Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/BCC0C0828A4E11F1AF8FB4D7CE1D38B0.roa
File: BCC0C0828A4E11F1AF8FB4D7CE1D38B0.roa (raw, json)
Hash identifier: jI/cKEdATEeH2PHfBDf2iu3vd6SLnRo4mjZ4eb8OCSA=
Subject key identifier: 4C:7A:A3:3B:60:FD:2F:BA:26:35:EA:37:C6:47:6B:35:A5:FC:0F:C0
Certificate issuer: /CN=F3676F2FAF/serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Certificate serial: 0591
Authority key identifier: 6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/BCC0C0828A4E11F1AF8FB4D7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:37:01 +0000
ROA not before: Tue 28 Jul 2026 06:36:57 +0000
ROA not after: Sun 31 Oct 2032 06:36:57 +0000
asID: 328996
IP address blocks: 102.219.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676F2FAF, serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Validity
Not Before: Jul 28 06:36:57 2026 GMT
Not After : Oct 31 06:36:57 2032 GMT
Subject: CN=6a684e0d-f95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:cc:50:ab:19:07:c8:5f:74:25:b6:37:dd:
f2:b3:e0:7a:03:c9:46:5e:0f:e0:74:01:bc:ca:95:
1e:e7:ee:22:93:87:64:63:ff:f9:cc:d0:d8:43:23:
da:db:98:60:25:9f:3b:6a:4a:75:84:1d:65:d8:8d:
8b:c8:1c:a4:23:db:5d:3a:2a:d8:ed:57:a7:10:ca:
ab:25:70:a1:e4:18:e5:b4:22:62:59:1f:5a:e1:b8:
b5:c0:a2:74:14:f4:e3:10:11:cb:f6:13:bd:16:0b:
f8:6b:5e:35:70:b7:f2:38:fa:ce:f7:c7:7c:18:ed:
23:86:3f:66:c3:14:8c:af:f4:76:47:4b:33:9c:8f:
0a:54:37:e7:79:43:a9:77:73:33:d8:e7:e3:78:e7:
fd:11:ab:fa:64:05:fa:33:f2:2c:9e:b1:83:88:8c:
13:52:6d:ff:70:6f:80:29:62:a6:7b:cc:c2:3a:91:
2d:42:24:55:00:79:f7:e1:50:08:49:bd:e2:9b:a1:
62:93:f5:20:9b:d0:0a:9c:8b:6d:29:00:1c:01:81:
e8:d5:26:c0:a6:49:9e:4b:43:d1:1f:3a:bf:7f:79:
53:52:9d:58:2b:1d:2d:b2:b2:ca:71:c4:82:53:08:
45:00:c9:72:f0:04:bc:ce:a1:ea:e8:40:1a:c3:a8:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7A:A3:3B:60:FD:2F:BA:26:35:EA:37:C6:47:6B:35:A5:FC:0F:C0
X509v3 Authority Key Identifier:
keyid:6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/BCC0C0828A4E11F1AF8FB4D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:49:40:d0:ca:a8:0d:63:52:cd:f3:dc:b1:35:38:95:4a:1e:
a0:5d:58:e0:7f:68:d3:56:c4:56:6f:f7:39:3f:e2:3b:df:78:
6c:aa:c0:90:e4:1c:1d:25:3c:bb:40:0b:b2:22:18:d7:8e:d7:
b2:ce:28:27:f7:d8:85:b3:d8:3d:00:6c:aa:df:dc:35:5b:f1:
24:94:38:3a:b1:1a:f4:bb:7c:5c:3e:9d:90:91:ee:3a:90:eb:
e8:88:5f:02:d3:e3:63:a2:87:77:be:ec:a9:99:b8:cf:21:6d:
f9:03:bf:6c:53:e2:42:37:39:a0:f1:97:44:83:d8:61:f8:69:
48:42:32:7b:b9:b7:ae:75:eb:05:9d:f6:93:31:62:de:3d:f1:
b8:3d:45:e9:8e:6e:ba:08:8b:c6:96:5f:40:d2:a0:00:5d:48:
8b:b0:a4:6f:67:34:e6:e4:ab:f3:f3:2d:fb:3e:06:84:45:ef:
25:d8:a0:fc:ac:20:f2:e7:98:91:d1:c1:db:99:95:59:db:f9:
f2:09:82:fd:6b:7d:a8:2d:f6:03:29:35:a3:19:2b:e3:b8:2b:
ae:ff:08:61:4d:0d:8b:71:4d:56:a1:a0:3a:4d:aa:a4:48:35:
f2:df:c2:e1:81:89:25:4c:c3:96:bd:09:ab:e7:4d:0b:a9:72:
42:0e:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:18 2026 by rpki-client