Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/C48E89BA8A5411F1B004F6FCCE1D38B0.roa
File: C48E89BA8A5411F1B004F6FCCE1D38B0.roa (raw, json)
Hash identifier: XktUWr86OFCoCLGD5TDHlTLBdurnxWwUHKblb3/NzZs=
Subject key identifier: C0:73:0F:BC:B1:55:E8:94:AE:0C:88:C3:52:0C:B1:DE:2C:FB:9C:8A
Certificate issuer: /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial: 0597
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/C48E89BA8A5411F1B004F6FCCE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:20:11 +0000
ROA not before: Tue 28 Jul 2026 07:20:07 +0000
ROA not after: Wed 31 Dec 2036 07:20:07 +0000
asID: 328785
IP address blocks: 102.221.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Validity
Not Before: Jul 28 07:20:07 2026 GMT
Not After : Dec 31 07:20:07 2036 GMT
Subject: CN=6a68582b-ee1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:07:36:23:68:7a:26:c9:40:02:1b:91:66:
d0:ad:9b:06:89:ae:59:0c:96:f4:97:c6:70:32:19:
40:44:95:c1:54:a8:b9:77:e4:b8:85:1f:e3:4c:f2:
65:79:1f:82:36:3b:ce:16:dc:7a:28:86:84:ff:90:
6d:83:1c:55:5c:5d:9e:f2:c7:dc:7d:49:ec:2a:b8:
64:f6:fa:8c:fa:d7:c2:24:4a:a7:1d:fd:53:11:6f:
1f:a5:2d:36:10:26:b0:56:b9:c4:ef:ee:e8:1b:41:
8c:b1:60:5c:d1:99:e2:6e:1b:45:e1:5a:01:41:48:
92:99:7d:9e:90:c0:57:27:38:b6:69:b8:ae:1d:57:
f2:ad:38:38:2c:da:82:a7:31:ab:94:8f:e0:90:54:
43:de:63:df:ff:2f:7e:41:54:5f:74:ec:19:9e:cc:
01:6f:3d:b9:4d:47:41:52:3b:e8:f2:7b:dd:34:1e:
a6:ba:6b:ae:90:3f:f3:e1:62:cc:95:ec:42:e4:46:
9b:9d:d3:28:2c:0d:17:22:3c:5d:a7:e8:5f:30:b0:
58:0f:d0:ef:c3:11:e5:9d:97:16:17:4a:2a:dc:91:
af:08:98:57:04:a3:50:ba:ab:da:4f:72:3a:17:cc:
9e:5d:ae:7d:49:f8:b2:fe:e0:94:87:e6:f0:93:e1:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:0F:BC:B1:55:E8:94:AE:0C:88:C3:52:0C:B1:DE:2C:FB:9C:8A
X509v3 Authority Key Identifier:
keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/C48E89BA8A5411F1B004F6FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:8b:e3:a2:e3:cb:c2:a0:be:37:b1:ab:e2:58:d1:1a:99:15:
b7:4a:c3:fd:ba:99:37:1e:8a:b6:68:91:f7:33:90:49:1d:80:
b1:f1:43:05:71:9b:40:33:d4:29:e3:d6:7e:62:93:35:eb:d4:
f5:1c:82:56:34:a7:16:fe:60:9a:da:b0:1e:8a:54:33:93:a3:
09:c8:46:94:b3:49:a3:c7:a7:b7:e1:87:b0:95:a4:0a:f6:3d:
1d:e4:8a:70:e6:d4:3c:cb:91:ce:d1:2e:6f:bd:c1:a4:92:ea:
fc:d3:6f:f3:89:ef:2e:61:e3:df:f8:58:fe:93:b3:78:63:80:
3d:30:00:4a:6d:c7:59:5c:4b:9d:49:41:c6:53:b0:14:bb:27:
4a:d2:76:8d:47:39:b5:8e:58:1d:d7:1b:91:af:f6:9a:53:0b:
01:1d:0e:59:08:f1:56:d0:67:05:4e:08:92:9d:6d:5b:86:17:
1e:3d:f2:3b:90:d5:20:d3:e6:a6:9e:0e:a4:7f:85:0f:9e:63:
a9:e6:c2:51:a6:07:00:a8:7c:55:6a:57:f9:d2:55:40:9d:97:
6f:00:6c:fc:d5:67:7e:d0:de:f1:01:5c:6a:bb:43:81:d2:43:
4c:19:94:a0:74:0e:bc:cd:54:b9:13:69:b3:12:85:5e:be:88:
f5:1a:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:32 2026 by rpki-client