Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/688E149A89D311F1853307DACE1D38B0.roa
File: 688E149A89D311F1853307DACE1D38B0.roa (raw, json)
Hash identifier: LKCFkhc2f3sYp0TME94TAWq27rIEBJpS5lpd1U+d6z8=
Subject key identifier: 71:8C:6D:5D:44:5C:CF:F5:D4:43:5F:2E:4A:76:E8:B0:25:6B:B7:32
Certificate issuer: /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial: 071D
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/688E149A89D311F1853307DACE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:54:11 +0000
ROA not before: Mon 27 Jul 2026 15:54:07 +0000
ROA not after: Mon 25 Jul 2033 15:54:07 +0000
asID: 60171
IP address blocks: 102.211.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623C86AF, serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Validity
Not Before: Jul 27 15:54:07 2026 GMT
Not After : Jul 25 15:54:07 2033 GMT
Subject: CN=6a677f23-421c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:c1:1d:9b:7a:fd:d6:dd:6b:4b:ad:69:34:
b0:a5:ae:6e:04:22:05:3a:71:fc:4a:85:0e:05:ba:
55:17:b4:a6:a1:7e:13:ce:5e:77:39:cc:c4:6d:8d:
b9:c4:c8:92:43:38:34:d3:9e:39:f8:7c:e9:ec:28:
b2:9e:37:ca:b4:85:aa:09:09:e8:ad:77:c2:35:c0:
4c:3f:5d:0d:f3:43:61:b8:9d:a9:6f:10:8e:7f:4d:
14:20:ff:d2:72:96:31:83:e5:fd:c6:ae:4f:b7:e9:
91:d7:3c:30:d1:84:03:5d:a9:71:e8:ee:ae:df:7f:
d1:c7:21:17:19:cd:7f:e3:b0:4a:25:e1:34:36:75:
1b:2c:7f:54:3d:8e:7a:73:f9:83:37:84:09:b9:bf:
d7:2c:e7:41:41:e8:05:d1:6c:7a:10:23:9d:1f:31:
72:cb:53:05:6a:11:22:9b:7d:34:99:da:ba:ca:2e:
48:0a:78:57:e5:df:2e:7b:07:ab:65:92:b7:5d:37:
e0:41:ee:15:8a:0c:20:1f:23:b5:a1:16:14:11:67:
b0:83:10:72:fc:9e:6c:75:f8:55:78:d4:13:77:ba:
67:40:29:fc:24:55:3c:32:f2:40:16:18:78:75:c6:
55:ef:36:29:eb:a2:e2:a6:1d:95:cf:08:48:58:f1:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:6D:5D:44:5C:CF:F5:D4:43:5F:2E:4A:76:E8:B0:25:6B:B7:32
X509v3 Authority Key Identifier:
keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/688E149A89D311F1853307DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.176.0/22
Signature Algorithm: sha256WithRSAEncryption
34:8a:d9:03:5a:9d:59:ed:da:d3:df:c5:fc:af:06:51:57:9a:
01:3c:63:bf:40:49:84:a4:25:e5:e3:45:3f:17:85:52:c4:08:
18:b5:4d:87:67:8b:49:32:7e:4b:3b:19:fd:c3:8a:8e:ac:e4:
fd:73:3a:3c:07:ca:e0:8b:aa:c7:64:d3:c3:4a:15:3f:da:0b:
39:b3:82:e5:4f:61:69:15:7c:44:4f:26:71:79:2c:c9:69:06:
91:5f:58:4c:7d:23:e0:03:92:61:ba:91:2b:5e:3c:a2:3f:d2:
ce:81:22:cf:80:9a:aa:99:f7:67:7d:af:5d:bf:56:59:cd:be:
0f:7c:91:cf:fa:c1:8c:78:ce:31:97:5e:f0:d9:b0:3e:08:02:
4d:d1:74:77:61:bf:56:c4:d6:99:f3:75:1f:46:34:64:64:94:
97:e6:95:75:3d:e8:ab:7c:af:eb:b4:53:11:37:4e:b4:cf:b5:
8b:08:74:88:55:24:80:fc:f7:de:90:96:1f:40:fb:9f:bb:e4:
e6:30:b6:69:e9:be:c0:cb:d1:a2:28:45:04:51:7b:55:89:eb:
6f:f9:88:39:07:ed:50:1f:cf:3c:75:eb:30:2f:60:85:13:1e:
e1:8c:74:48:69:cd:a6:99:23:93:0e:c0:8e:4d:eb:6a:56:99:
3b:3e:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:08 2026 by rpki-client