Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/89E60F3C89B811F185F420BBCE1D38B0.roa
File: 89E60F3C89B811F185F420BBCE1D38B0.roa (raw, json)
Hash identifier: Rv4f4ZmJTdGNDrLajdUK1DgGO7hQgjxeaLoFNpNCpzg=
Subject key identifier: 57:2A:95:1A:D9:B9:48:F1:00:26:B4:EB:CB:C4:99:0E:C9:2A:AF:45
Certificate issuer: /CN=F361B712AF/serialNumber=FA4C0AFFC89B64F3814B664081AF26C3D47787E7
Certificate serial: 02
Authority key identifier: FA:4C:0A:FF:C8:9B:64:F3:81:4B:66:40:81:AF:26:C3:D4:77:87:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kwK_8ibZPOBS2ZAga8mw9R3h-c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/89E60F3C89B811F185F420BBCE1D38B0.roa
Signing time: Mon 27 Jul 2026 12:41:51 +0000
ROA not before: Mon 27 Jul 2026 12:41:47 +0000
ROA not after: Wed 31 Dec 2036 12:41:47 +0000
asID: 329131
IP address blocks: 102.214.185.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.mft
rsync://rpki.afrinic.net/repository/afrinic/-kwK_8ibZPOBS2ZAga8mw9R3h-c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B712AF, serialNumber=FA4C0AFFC89B64F3814B664081AF26C3D47787E7
Validity
Not Before: Jul 27 12:41:47 2026 GMT
Not After : Dec 31 12:41:47 2036 GMT
Subject: CN=6a67520f-b1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:c1:fe:8d:66:03:4e:77:96:49:6d:1c:2b:
7f:bb:24:ae:3e:77:8f:b2:9e:7b:00:db:2f:c7:a1:
d8:19:f3:32:45:d1:66:13:2a:a8:ed:24:56:5e:eb:
a6:de:cf:a4:b5:78:37:93:30:d2:6f:3a:c8:5a:ce:
19:01:89:ed:54:ce:dc:f3:12:35:9f:15:e9:05:55:
d0:06:e8:d2:c7:c7:8a:4b:77:1b:a3:91:ea:f4:42:
ff:9b:12:3d:49:78:7f:86:06:22:06:7a:40:af:4f:
a3:60:7e:25:89:d8:66:fb:aa:70:32:c7:d1:af:02:
f2:ad:92:f3:67:b2:69:25:33:7e:6e:13:be:83:91:
a3:81:b1:b2:c7:8f:0e:e9:14:dc:9c:39:6e:09:53:
4a:22:c1:ed:ce:f2:d9:01:16:de:65:23:8a:ff:ba:
d9:2e:1e:c0:75:3e:f3:bb:6a:0f:69:01:88:d7:f4:
1c:81:6f:1d:91:8e:79:08:fc:36:96:f5:d6:62:73:
6d:af:c3:17:35:8f:0c:d0:31:c1:47:8d:91:37:2e:
74:8e:5b:e7:1a:82:2e:3a:1d:93:90:da:40:49:9d:
88:70:89:d8:f1:df:2f:60:93:25:d4:a5:b8:1b:ff:
b3:1c:11:80:87:ee:ac:1b:23:0d:ff:00:0b:8f:fc:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:95:1A:D9:B9:48:F1:00:26:B4:EB:CB:C4:99:0E:C9:2A:AF:45
X509v3 Authority Key Identifier:
keyid:FA:4C:0A:FF:C8:9B:64:F3:81:4B:66:40:81:AF:26:C3:D4:77:87:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kwK_8ibZPOBS2ZAga8mw9R3h-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/89E60F3C89B811F185F420BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.185.0/24
Signature Algorithm: sha256WithRSAEncryption
00:51:a4:8f:d9:72:8e:e6:ad:c8:25:0b:b7:35:e1:07:99:2b:
85:95:c1:f6:0c:30:eb:bb:89:f0:cf:dc:87:5b:19:1c:8d:f3:
60:71:35:90:de:a3:b0:ea:40:f7:3b:06:b1:fa:f5:92:d3:ea:
55:3a:63:bd:e6:5d:9a:a6:f0:c7:13:39:db:2f:3d:a2:da:48:
8a:46:4d:fc:6d:a0:f8:9f:ab:78:25:bc:f5:81:51:89:2b:df:
43:47:6b:4e:32:3f:0b:ab:ed:80:9d:2f:6d:c3:f5:0c:e9:07:
ff:1c:8b:a3:b5:df:3e:48:39:cf:f9:14:b0:65:06:4e:a9:98:
df:06:09:a8:a1:5a:39:35:90:3a:5f:b5:04:1f:34:88:02:7c:
a7:e6:9f:0a:94:a8:54:56:de:56:73:1b:d4:b4:35:85:b0:54:
49:e8:2f:34:29:3e:0a:8b:b7:f5:4f:de:c0:2a:1b:e9:0e:f0:
ac:58:7a:ba:39:88:bd:c3:a8:f1:4b:21:a2:cf:88:16:c4:73:
ca:d8:d4:12:c1:02:b0:ba:10:32:c9:d5:ed:aa:86:9a:db:af:
cf:e9:ef:5f:92:a5:af:fc:a2:79:ef:cc:17:db:34:d6:92:93:
67:e9:a0:99:cf:39:f1:a3:60:ba:b0:4e:96:01:d8:a6:83:d3:
5a:a0:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:49 2026 by rpki-client