Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/68DCA48A8A5411F1917BEBF8CE1D38B0.roa
File: 68DCA48A8A5411F1917BEBF8CE1D38B0.roa (raw, json)
Hash identifier: 3vTSaEtEOnFn9KuheTF81XkElcWkmzlKDkHKLYKalOY=
Subject key identifier: 0A:70:B3:D9:59:C3:F1:C6:22:DE:EC:F8:C5:86:EF:DE:51:DC:4B:48
Certificate issuer: /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial: 0595
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/68DCA48A8A5411F1917BEBF8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:17:37 +0000
ROA not before: Tue 28 Jul 2026 07:17:33 +0000
ROA not after: Wed 31 Dec 2036 07:17:33 +0000
asID: 328785
IP address blocks: 102.215.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Validity
Not Before: Jul 28 07:17:33 2026 GMT
Not After : Dec 31 07:17:33 2036 GMT
Subject: CN=6a685791-766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:b6:2d:44:9f:16:c0:b7:5a:3c:18:4c:53:
67:38:93:c1:98:0e:ea:54:c3:e8:95:67:f5:ce:64:
6d:d1:9e:20:b7:04:b9:7f:4c:f7:47:e3:3d:e1:70:
04:19:8a:2f:f2:6c:c8:c6:13:2b:94:a5:a8:fd:32:
1a:d6:02:8b:dc:e5:5b:c8:9f:3e:18:5e:7f:4d:71:
3d:ca:2a:d0:93:a7:fd:44:1c:55:0c:29:3e:8d:36:
81:86:6e:65:5c:a8:9d:b0:6e:04:a6:e2:25:58:d4:
3d:dc:d1:9b:25:a0:a4:3d:ae:c4:4d:86:07:37:06:
4d:57:ad:25:31:3c:bb:75:96:37:e2:b6:66:06:92:
32:56:5e:6a:8f:25:cc:0b:06:03:b6:01:04:df:41:
81:03:4b:65:d8:ad:48:83:ad:5c:98:4d:99:d3:47:
6c:93:b1:fb:e8:36:d5:6e:e7:cd:af:26:f3:58:9a:
37:3f:73:2a:13:ce:dd:91:1e:b8:2b:75:f8:c2:01:
fc:14:05:8a:7c:24:dd:c0:f9:ad:49:9f:bd:f5:5e:
12:c1:3f:39:bb:d9:3f:be:16:ff:08:ee:b0:7a:61:
ff:c7:a2:96:9e:56:ca:1a:02:0e:74:4b:99:ea:11:
e5:06:c6:e1:67:4b:a5:96:69:0e:fb:24:ef:d3:5a:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:B3:D9:59:C3:F1:C6:22:DE:EC:F8:C5:86:EF:DE:51:DC:4B:48
X509v3 Authority Key Identifier:
keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/68DCA48A8A5411F1917BEBF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:92:91:b2:dd:36:d8:d3:d5:ed:d4:d4:e8:0b:18:8b:53:a3:
fd:28:a7:fc:d8:ed:b3:27:58:0a:fd:27:3f:6f:5f:ec:00:7d:
ed:a4:6c:79:2f:c8:ab:0c:51:20:7b:ff:d7:1b:87:f5:82:ac:
3b:96:c2:df:55:74:ab:55:4a:aa:49:4a:37:93:9b:d8:ca:c9:
4d:da:ea:13:49:c0:4d:88:2e:62:10:74:aa:6f:ef:2a:fd:70:
ab:d0:2d:d0:17:c1:c5:03:72:8e:0c:45:fc:89:7d:ad:f7:7d:
60:94:25:6c:b8:54:48:37:ef:ec:d4:87:eb:f0:ac:45:95:e6:
61:8c:0e:89:6c:65:c3:f0:92:4c:5a:82:84:89:78:5d:77:de:
3d:60:f5:73:d7:dc:5e:15:94:d2:42:4e:64:4c:3c:7f:54:e2:
78:cf:19:9b:03:4d:c6:a8:e3:20:a8:ab:b9:b7:81:76:ed:ce:
be:7d:58:56:73:23:67:3a:a2:bd:48:10:37:25:44:38:07:45:
fc:d6:50:1f:2c:29:0b:48:83:77:0e:0b:12:e1:fc:17:8b:90:
58:1b:6e:12:4b:b7:8d:77:6d:d9:6a:19:57:f8:22:14:65:06:
31:ca:82:ae:6f:18:1a:80:cd:68:92:66:45:ca:a0:c4:b3:64:
a9:37:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:58 2026 by rpki-client