9b:da:f0:7a:3f:1a:3a:17:
bb:a3:91:bb:8f:93:b4:92:49:ac:7d:66:3a:b8:99:31:8a:dd:
78:64:64:20:9a:0b:07:3d:f3:9c:7a:9b:1a:ca:3c:a9:68:bd:
29:27:cb:77:95:51:ab:2d:c9:05:73:c8:64:6f:ab:b8:0d:cf:
79:79:c7:b7:84:ae:1a:a0:d7:ae:70:ea:86:09:71:37:57:64:
a9:0c:ae:78:34:c4:b4:fa:2d:ec:30:b3:62:50:f2:d3:2b:6e:
4c:5b:40:46:6f:18:3c:20:8a:5b:7f:27:c9:06:f3:6b:c4:7b:
40:94:39:62:03:de:da:2c:02:80:0c:a1:1a:32:50:af:1a:fa:
dc:7a:c9:bb:ae:d9:5a:32:14:b1:2c:f9:05:4d:db:72:79:fe:
7a:5a:7d:d1:1c:f5:dc:77:dc:ff:fd:52:5a:d8:09:12:59:3e:
e9:f0:02:aa:b1:dd:44:83:27:00:41:70:c2:14:55:f6:95:ad:
82:7b:52:db:12:9c:7f:e7:9a:5c:79:2e:83:67:6d:a1:6d:c0:
f5:52:40:4b:04:b4:aa:eb:4b:87:b6:ad:3b:f3:7d:71:8d:1f:
8e:45:f0:cb:56:0e:da:21:a6:3e:63:87:d4:f7:d3:51:b3:b3:
98:e4:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:42 2026 by rpki-client