Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/4509867C89A011F18FB096A9CE1D38B0.roa
File: 4509867C89A011F18FB096A9CE1D38B0.roa (raw, json)
Hash identifier: aPImwy1cVOEqmtUCa7IvTsb8BnZ1qt4uplLTZBIsKrA=
Subject key identifier: 4C:45:E8:7C:DB:EB:43:69:79:66:C1:A0:15:DF:40:BF:4A:B1:AF:12
Certificate issuer: /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial: 05B9
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/4509867C89A011F18FB096A9CE1D38B0.roa
Signing time: Mon 27 Jul 2026 09:48:07 +0000
ROA not before: Mon 27 Jul 2026 09:48:03 +0000
ROA not after: Thu 31 Jul 2036 09:48:03 +0000
asID: 329097
IP address blocks: 102.215.36.0/24 maxlen: 24
102.215.37.0/24 maxlen: 24
102.215.38.0/24 maxlen: 24
102.215.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1465 (0x5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Validity
Not Before: Jul 27 09:48:03 2026 GMT
Not After : Jul 31 09:48:03 2036 GMT
Subject: CN=6a672957-46be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:1c:61:ca:62:95:ef:58:83:75:08:47:7a:
01:03:67:fe:1d:83:13:83:9b:fe:2d:fa:f6:80:5e:
c9:ab:07:c1:f2:a2:62:6c:50:5e:bd:81:38:a7:d1:
7e:8d:a7:b8:35:d5:c7:eb:21:6b:5c:d9:de:d7:06:
09:61:a2:99:a7:e1:0c:0c:4d:47:91:cc:ce:e2:1c:
57:8b:e3:2d:4d:83:d4:1f:20:e3:0d:c8:d5:f0:39:
dd:ef:7e:29:63:ce:ff:8f:27:60:63:57:95:75:c7:
fc:4f:8f:d8:0f:78:f7:85:e8:ec:5a:4d:22:7b:68:
ce:75:07:55:3f:5e:85:f5:d6:68:db:43:8f:07:99:
97:63:2f:35:6e:12:16:7a:f0:2f:1f:39:96:b8:7b:
88:a1:de:ed:f4:c3:8f:b8:19:79:04:8c:c7:f7:f6:
2b:ae:e5:b9:ee:f5:60:18:17:4a:97:50:09:74:c3:
0c:91:18:2d:2f:db:bf:ae:04:ea:36:58:5d:a6:ac:
16:95:ef:d9:75:0c:f5:c0:21:55:23:4b:34:0a:b5:
14:95:23:b1:42:03:fa:a9:a8:15:86:1f:86:d2:0a:
18:a5:ea:f2:f4:54:a5:46:8a:ef:56:6c:cb:98:79:
77:0c:8e:00:68:d0:f9:a7:72:5c:48:5f:3f:bc:ca:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:E8:7C:DB:EB:43:69:79:66:C1:A0:15:DF:40:BF:4A:B1:AF:12
X509v3 Authority Key Identifier:
keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/4509867C89A011F18FB096A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:70:ba:15:c8:8b:b0:4f:b2:a2:24:7f:36:0f:fc:5f:24:0c:
df:0d:ef:87:db:8f:f3:08:6b:e5:99:ae:08:61:08:ef:30:86:
1c:ac:dd:a4:46:f5:f7:c6:ba:7c:34:70:cf:4e:3b:a9:97:f7:
32:a0:89:19:da:4c:4b:c2:1a:f9:e3:9b:f2:b9:12:7a:f5:5a:
62:81:1d:e1:5d:87:ca:82:bf:a5:85:06:e8:28:16:a7:76:c6:
b5:c9:55:23:f8:4c:14:31:8b:82:0d:d1:cd:c5:7c:0c:2c:81:
35:2b:1f:04:08:f3:65:fb:4b:4e:89:af:97:4a:86:6a:c8:11:
ff:67:9f:a1:e0:48:1a:be:70:18:36:19:e2:95:37:45:a7:f6:
cf:b9:ea:55:23:35:74:2a:2c:16:c9:66:ed:57:b1:6c:f5:e0:
17:3b:6a:6d:3e:53:15:bd:0d:64:f9:2b:a2:81:2d:9a:7d:17:
72:32:e1:54:9b:13:07:81:d9:07:86:3d:8a:99:be:d0:98:de:
59:20:0c:2e:63:e0:21:8c:69:ab:5f:b7:8d:18:e1:d7:5e:5c:
ca:70:2a:9e:e3:4a:38:e2:82:10:79:16:17:99:2f:e0:b9:27:
5b:40:3c:42:db:96:0c:de:c7:49:81:52:f8:f3:c6:92:31:5d:
9a:67:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:47 2026 by rpki-client