Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/7171857C898A11F1975FC0A7CE1D38B0.roa
File: 7171857C898A11F1975FC0A7CE1D38B0.roa (raw, json)
Hash identifier: aIWaULOciWlOFlIItS1L2/uFnskyMEc00BLY1a7EVWk=
Subject key identifier: 7A:E2:DE:F2:31:A1:A4:48:5A:9F:00:BD:15:91:BB:07:DA:38:92:93
Certificate issuer: /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial: 0693
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/7171857C898A11F1975FC0A7CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:11:53 +0000
ROA not before: Mon 27 Jul 2026 07:11:49 +0000
ROA not after: Mon 01 Feb 2027 07:11:49 +0000
asID: 29286
IP address blocks: 102.68.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Validity
Not Before: Jul 27 07:11:49 2026 GMT
Not After : Feb 1 07:11:49 2027 GMT
Subject: CN=6a6704b9-3dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:1d:4c:f1:a4:58:94:06:d6:d7:39:60:50:
fd:a1:1f:b5:e6:fd:9a:ee:34:10:da:9b:3e:91:ee:
56:c7:68:7e:61:0c:96:3e:a0:20:9d:45:b3:f8:df:
e6:f8:17:24:d5:07:fd:b8:0d:74:29:8d:60:c6:12:
9c:2b:c4:01:a4:69:d8:e8:42:75:2c:88:91:d6:4e:
2a:13:cd:4a:3e:3d:6f:4f:94:7c:63:9d:7a:74:94:
e1:8b:1f:61:4f:1c:aa:43:a9:4d:46:57:59:9e:26:
e8:f8:82:58:b8:70:0c:2b:1e:fa:99:ec:72:11:60:
8a:80:04:e0:fc:31:a3:28:8b:ab:54:7d:dc:c1:eb:
b2:9b:3d:15:b4:94:83:98:5b:77:64:1d:20:c1:8c:
94:a9:6d:f8:8e:c3:b2:77:9d:8c:51:8a:fb:ca:4f:
db:02:65:8a:9b:a5:09:07:05:85:10:94:0d:3f:4b:
c5:b1:a1:dd:a8:cd:cb:5e:07:f5:e3:03:10:f8:d7:
17:02:80:f7:d8:77:a0:32:20:86:1a:98:e1:90:e1:
5a:8e:62:e1:59:41:ac:7e:e9:2d:28:30:73:f1:8a:
95:4b:4f:e4:b6:7e:02:fa:d1:5b:87:42:c8:70:53:
da:f6:56:74:72:bf:68:35:7d:56:d2:b6:25:84:ce:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:DE:F2:31:A1:A4:48:5A:9F:00:BD:15:91:BB:07:DA:38:92:93
X509v3 Authority Key Identifier:
keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/7171857C898A11F1975FC0A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fa:0a:06:f2:b2:35:e7:ca:40:a5:bd:d4:eb:d8:3c:69:fa:
6c:5a:a1:ea:cb:e1:f6:be:10:ac:6b:4c:2e:1f:ed:cd:95:fe:
7d:b7:5c:5c:af:ff:47:57:85:52:4c:4f:7d:39:e5:f9:e6:f1:
7e:dd:66:15:a2:c5:da:e9:8a:17:6e:10:2a:08:1c:b5:21:f3:
93:ad:9a:12:f5:85:14:a4:bc:5e:b0:28:cb:9b:ee:f9:b7:b5:
07:e7:3b:b1:2c:ef:59:06:78:20:1e:ca:c3:be:02:34:6d:62:
10:f5:69:0e:44:98:e6:7c:3d:c5:d5:35:28:33:66:23:42:83:
b2:63:82:e0:9e:8b:86:c5:36:a9:e3:67:82:90:95:60:43:98:
03:bc:82:8e:01:a9:8b:96:2b:38:27:4a:54:5f:62:d9:99:70:
ad:d2:91:86:ad:bd:28:4c:17:8a:ae:da:96:09:cb:a0:6d:87:
82:e6:b4:3f:ba:8e:c7:b0:75:1a:89:4d:d4:1e:8a:4b:45:34:
21:4c:2b:43:e3:08:3a:87:f9:0d:dd:9e:99:90:be:63:d7:07:
99:10:a8:85:fc:27:ec:18:d9:68:50:fb:3a:f4:38:86:10:90:
fa:f2:62:81:d4:e4:db:6e:26:cb:37:36:8f:ec:f3:7d:43:c6:
35:92:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:25:09 2026 by rpki-client