Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/62EEBDC889A111F1A36CB2B1CE1D38B0.roa
File: 62EEBDC889A111F1A36CB2B1CE1D38B0.roa (raw, json)
Hash identifier: /m459TdRSRWfbJUxttNufqFolcq3/ed96zb6shny69E=
Subject key identifier: C7:2A:40:3F:36:8B:B2:5A:8B:48:A2:54:7F:32:9B:C8:03:52:FC:A4
Certificate issuer: /CN=F362E790AF/serialNumber=118B1D26BC17442D1C9CCF8192CC72DC293B604F
Certificate serial: 02
Authority key identifier: 11:8B:1D:26:BC:17:44:2D:1C:9C:CF:81:92:CC:72:DC:29:3B:60:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/62EEBDC889A111F1A36CB2B1CE1D38B0.roa
Signing time: Mon 27 Jul 2026 09:56:07 +0000
ROA not before: Mon 27 Jul 2026 09:56:03 +0000
ROA not after: Sun 27 Jul 2036 09:56:03 +0000
asID: 37305
IP address blocks: 41.79.8.0/22 maxlen: 24
102.212.132.0/22 maxlen: 24
197.231.176.0/21 maxlen: 24
2c0f:fc70::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E790AF, serialNumber=118B1D26BC17442D1C9CCF8192CC72DC293B604F
Validity
Not Before: Jul 27 09:56:03 2026 GMT
Not After : Jul 27 09:56:03 2036 GMT
Subject: CN=6a672b37-a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:93:a0:31:11:ba:6e:50:dd:61:22:fc:39:
22:6c:84:30:04:d2:63:98:93:34:7b:b3:aa:a4:52:
ed:55:18:30:60:82:d4:6f:eb:15:99:1d:cb:72:0a:
1a:2e:82:d2:6a:d9:d6:dc:26:fd:5a:4f:95:bd:fd:
0d:8f:9c:21:22:e7:dc:e3:bd:8d:0b:33:7a:1e:15:
f3:9b:e3:46:62:15:8a:4e:5f:5a:46:35:c9:b4:4d:
66:65:25:f4:0d:ab:56:b2:c7:ef:89:db:c6:d5:67:
93:37:40:86:e7:50:13:de:97:41:b8:09:1c:47:22:
93:4c:ec:72:0c:a1:b1:cc:30:b7:c2:21:7f:fc:a7:
8d:e4:70:b5:71:aa:e3:9e:c3:ff:c3:03:dc:fc:51:
f2:53:f3:9d:2b:8c:ad:ee:9a:ea:70:64:3a:36:10:
32:55:00:00:8f:73:d1:ce:bd:aa:53:0f:b1:57:b2:
c7:bd:dc:71:f0:c0:43:a0:64:e8:33:14:8a:f7:b3:
83:35:1a:c6:57:d1:e9:51:31:ff:20:63:77:d4:25:
95:51:02:f3:b6:9f:20:58:5c:08:5d:ad:60:6a:3b:
10:58:61:17:f1:d4:f6:29:e9:6d:59:cb:d0:7e:26:
bd:bf:34:8d:e1:e4:88:8d:c8:93:9a:ea:ca:50:9b:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:40:3F:36:8B:B2:5A:8B:48:A2:54:7F:32:9B:C8:03:52:FC:A4
X509v3 Authority Key Identifier:
keyid:11:8B:1D:26:BC:17:44:2D:1C:9C:CF:81:92:CC:72:DC:29:3B:60:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/62EEBDC889A111F1A36CB2B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.8.0/22
102.212.132.0/22
197.231.176.0/21
IPv6:
2c0f:fc70::/32
Signature Algorithm: sha256WithRSAEncryption
31:ed:37:42:d9:5e:fa:56:24:93:b1:46:0f:53:be:d5:a5:f0:
