Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/CC15C4C08AC011F19E9BC601CF1D38B0.roa
File: CC15C4C08AC011F19E9BC601CF1D38B0.roa (raw, json)
Hash identifier: CLEdi3dH6VLoAeQY7RC1HiDFnjkuwPHPEYCtOB/eMtU=
Subject key identifier: A0:93:7E:78:62:96:0D:AD:E5:36:13:1D:34:32:17:A9:23:EF:7E:08
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 05E0
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/CC15C4C08AC011F19E9BC601CF1D38B0.roa
Signing time: Tue 28 Jul 2026 20:13:29 +0000
ROA not before: Tue 28 Jul 2026 20:13:23 +0000
ROA not after: Mon 28 Jul 2036 20:13:23 +0000
asID: 329063
IP address blocks: 102.215.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 21:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Jul 28 20:13:23 2026 GMT
Not After : Jul 28 20:13:23 2036 GMT
Subject: CN=6a690d69-c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:8e:19:09:f9:5b:88:8b:b3:fe:b8:17:f0:
69:d4:32:65:71:54:fe:81:06:56:cf:e9:fc:e4:8a:
a6:c3:31:47:0d:3f:5f:e1:c5:07:6a:25:e7:ed:a5:
d7:eb:ad:dd:01:bb:3d:9e:ad:1c:04:9d:4d:6d:02:
70:dc:9a:c0:62:c9:22:28:4f:34:b6:f3:fa:00:35:
4f:e8:76:e5:ec:24:fa:c8:98:37:1d:d1:33:15:ba:
66:46:98:ab:63:9e:b3:27:03:ff:cd:8b:d3:2e:36:
60:30:7a:03:d1:07:07:55:fd:aa:60:6e:42:74:cf:
4c:88:0b:6e:15:bc:bf:62:ac:df:45:1c:f6:27:3a:
2a:e1:ca:f5:f5:b5:09:8b:8d:df:d5:83:f0:c5:09:
e4:56:67:5b:45:5c:c8:ea:24:03:54:c3:b7:2d:63:
1a:67:3f:f7:73:d5:82:7e:bd:8e:be:e2:7d:8c:7a:
0c:d4:65:3c:7b:33:41:56:70:80:e0:d3:c1:40:78:
52:95:81:38:e0:72:88:74:c0:89:30:c3:09:b9:39:
ab:89:79:52:40:32:c5:07:d8:ed:4b:49:6b:20:db:
65:87:67:e3:e1:29:c8:94:8e:0c:33:bb:eb:52:21:
83:5c:a0:a5:2c:2b:f1:f7:d7:76:eb:5c:3b:a9:9c:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:7E:78:62:96:0D:AD:E5:36:13:1D:34:32:17:A9:23:EF:7E:08
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/CC15C4C08AC011F19E9BC601CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.134.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a0:a2:db:4d:05:f1:52:4c:0a:87:8e:17:4a:25:d7:71:a2:
76:f4:f5:d7:45:e6:08:aa:97:d8:7f:3e:00:d9:41:68:1a:7e:
b9:d1:89:0f:70:8a:43:78:ca:1c:11:a0:65:0f:68:4e:3f:08:
0b:9c:02:d9:9c:72:27:ab:a9:0b:cd:7e:f2:4d:11:9b:49:ff:
94:db:e3:2b:21:da:ba:8d:33:fd:66:d7:cb:f2:5c:22:ec:5f:
d7:ef:a6:ea:e4:92:89:ef:c6:37:19:ce:1a:0d:c1:f1:d4:51:
f3:bc:f7:1e:6e:6a:04:5e:2e:79:89:85:4c:e6:d8:13:ed:be:
86:30:51:1e:80:f3:5b:3b:ca:1f:f6:09:d7:49:18:fd:97:28:
55:24:14:76:f7:e6:6a:0c:3c:be:29:3f:e0:19:04:7b:f5:2a:
3c:ba:9a:23:9b:3e:30:09:ca:16:3e:77:5a:50:0f:17:df:df:
b8:9e:d7:24:f1:ac:36:5f:3c:a5:0f:16:e0:5c:13:6f:9b:d7:
cc:34:17:84:19:d0:0f:9b:1a:12:9d:0f:56:ee:01:1a:dd:f4:
d1:f9:d7:6d:95:18:7c:a6:70:95:68:58:48:e6:50:7f:28:36:
7b:f8:f5:9b:ab:92:17:8e:0f:7b:6d:96:8a:78:75:08:7a:ae:
17:ba:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:43 2026 by rpki-client