Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/2D2BA23C89D311F1B0B823D8CE1D38B0.roa
File: 2D2BA23C89D311F1B0B823D8CE1D38B0.roa (raw, json)
Hash identifier: WHUX0r+IRyGxdKLqa0mlODIy/1WMY6+wx87ohyoAYsk=
Subject key identifier: 84:B4:7D:C4:CE:40:E7:B9:23:BF:73:F4:FE:54:4B:03:FE:E4:56:D3
Certificate issuer: /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial: 071B
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/2D2BA23C89D311F1B0B823D8CE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:52:32 +0000
ROA not before: Mon 27 Jul 2026 15:52:28 +0000
ROA not after: Sun 21 Sep 2031 15:52:28 +0000
asID: 60171
IP address blocks: 102.220.216.0/22 maxlen: 24
2c0f:1d00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623C86AF, serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Validity
Not Before: Jul 27 15:52:28 2026 GMT
Not After : Sep 21 15:52:28 2031 GMT
Subject: CN=6a677ec0-fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:25:70:a1:ca:84:7e:23:05:ed:aa:ff:dc:
09:2c:af:85:df:ef:d3:33:90:80:d4:7f:0a:02:0e:
68:8f:24:95:be:01:4e:b2:1d:84:68:11:ec:e1:8e:
b7:14:23:a6:4f:ea:07:05:83:c9:f6:6b:da:1b:11:
01:bb:f8:dc:00:d1:15:d6:79:ea:a8:11:25:f0:04:
25:7d:c3:4a:40:78:16:42:b4:b2:7a:bc:91:3d:4d:
54:32:56:63:ae:9d:24:45:07:50:bc:f8:87:6e:d8:
d2:de:f2:58:b9:df:96:88:2d:cc:96:8f:ab:a6:f3:
64:92:c8:a5:40:8f:54:6c:04:4a:9c:56:b1:92:1d:
ea:7c:c8:81:e5:d3:c0:07:08:24:90:f2:6c:9b:5f:
0d:f5:84:89:4b:e1:ae:45:f9:74:0f:ec:21:d7:57:
68:bc:ba:ea:61:0c:75:98:2f:7f:0e:47:93:57:11:
77:4a:fd:e5:c1:c6:26:18:7e:c9:ba:5f:4c:fa:f5:
b5:02:27:08:cf:27:72:be:96:7b:7e:7a:84:53:29:
5d:b1:32:41:4d:be:8f:c9:b6:16:ab:3e:f2:2f:53:
ca:26:03:1b:18:be:d6:73:91:46:12:4c:0d:b1:32:
ac:5d:8a:37:bf:b1:3c:ba:6c:b2:80:02:cf:41:35:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:7D:C4:CE:40:E7:B9:23:BF:73:F4:FE:54:4B:03:FE:E4:56:D3
X509v3 Authority Key Identifier:
keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/2D2BA23C89D311F1B0B823D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.216.0/22
IPv6:
2c0f:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
cb:e4:9b:0e:24:73:f5:e9:7e:21:fa:e9:c3:99:f7:ed:d6:a4:
51:74:df:c1:87:0a:fc:c1:27:a1:26:8e:3d:87:b5:75:87:3e:
70:9d:7b:c3:ff:1f:a8:9f:03:a8:44:86:30:8c:76:fd:1b:93:
27:01:1c:c0:0b:2c:33:ed:cc:ea:9e:db:5f:7f:ad:f9:28:bc:
e9:b3:10:49:63:e6:37:9b:54:1d:88:3f:3b:ae:1c:28:b3:29:
67:c6:e5:9f:14:96:01:a8:34:98:1c:24:a1:fe:da:e1:9f:4f:
7b:33:bb:7b:14:52:6a:ba:a7:4d:d0:bc:7e:f9:91:05:e7:2b:
7d:89:5a:98:fa:a1:08:65:9e:4a:ee:32:21:3b:83:68:a8:a8:
51:eb:1b:5b:93:2b:81:24:d1:3d:ff:68:18:e5:eb:e9:ba:13:
28:d8:8b:7c:7b:91:fd:4b:95:72:12:f5:03:51:55:ea:31:64:
e8:0e:ea:2b:43:02:dd:6b:e3:6c:6e:c7:c4:b8:a0:bc:b4:63:
b6:44:7e:88:c3:cb:3d:e6:76:c5:0c:10:44:c7:ce:0a:db:0c:
9c:46:03:6d:95:10:f2:f2:bf:b4:8d:3f:49:1b:9b:38:74:69:
4a:97:8b:f1:b6:27:86:32:37:0c:9f:cb:49:4e:c7:ec:b1:04:
b3:8b:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:43 2026 by rpki-client