Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/6500DE068A6511F1B08DB3DFCE1D38B0.roa
File: 6500DE068A6511F1B08DB3DFCE1D38B0.roa (raw, json)
Hash identifier: 29MXciPH3Gu1aj7UAPI2yNVj/TEMvdY5Ea0HCVpZx8U=
Subject key identifier: C5:DF:02:9F:BA:6B:7D:71:B0:A9:6B:15:C3:E5:01:65:B1:B0:71:97
Certificate issuer: /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial: 091C
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/6500DE068A6511F1B08DB3DFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 09:19:12 +0000
ROA not before: Tue 28 Jul 2026 09:18:57 +0000
ROA not after: Mon 28 Jul 2036 09:18:57 +0000
asID: 328638
IP address blocks: 102.141.64.0/19 maxlen: 24
102.207.180.0/22 maxlen: 24
102.216.104.0/22 maxlen: 24
102.221.220.0/22 maxlen: 24
154.65.112.0/20 maxlen: 24
196.6.112.0/21 maxlen: 24
2c0f:f0a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2332 (0x91c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Validity
Not Before: Jul 28 09:18:57 2026 GMT
Not After : Jul 28 09:18:57 2036 GMT
Subject: CN=6a687410-993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:56:fa:b8:b9:00:f4:73:1c:5a:bd:31:70:
53:9c:84:1f:7b:75:46:35:b5:98:ce:a2:fc:39:1a:
62:e9:27:65:4b:b9:ab:ed:86:66:c8:fc:f8:11:36:
8f:30:93:97:1e:38:b1:40:62:05:47:da:d9:24:70:
41:9f:86:32:70:e8:43:fc:6a:a1:d2:a5:10:38:e1:
68:75:c8:a0:0b:db:34:6d:c3:c5:dc:01:01:f9:9d:
8b:30:85:08:9b:b6:7d:4b:a8:0b:6e:e3:d0:40:66:
16:44:75:9a:39:8c:c9:0f:d8:76:3d:a1:49:1a:2b:
76:b8:3f:90:96:ea:d7:ae:85:03:a6:c0:97:7d:e3:
a0:f3:8b:fa:dc:7e:a2:9d:47:2f:53:f3:00:91:e0:
b9:d1:71:ec:dc:d4:dc:04:d4:ab:18:4b:de:3f:65:
ea:20:6a:65:5f:72:1b:c7:a8:ad:57:09:47:06:28:
1d:e1:77:d4:c7:2a:d9:ac:56:82:0f:f4:0c:8b:af:
53:ac:a6:77:7b:f9:54:3e:62:32:ea:d1:74:f0:2b:
f6:d1:40:6c:62:fb:16:94:f3:88:20:31:6b:1b:25:
c6:b2:22:e8:d3:9e:aa:48:6c:85:0b:6a:a9:e9:f6:
d6:c6:24:15:df:97:d4:88:68:d4:ab:cf:a8:8e:68:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:02:9F:BA:6B:7D:71:B0:A9:6B:15:C3:E5:01:65:B1:B0:71:97
X509v3 Authority Key Identifier:
keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/6500DE068A6511F1B08DB3DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.141.64.0/19
102.207.180.0/22
102.216.104.0/22
102.221.220.0/22
154.65.112.0/20
196.6.112.0/21
IPv6:
2c0f:f0a0::/32
Signature Algorithm: sha256WithRSAEncryption
71:3e:4c:43:2b:5d:3e:eb:19:c2:4f:8b:ce:a3:1d:a6:e2:d4:
57:dd:79:04:0d:38:2c:f3:64:ca:f3:26:25:1b:6b:d1:ba:29:
d3:df:2f:4f:c1:42:15:ad:ef:2c:fd:07:f6:03:26:df:17:22:
b2:5d:ee:37:b0:95:16:44:5a:8b:87:ce:68:9a:1e:19:6a:04:
4e:6b:4e:38:de:4a:ba:cc:12:6d:da:26:56:cb:6a:6c:6f:cd:
08:0e:00:d7:9c:26:49:d4:ca:c9:65:b2:5b:17:03:d1:c3:22:
8c:bc:45:21:d6:63:1c:6b:1a:4e:78:42:69:d8:4b:f5:69:45:
6c:7b:8e:d7:67:6f:7c:dc:b5:76:fe:93:e5:27:04:fd:b7:da:
e0:0a:f0:4d:03:ad:23:66:d0:22:47:c4:7c:42:2b:1f:73:7b:
09:2f:bd:b6:07:37:78:d9:d8:45:c0:0d:cf:60:8a:ab:46:85:
41:ec:c7:e2:95:3d:74:21:5c:08:23:96:62:2e:f7:35:7a:64:
7b:ee:33:0b:02:25:c9:ce:66:41:d9:70:54:18:19:a5:d3:29:
bc:5d:f7:2c:6a:d2:96:d4:dd:13:87:f4:47:90:78:81:28:49:
c8:0f:1d:ba:02:2f:d9:79:a8:2d:87:47:3e:41:e6:25:b3:14:
a9:1c:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:51 2026 by rpki-client