Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B0E95558788811F1B04BEF0FCF1D38B0.roa
File: B0E95558788811F1B04BEF0FCF1D38B0.roa (raw, json)
Hash identifier: gn0u5mdSyie3ocJpgqkUMiIrWdhwTnnYnL9RWaCETAE=
Subject key identifier: C3:C6:02:65:B0:9C:82:22:D0:2F:64:81:D0:33:34:48:2E:41:59:E0
Certificate issuer: /CN=F36FE1EAAF/serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Certificate serial: 0404
Authority key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B0E95558788811F1B04BEF0FCF1D38B0.roa
Signing time: Sun 05 Jul 2026 15:46:31 +0000
ROA not before: Sun 05 Jul 2026 15:46:26 +0000
ROA not after: Wed 31 Dec 2036 15:46:26 +0000
asID: 328427
IP address blocks: 102.68.136.0/22 maxlen: 32
102.202.16.0/22 maxlen: 32
2c0f:16c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE1EAAF, serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Validity
Not Before: Jul 5 15:46:26 2026 GMT
Not After : Dec 31 15:46:26 2036 GMT
Subject: CN=6a4a7c57-e54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:16:cf:9e:12:7e:45:ba:47:0a:76:5e:88:
55:08:e3:3d:8b:0e:0f:b1:f6:32:40:dc:4e:3d:22:
ad:40:f3:f5:f3:52:79:0a:30:c7:7e:d6:ec:47:7b:
b5:d1:b1:a8:78:c0:50:b7:86:65:fc:58:90:6a:a2:
81:64:58:d9:f8:df:0b:a6:94:ef:97:4f:16:01:5f:
14:fc:48:14:05:4a:b5:13:d8:03:a1:15:99:95:2f:
75:80:bd:aa:51:54:98:de:a0:cf:27:5c:29:bb:e2:
22:17:78:45:b8:94:ec:75:59:58:01:f5:41:18:e1:
76:04:2b:8d:87:98:38:3c:76:bf:34:7e:3c:c4:4b:
08:25:f7:69:57:53:ac:43:29:05:27:26:91:84:f8:
4f:78:4c:6c:f3:7a:3f:73:90:85:0e:e3:4b:f3:56:
67:20:d5:26:97:b7:35:0a:16:7d:e4:b8:fa:0f:c3:
28:2b:1b:18:a0:75:ef:8e:2b:5d:46:5b:39:e1:34:
fc:df:dc:54:b4:c0:28:e9:60:44:87:60:2d:56:0b:
ac:66:43:e8:af:07:99:68:90:47:22:62:5e:89:a1:
65:dc:27:f2:64:c9:1d:b4:62:5d:60:f7:82:38:1f:
b3:90:b9:21:10:73:c6:b6:bb:82:3f:4d:65:97:c3:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:02:65:B0:9C:82:22:D0:2F:64:81:D0:33:34:48:2E:41:59:E0
X509v3 Authority Key Identifier:
keyid:07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B0E95558788811F1B04BEF0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.136.0/22
102.202.16.0/22
IPv6:
2c0f:16c0::/32
Signature Algorithm: sha256WithRSAEncryption
34:77:ac:42:24:d4:91:79:9a:53:03:6b:4c:29:6d:40:21:67:
d6:b6:40:c3:2c:f0:23:28:97:d2:22:74:3f:d7:c9:b9:7d:75:
b4:4e:a0:71:a4:09:50:e8:31:7b:44:ff:7b:64:d9:cd:8d:7e:
31:10:cd:a7:b1:d2:ee:46:9d:27:02:e2:67:ff:3b:8b:f8:2e:
d7:43:6e:0e:51:6c:d7:6c:51:8f:5f:b5:7f:10:3c:ac:61:14:
6f:e5:38:7a:17:87:d3:b8:17:d2:43:3c:fc:bd:4e:fb:1f:9e:
62:5d:ec:0d:25:09:fe:f7:30:1b:34:21:23:97:24:25:52:0c:
ea:60:73:fa:59:b9:09:17:0e:10:4e:e8:94:b5:71:12:be:37:
d6:b0:64:9d:0f:59:aa:df:73:21:d1:07:c5:ec:1e:40:ec:39:
07:3c:09:98:c1:47:26:c9:11:ba:af:c3:10:7c:9c:a5:c2:d7:
31:7f:b5:1c:66:bd:55:90:10:36:66:10:25:c5:1b:19:dd:25:
6b:cc:ea:ca:2a:b1:4d:20:79:64:c5:da:33:b6:bd:73:7c:08:
73:09:6e:4f:e3:a7:e2:96:18:47:1e:93:8e:6a:0a:f5:a2:99:
ea:c5:fe:5f:7f:d4:20:1e:c6:79:9d:69:40:a7:ca:bd:25:d1:
13:3b:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:51 2026 by rpki-client