Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/8C4E6AEA898A11F1B8DFC5A7CE1D38B0.roa
File: 8C4E6AEA898A11F1B8DFC5A7CE1D38B0.roa (raw, json)
Hash identifier: 2SyJNtG7HzAxazk33AaSwm0xq2igRBeeEGByt8n/8AY=
Subject key identifier: 52:CE:C2:BF:5C:D3:22:BC:8A:C7:9A:A7:34:78:C6:B1:CA:1C:F5:DD
Certificate issuer: /CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Certificate serial: 0590
Authority key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/8C4E6AEA898A11F1B8DFC5A7CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:12:38 +0000
ROA not before: Mon 27 Jul 2026 07:12:34 +0000
ROA not after: Tue 31 Dec 2030 07:12:34 +0000
asID: 329101
IP address blocks: 102.215.76.0/22 maxlen: 24
2c0f:2880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 03:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4A6EAF, serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Validity
Not Before: Jul 27 07:12:34 2026 GMT
Not After : Dec 31 07:12:34 2030 GMT
Subject: CN=6a6704e6-5ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:18:6c:e7:c0:a3:cd:e5:78:17:c3:a1:2a:
50:95:0d:fe:12:1e:17:c5:33:d2:8f:aa:42:40:c2:
33:7f:52:b6:83:5b:22:e6:b1:bf:49:88:a8:51:83:
61:1e:2f:69:45:8a:da:9d:d7:8c:82:cf:81:93:29:
57:8e:ce:ee:d5:a3:27:71:c7:5f:43:82:27:e0:83:
3e:af:44:26:6a:9b:72:0a:52:a9:4c:0e:1f:c7:9e:
3f:08:01:f3:ea:ac:f4:1f:11:87:e2:66:dd:c0:2d:
f7:8e:4e:50:c7:b6:4f:bc:19:5e:72:d9:3e:46:f3:
c2:44:a3:18:6c:1f:69:fc:8e:a7:17:b2:3e:46:89:
e3:9a:e1:85:14:64:b6:d6:7c:11:59:80:e7:c3:b9:
c8:1a:63:38:09:70:81:e9:5d:57:39:d5:0d:53:7f:
83:1e:1d:da:1a:b7:04:98:60:14:fd:d1:3a:ab:06:
21:69:71:e3:05:90:b0:37:96:18:1e:b6:a9:48:1c:
3e:ee:03:7f:ff:52:47:69:39:2b:97:49:56:80:b0:
0f:9e:48:02:d7:9d:8b:70:b5:e6:7d:b0:20:43:4d:
ac:e5:40:6c:a2:9a:88:72:99:7e:9c:64:56:1a:92:
78:63:76:00:8c:54:ad:86:84:0d:be:cf:4d:f5:50:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:C2:BF:5C:D3:22:BC:8A:C7:9A:A7:34:78:C6:B1:CA:1C:F5:DD
X509v3 Authority Key Identifier:
keyid:26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/8C4E6AEA898A11F1B8DFC5A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.76.0/22
IPv6:
2c0f:2880::/32
Signature Algorithm: sha256WithRSAEncryption
79:81:e8:3d:5f:01:ca:73:34:e9:07:5d:e4:3c:95:56:74:cf:
c4:bf:df:73:e4:0e:76:f4:9c:00:72:c2:2a:86:94:0b:28:b2:
8b:5d:c6:b5:02:d8:22:09:50:1b:6a:c4:21:a7:d4:f7:b8:b3:
45:b1:16:ed:91:67:55:dc:96:fb:32:5a:82:92:11:c2:c1:9e:
88:c7:56:29:6b:be:b2:cd:cf:c0:04:d8:ac:b9:21:29:f7:f1:
96:53:b6:ad:87:dc:48:69:30:e8:ff:c3:ec:61:49:9f:39:e1:
3a:e9:b1:01:b6:36:97:da:15:c2:3c:1b:dd:fb:20:20:73:f3:
e5:64:4e:0e:06:17:d9:ac:cc:84:2c:6c:c0:4d:da:e4:c9:14:
7f:64:1a:36:a0:42:2a:cf:db:de:5d:ec:b2:e8:67:de:8f:40:
01:53:46:d9:0f:e7:7c:77:44:42:8b:7a:5a:b4:35:f3:f3:90:
af:c5:e4:02:dd:8b:ff:ce:bc:d2:4a:f2:f6:3f:99:5a:25:b6:
2b:21:b5:e1:f7:57:19:62:59:60:6b:01:25:6a:b5:89:8b:b8:
cd:8d:ff:ba:7c:41:3e:21:5c:4c:3f:01:d9:1e:dd:0a:cd:d1:
21:c9:f4:df:a4:96:3f:25:ff:65:d5:9c:ac:ff:ce:37:27:cf:
84:b0:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:16 2026 by rpki-client