Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/96BECE16898511F1825C6B08CF1D38B0.roa
File: 96BECE16898511F1825C6B08CF1D38B0.roa (raw, json)
Hash identifier: oco7QYiN4H9AP0b1v44zyPoxFEqKA/IrP3MtJ7ibHeI=
Subject key identifier: 95:4E:5D:05:CB:03:0D:E7:53:AD:04:5D:54:51:11:45:24:23:C1:36
Certificate issuer: /CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Certificate serial: 051B
Authority key identifier: 2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/96BECE16898511F1825C6B08CF1D38B0.roa
Signing time: Mon 27 Jul 2026 06:37:08 +0000
ROA not before: Mon 27 Jul 2026 06:37:04 +0000
ROA not after: Fri 11 Feb 2033 06:37:04 +0000
asID: 328734
IP address blocks: 102.222.144.0/22 maxlen: 24
2c0f:e9b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B665CAF, serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Validity
Not Before: Jul 27 06:37:04 2026 GMT
Not After : Feb 11 06:37:04 2033 GMT
Subject: CN=6a66fc94-ec15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:b6:03:ef:63:c4:f6:6f:b7:79:80:9b:56:
4d:15:2b:ac:37:e4:a5:f9:47:49:b0:cf:a3:f9:75:
f9:a7:b9:9f:da:00:93:e9:83:a3:f4:5d:c8:b1:33:
fe:e1:db:85:bf:20:87:f5:81:c3:41:53:75:2c:00:
87:e0:10:46:c2:20:e3:bf:65:23:9f:db:92:d9:e2:
b7:c9:3e:5e:16:7c:de:09:ca:08:7d:87:d0:53:75:
a6:70:70:36:cd:16:56:f3:35:24:91:62:64:aa:59:
2e:48:8b:49:6f:f8:00:a8:bc:2d:10:17:8e:1e:72:
ff:8c:cf:d4:c2:55:b9:54:d3:fa:23:54:c7:c4:64:
95:8a:bd:3b:bf:f3:87:9f:39:f4:ce:1f:37:52:3e:
93:54:74:87:5c:74:00:06:a3:23:54:d9:ac:db:d8:
4f:ef:1f:73:eb:48:65:a8:30:3c:0d:f1:ad:6a:db:
22:7d:2c:0f:42:05:5c:98:d0:fb:96:9f:c8:16:d2:
a8:ff:5a:1a:33:dc:bf:ec:a0:5a:26:14:ce:fd:75:
d7:4e:2e:e7:9c:f9:72:4a:9c:50:28:5c:b1:09:73:
1d:fa:f6:86:c4:8e:4f:5e:11:cc:71:ff:25:45:bb:
40:9b:06:9b:d0:3c:54:e4:1d:9b:d3:5b:e7:ae:34:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:5D:05:CB:03:0D:E7:53:AD:04:5D:54:51:11:45:24:23:C1:36
X509v3 Authority Key Identifier:
keyid:2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/96BECE16898511F1825C6B08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.144.0/22
IPv6:
2c0f:e9b0::/32
Signature Algorithm: sha256WithRSAEncryption
e1:85:36:b2:14:1e:62:69:1e:69:9a:52:ab:13:e8:9e:3a:8c:
19:57:21:9b:18:22:2e:ab:70:6e:2f:5c:e8:cc:69:47:18:1f:
30:13:ba:d2:33:aa:cb:3c:3a:29:f8:13:1f:ee:48:4f:1c:8f:
00:cf:2f:75:48:5d:11:e7:72:43:31:93:f0:7d:71:d3:33:4b:
a6:7e:50:23:87:37:5e:06:0a:30:0c:42:4c:e1:31:2c:49:5b:
32:ef:e6:fb:43:df:e9:cd:8e:25:cc:98:5d:1d:dc:11:1d:ce:
cc:55:9c:6b:1a:0e:e9:c7:26:a9:49:ef:93:65:5e:c2:1c:93:
36:4d:1b:fa:ba:94:3e:8e:40:68:91:24:c2:5f:eb:5d:e3:4f:
5a:8c:f2:9e:ce:f6:1d:ab:fe:26:3c:e9:80:13:80:90:b5:cc:
43:92:17:ad:d1:69:b0:93:0a:69:09:95:2a:1a:62:d7:d0:d2:
c2:7e:0c:80:ce:ca:d9:b1:0f:35:27:92:78:cc:5b:9d:de:2e:
40:92:9c:72:e3:87:0e:8c:c5:10:1e:bd:bc:67:53:9f:5c:51:
b6:7c:3e:47:f7:a6:6b:c1:21:0d:ae:fb:a5:3c:40:7e:3b:c6:
f7:00:35:de:fe:60:52:d5:0f:14:3a:85:26:e0:ad:77:e8:da:
19:39:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:54:19 2026 by rpki-client