Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/D71B62A28A4E11F1B606C7D7CE1D38B0.roa
File: D71B62A28A4E11F1B606C7D7CE1D38B0.roa (raw, json)
Hash identifier: KR4X6gtcRk+5VuKUYUA4G1pQskL0suzWflfpye7zrSA=
Subject key identifier: 4F:23:7C:7E:42:78:2A:C9:F7:89:9F:E3:A5:B8:35:39:CF:DD:7E:88
Certificate issuer: /CN=F3664F7BAF/serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Certificate serial: 04
Authority key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/D71B62A28A4E11F1B606C7D7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:37:45 +0000
ROA not before: Tue 28 Jul 2026 06:37:41 +0000
ROA not after: Mon 28 Jul 2031 06:37:41 +0000
asID: 328388
IP address blocks: 102.204.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Validity
Not Before: Jul 28 06:37:41 2026 GMT
Not After : Jul 28 06:37:41 2031 GMT
Subject: CN=6a684e39-0f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:2d:1c:d0:de:f6:8f:9b:67:1a:7f:04:fb:
0d:ba:f7:ea:18:4e:30:ce:67:e1:75:fc:7a:10:f5:
c9:eb:b4:37:30:a1:4b:63:2a:e3:79:d8:0b:bd:f9:
57:e0:09:24:f6:27:30:f4:e8:15:3a:b2:de:eb:8e:
ae:c4:a5:79:67:22:22:a9:9a:d2:2d:66:13:69:d8:
6f:12:9a:8c:67:ff:5f:81:ae:50:30:cd:27:83:fd:
7c:c8:61:cb:74:d7:e2:e1:41:c4:67:e9:0a:e9:fa:
61:c4:ff:a0:e8:81:be:14:c7:20:8a:a2:b9:d5:2d:
84:fa:bd:38:18:98:23:8c:62:3b:35:f4:8c:94:d0:
9a:34:8d:c9:88:9b:4c:0f:85:e6:37:ed:03:a1:7c:
6d:a3:04:c3:6f:ff:03:33:3b:2a:1b:79:71:89:60:
ac:64:4a:c4:7c:d9:22:53:b7:78:6b:2b:3f:89:e1:
b3:92:87:25:81:16:94:71:bd:a3:ac:14:7c:63:26:
95:e8:f3:30:44:ad:3b:5e:0b:37:40:c6:c2:7e:1f:
8b:4f:b2:a5:2e:50:e2:c3:38:ab:da:1a:11:3d:3f:
71:a0:96:8d:cb:80:1a:10:52:76:91:e6:d9:c0:94:
ec:e4:02:96:a6:86:d2:8c:9b:7e:90:c1:6f:e4:e1:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:7C:7E:42:78:2A:C9:F7:89:9F:E3:A5:B8:35:39:CF:DD:7E:88
X509v3 Authority Key Identifier:
keyid:5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/D71B62A28A4E11F1B606C7D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.224.0/22
Signature Algorithm: sha256WithRSAEncryption
35:dd:f3:f3:c6:0f:c4:6a:99:55:0f:b1:22:af:a0:70:cb:c2:
e0:0a:a0:8b:15:b3:03:0c:63:7b:48:85:86:b3:92:84:2e:4c:
89:21:8f:00:dc:e7:27:fb:ef:36:da:67:02:99:31:db:66:3b:
0d:1b:9e:10:a0:2f:68:20:1f:a6:15:18:e9:50:77:c0:94:ab:
06:f7:a5:85:c3:9f:5c:e8:53:1d:f3:b8:8c:a2:10:a1:2e:75:
8e:89:0d:bb:76:97:37:24:05:6b:89:51:2c:d7:1e:3b:1e:1a:
a1:86:82:df:ef:ec:01:cf:6d:45:52:32:dd:c0:6f:9b:aa:59:
ac:d9:83:3a:29:ac:3b:1b:c0:3b:86:7d:0a:52:e9:a7:27:cf:
bb:4b:88:21:12:7a:08:9f:79:46:36:1c:4c:d0:e8:a9:71:5c:
c4:4f:93:f6:a9:eb:b3:92:28:e2:29:73:0e:a7:c4:be:b4:b0:
e8:86:da:7d:66:3a:1c:62:70:b6:96:a1:5c:52:1d:f8:e8:65:
ec:06:b8:8d:49:4f:8d:ef:e0:e3:a9:7f:57:77:2a:21:3a:e0:
26:a7:8f:16:67:3b:87:6e:fc:d0:c1:00:3e:ce:fe:ae:65:a8:
79:62:29:83:89:9d:bf:43:7a:c6:ab:7e:66:99:88:c9:3b:29:
e9:d2:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:50 2026 by rpki-client