d3:b5:ec:48:d1:9f:f0:10:af:29:67:33:0e:2a:12:5d:9e:6e:
aa:1f:69:81:f6:2c:f2:7b:ae:52:fb:94:6c:76:47:64:4c:f6:
02:69:7b:46:26:22:a5:83:c1:59:b5:57:00:45:51:f4:8a:ab:
54:5f:0c:15:c5:fd:e8:04:88:05:54:70:8c:ff:36:d4:10:cf:
3d:53:c5:36:70:bc:75:f1:8a:69:6e:92:bd:fc:9c:3d:3f:0e:
d5:31:07:99:71:b5:5f:5c:91:89:79:15:0d:8b:b0:d9:49:ff:
2e:b7:c5:d9:72:2a:c7:41:9a:ad:58:de:f1:33:3a:00:9a:d0:
3e:ee:91:4d:01:84:bf:ec:c2:4e:2b:46:9b:da:3e:9b:9a:f8:
7b:e1:89:29:fe:34:20:9d:90:13:14:a5:d1:4f:0b:b6:f6:0b:
89:53:8e:38:38:6f:77:c8:15:55:34:7f:23:58:6f:55:3d:64:
b6:07:b1:de:46:43:dc:8f:ef:43:45:b1:54:80:0f:6c:31:b9:
80:02:0f:db:85:84:3a:4c:dc:fb:66:9b:62:c1:ea:c6:c2:a7:
0d:ce:36:74:be:bf:27:29:d0:66:3e:0f:34:3c:cf:6f:dd:55:
d9:ec:dd:67
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RTc5MEFGMTEwLwYDVQQFEygxMThCMUQyNkJDMTc0NDJEMUM5Q0NGODE5MkNDNzJE
QzI5M0I2MDRGMB4XDTI2MDcyNzA5NTYwM1oXDTM2MDcyNzA5NTYwM1owGDEWMBQG
A1UEAxMNNmE2NzJiMzctYTZlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM+wk6AxEbpuUN1hIvw5ImyEMATSY5iTNHuzqqRS7VUYMGCC1G/rFZkdy3IK
Gi6C0mrZ1twm/VpPlb39DY+cISLn3OO9jQszeh4V85vjRmIVik5fWkY1ybRNZmUl
9A2rVrLH74nbxtVnkzdAhudQE96XQbgJHEcik0zscgyhscwwt8Ihf/ynjeRwtXGq
457D/8MD3PxR8lPznSuMre6a6nBkOjYQMlUAAI9z0c69qlMPsVeyx73ccfDAQ6Bk
6DMUivezgzUaxlfR6VEx/yBjd9QllVEC87afIFhcCF2tYGo7EFhhF/HU9inpbVnL
0H4mvb80jeHkiI3Ik5rqylCbOrkCAwEAAaOCAsAwggK8MB0GA1UdDgQWBBTHKkA/
NouyWotIolR/MpvIA1L8pDAfBgNVHSMEGDAWgBQRix0mvBdELRycz4GSzHLcKTtg
TzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkU3OTAvMkJERDY0OEU4OUEwMTFGMUIyQTY4OEE5Q0UxRDM4QjAvRVlzZEpy
d1hSQzBjbk0tQmtzeHkzQ2s3WUU4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRVlzZEpyd1hSQzBjbk0tQmtzeHkzQ2s3WUU4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkU3OTAvMkJERDY0OEU4OUEwMTFGMUIyQTY4OEE5Q0Ux
RDM4QjAvNjJFRUJEQzg4OUExMTFGMUEzNkNCMkIxQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAilPCAMEAmbUhAMEA8XnsDAN
BAIAAjAHAwUALA/8cDANBgkqhkiG9w0BAQsFAAOCAQEAMe03Qtle+lYkk7FGD1O+
1aXw07XsSNGf8BCvKWczDioSXZ5uqh9pgfYs8nuuUvuUbHZHZEz2Aml7RiYipYPB
WbVXAEVR9IqrVF8MFcX96ASIBVRwjP821BDPPVPFNnC8dfGKaW6SvfycPT8O1TEH
mXG1X1yRiXkVDYuw2Un/LrfF2XIqx0GarVje8TM6AJrQPu6RTQGEv+zCTitGm9o+
m5r4e+GJKf40IJ2QExSl0U8LtvYLiVOOODhvd8gVVTR/I1hvVT1ktgex3kZD3I/v
Q0WxVIAPbDG5gAIP24WEOkzc+2abYsHqxsKnDc42dL6/JynQZj4PNDzPb91V2ezd
Zw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:15:22 2026 by rpki-client