Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/2519D8328A8911F1AD7DCDB9CE1D38B0.roa
File: 2519D8328A8911F1AD7DCDB9CE1D38B0.roa (raw, json)
Hash identifier: 8sQ3yTWm9ppQfsnveXYgDm7NMabPIZo2cwXeQRYMKOc=
Subject key identifier: 74:B9:CB:10:12:73:BE:3A:5A:CB:A6:E0:6B:7B:AB:15:5C:9A:81:2C
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 063D
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/2519D8328A8911F1AD7DCDB9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:35:07 +0000
ROA not before: Tue 28 Jul 2026 13:35:02 +0000
ROA not after: Mon 28 Jul 2036 13:35:02 +0000
asID: 36913
IP address blocks: 102.70.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:35:02 2026 GMT
Not After : Jul 28 13:35:02 2036 GMT
Subject: CN=6a68b00a-b92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:0c:99:98:4b:84:ae:df:4a:7c:54:1e:1c:
47:ab:3a:50:dc:22:26:dd:f2:b2:c3:d0:51:39:16:
43:ae:49:3c:58:ba:52:00:d7:45:40:df:98:29:d0:
2b:1d:63:ae:f5:0f:fe:0d:bb:32:1f:67:d9:0c:31:
11:de:ce:ba:f4:62:ff:39:bf:10:67:ca:a9:62:cc:
db:5d:82:6f:f4:0b:04:69:70:f3:32:fb:e4:fb:72:
00:64:0c:05:77:86:ef:71:4c:d5:ac:67:11:fa:57:
38:a1:85:b4:60:76:5b:f8:86:6d:69:3f:aa:b8:88:
85:05:7b:52:98:68:a3:a4:76:27:01:2f:75:6f:29:
3a:cd:ae:b1:88:1c:5d:16:97:1e:dc:4d:89:05:51:
91:c2:bd:b6:ad:3e:ea:df:fe:0a:09:67:dc:19:5d:
55:77:53:d5:21:4b:58:e4:d0:07:86:eb:7e:20:9c:
cb:17:a6:91:26:c1:86:d3:89:58:0b:c7:45:51:0e:
34:90:ef:72:24:48:18:cc:79:36:0e:30:6d:d4:47:
07:83:c9:ec:31:29:12:ea:d6:eb:a8:f3:a8:5a:f4:
6c:c3:47:6d:45:8c:9f:b9:78:44:36:73:6f:d5:82:
f4:9c:32:ab:14:1f:2c:37:de:25:3c:74:89:94:f4:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:CB:10:12:73:BE:3A:5A:CB:A6:E0:6B:7B:AB:15:5C:9A:81:2C
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/2519D8328A8911F1AD7DCDB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5f:23:83:fd:c2:a9:c9:73:4c:9b:c6:5d:26:32:6c:50:b5:40:
f3:20:7c:05:9e:e8:f9:4b:54:c3:f4:27:4c:10:71:73:ab:91:
ff:ac:2f:eb:8b:00:70:ea:04:f6:23:ea:88:05:91:2e:cc:2a:
ed:42:85:30:2a:1c:c0:d5:1a:be:a8:e0:63:2f:fd:53:24:b4:
69:4c:c3:73:38:2f:0c:54:14:09:58:6d:f9:40:fa:7f:a1:2b:
7e:14:bf:14:e5:c8:42:7a:94:a6:58:0d:63:78:76:46:4a:80:
a3:88:88:37:5a:6a:f3:08:3e:d9:15:bb:bc:5c:cf:2b:df:b1:
96:00:ba:15:bd:52:14:e4:5c:4c:e2:78:04:78:3a:08:33:a5:
ea:bc:83:d1:8a:8f:b1:12:2d:d8:ff:fc:00:51:a7:e3:51:88:
bf:dd:a4:37:8d:16:8c:0a:48:cc:a4:8e:d7:40:4d:bc:1d:c2:
f7:b7:96:71:e8:73:2d:b0:94:e2:46:39:5a:80:27:80:e0:ac:
9b:a6:72:b3:3b:63:e6:bd:60:4e:59:a2:ad:4e:25:be:bb:5e:
b8:8d:5a:5e:5d:e5:51:b8:ce:5e:d5:95:ff:df:bf:3b:ee:b7:
7d:35:d9:30:77:f8:6d:53:04:52:8d:03:92:bf:78:7f:b7:42:
6e:c2:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:20 2026 by rpki-client