Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/276941508A5B11F184038BA4CE1D38B0.roa
File: 276941508A5B11F184038BA4CE1D38B0.roa (raw, json)
Hash identifier: 8Lur71HSXtruAQrQk3ojkG+TOypBkD0fVphqS4aVw5k=
Subject key identifier: 68:04:ED:75:B1:01:E8:CB:4F:80:DE:D8:BC:FB:BA:8C:82:4F:E4:1B
Certificate issuer: /CN=F364B7D8AF/serialNumber=8186838A489160C821B8CFFC5D02740FB2653C6C
Certificate serial: 02
Authority key identifier: 81:86:83:8A:48:91:60:C8:21:B8:CF:FC:5D:02:74:0F:B2:65:3C:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/276941508A5B11F184038BA4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 08:05:54 +0000
ROA not before: Tue 28 Jul 2026 08:05:50 +0000
ROA not after: Fri 28 Jul 2028 08:05:50 +0000
asID: 329778
IP address blocks: 102.201.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft
rsync://rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364B7D8AF, serialNumber=8186838A489160C821B8CFFC5D02740FB2653C6C
Validity
Not Before: Jul 28 08:05:50 2026 GMT
Not After : Jul 28 08:05:50 2028 GMT
Subject: CN=6a6862e1-8750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:23:2a:86:0b:e5:04:09:32:52:e7:27:9f:
6f:e8:20:65:bb:75:53:b7:71:4d:95:7a:bd:28:ec:
45:62:ed:33:2e:c9:09:1d:d7:ec:d1:f0:99:3e:15:
86:b4:25:1d:5d:3c:6a:f4:52:f4:3c:e0:07:39:62:
30:3c:8a:47:2f:4e:76:e4:35:ba:9a:a1:ec:3a:0f:
fd:64:7f:b0:c5:3e:cd:65:c4:94:57:bd:aa:e2:f3:
b7:ad:6a:47:7c:24:c9:61:3f:ad:43:5c:f9:20:24:
32:97:34:bd:b1:11:43:da:3d:dd:d6:ea:01:6c:68:
ed:24:02:fc:12:fc:53:ed:93:a9:ae:19:89:c3:4c:
f3:ff:38:e6:ce:30:3c:91:52:ab:2c:2e:ff:d9:19:
1e:73:6c:5b:a4:7a:05:8b:ce:e8:d5:a7:92:76:bc:
99:60:5d:54:0f:9a:ba:92:3d:8c:2d:a2:63:0c:f0:
39:64:28:ce:3a:02:21:3c:d4:69:14:f3:45:15:0b:
73:ba:de:9b:f0:e9:91:96:f2:c9:f8:f7:a6:9a:40:
fc:86:a4:84:1e:83:1e:e5:6b:e0:8a:d8:c1:60:e6:
f0:b0:6e:9a:8f:be:ff:72:73:31:88:cc:f5:33:0a:
32:da:f2:4f:f1:5e:7b:9d:89:07:c9:b7:09:cf:d3:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:ED:75:B1:01:E8:CB:4F:80:DE:D8:BC:FB:BA:8C:82:4F:E4:1B
X509v3 Authority Key Identifier:
keyid:81:86:83:8A:48:91:60:C8:21:B8:CF:FC:5D:02:74:0F:B2:65:3C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/276941508A5B11F184038BA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.201.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:45:95:39:5a:65:bb:de:b3:42:73:74:e8:7d:11:74:a5:b0:
94:ac:4f:49:64:8f:20:2c:10:9c:fc:ba:bf:67:8d:08:d6:77:
b4:8d:19:58:f5:29:ea:8a:8b:db:6d:18:dd:1c:89:eb:24:bc:
8c:be:83:c8:87:f1:46:3d:18:9c:f4:a3:dc:15:6c:c2:51:33:
fa:a4:42:47:6c:66:44:88:01:01:3a:57:98:9e:37:f9:4d:05:
e9:98:9a:27:e5:96:f0:f3:ff:db:d9:62:90:e9:c2:25:e7:88:
9b:13:a9:c0:c4:09:ea:47:cb:82:b6:f8:14:ae:2f:7d:0c:d4:
39:e3:3e:2d:70:2a:d4:de:e6:7b:d1:5c:e2:b2:a2:ff:26:8b:
95:22:e5:2b:f4:c2:d9:ff:5e:2b:31:51:19:64:7b:81:68:40:
1e:70:55:45:5c:74:5a:ad:10:2c:2a:ea:40:4c:65:8f:4a:3e:
d7:70:e9:dd:8d:b0:1a:29:9c:73:64:22:c5:81:32:43:3e:f4:
ac:65:be:38:bf:99:87:17:c2:53:d5:23:aa:2b:7a:7a:a9:f0:
f1:e6:5a:28:c9:0a:55:34:21:8d:fc:0b:77:c2:9f:19:cc:bd:
68:46:fe:41:75:ce:97:e3:2d:d7:3e:80:9c:a0:5b:4f:80:27:
63:61:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:11:18 2026 by rpki-client