Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/87675666899111F1B73FDCD0CE1D38B0.roa
File: 87675666899111F1B73FDCD0CE1D38B0.roa (raw, json)
Hash identifier: j0dDpHDCyd3irtKZ064tfJvyJ2XVkWYuwGqGdIwyFX4=
Subject key identifier: 31:F4:3F:98:2C:AA:25:18:D0:51:23:56:F7:C0:CE:22:42:0C:7D:CB
Certificate issuer: /CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Certificate serial: 07D5
Authority key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/87675666899111F1B73FDCD0CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:02:36 +0000
ROA not before: Mon 27 Jul 2026 08:02:32 +0000
ROA not after: Fri 31 Dec 2049 08:02:32 +0000
asID: 328475
IP address blocks: 102.69.224.0/21 maxlen: 24
102.217.128.0/22 maxlen: 24
102.218.232.0/22 maxlen: 24
102.220.36.0/22 maxlen: 24
2c0f:e818::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361F5C9AF, serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Validity
Not Before: Jul 27 08:02:32 2026 GMT
Not After : Dec 31 08:02:32 2049 GMT
Subject: CN=6a67109c-535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:0d:3f:df:d5:92:bf:77:8f:51:d9:84:b1:
0d:c5:a9:73:77:d3:f2:66:38:ee:91:32:3c:31:60:
cd:76:47:6d:10:74:4f:ad:97:31:07:fb:34:f6:85:
a8:b4:04:54:f1:59:91:1a:95:ca:44:be:d2:d9:8e:
b4:91:24:8e:22:1c:d7:96:de:a2:d2:44:7b:f2:2b:
0e:1e:2b:eb:26:88:2d:3a:39:0b:7e:95:4e:a0:97:
58:71:eb:70:b0:0f:33:6e:45:52:b5:20:b6:14:d0:
78:64:c7:28:87:d2:40:02:dd:57:d5:a7:e3:98:86:
1c:db:ac:56:f1:1d:79:56:48:53:d9:13:a8:08:65:
da:44:05:2d:82:5c:e1:6a:ed:5c:9d:b6:df:b8:12:
7e:d2:e3:35:eb:b8:da:8f:57:ab:58:9d:22:51:bf:
0c:78:39:5e:bb:35:3d:c0:86:5b:6c:c2:47:f1:65:
1f:3b:bc:11:fd:1d:a8:12:cf:5f:e5:f6:01:6b:9b:
73:ec:ef:2a:02:ae:15:47:d9:76:c1:30:ee:c7:d5:
93:b0:5d:d5:8c:c6:9f:d3:16:61:bf:50:97:42:d4:
95:f4:00:4c:da:92:6d:cd:3c:38:e6:6e:1c:f7:9e:
07:72:f4:63:89:dd:f5:55:fa:1c:eb:71:13:be:af:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:3F:98:2C:AA:25:18:D0:51:23:56:F7:C0:CE:22:42:0C:7D:CB
X509v3 Authority Key Identifier:
keyid:B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/87675666899111F1B73FDCD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.224.0/21
102.217.128.0/22
102.218.232.0/22
102.220.36.0/22
IPv6:
2c0f:e818::/32
Signature Algorithm: sha256WithRSAEncryption
40:b6:31:4d:4e:fc:0f:1c:c9:3f:df:38:55:62:d3:28:4f:1e:
45:e5:f3:e3:ed:8c:c9:ab:c0:47:6a:d5:8a:72:86:c2:ad:3f:
14:35:9f:a6:8d:d4:b7:90:c9:18:5c:6b:ff:cd:47:b1:68:cb:
e4:a7:e2:4d:c6:9e:de:68:fc:87:9f:71:1c:73:ef:c5:a0:6e:
36:da:f6:e8:ab:fc:bd:86:4f:eb:7a:29:48:11:43:aa:4c:64:
85:7f:59:62:e8:e1:13:15:51:cd:a7:16:9b:59:fb:71:f9:bc:
2b:09:62:ff:fd:cc:c7:64:27:9b:3c:b7:68:97:31:7b:ec:01:
8e:de:cf:be:76:cc:64:95:13:08:f3:c7:76:5a:80:e3:11:63:
e5:0c:2b:0c:3c:a0:34:5c:55:83:46:41:e6:de:1c:b8:20:69:
11:d0:28:57:8c:7c:e1:fa:d5:6c:49:74:b9:0d:f6:5c:22:b7:
57:dc:ca:1a:7d:d7:6e:61:74:cb:b8:4b:85:fb:02:e6:46:fa:
7e:1c:ff:6a:48:f6:89:23:44:58:69:6c:c8:0b:ba:e1:81:bb:
73:f3:20:6b:60:2c:0c:4d:10:54:a3:54:82:0e:0c:c4:17:a7:
fc:b7:51:82:a7:d3:08:55:13:83:41:73:2f:d1:07:23:74:ea:
40:eb:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:00 2026 by rpki-client