Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/42CD7A328AA711F1BDD8B5ECCE1D38B0.roa
File: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (raw, json)
Hash identifier: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=
Subject key identifier: E9:E6:C4:08:10:83:5F:D4:66:76:8E:62:67:8C:20:1A:F7:84:70:BE
Certificate issuer: /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial: 054B
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/42CD7A328AA711F1BDD8B5ECCE1D38B0.roa
Signing time: Tue 28 Jul 2026 17:10:41 +0000
ROA not before: Tue 28 Jul 2026 17:10:37 +0000
ROA not after: Sat 01 Jan 2033 17:10:37 +0000
asID: 24757
IP address blocks: 102.218.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 17:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Validity
Not Before: Jul 28 17:10:37 2026 GMT
Not After : Jan 1 17:10:37 2033 GMT
Subject: CN=6a68e291-a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:0d:0f:75:cf:ea:51:af:a2:2e:a2:eb:8f:
dd:a4:7e:48:78:2c:08:a7:b9:f3:56:09:a7:64:db:
84:14:d0:99:28:2c:88:b1:0e:cd:83:35:d8:1c:ee:
48:4e:f7:2b:6a:02:b2:9a:37:cf:99:a7:4c:4c:43:
e4:b6:68:47:65:d4:07:ea:bb:49:8b:49:00:63:78:
8d:5a:c4:a8:67:86:04:16:33:d3:ea:4d:41:3a:d8:
6e:c7:7e:db:28:16:38:67:45:f5:16:0c:d9:28:d8:
19:1e:39:1d:0c:32:85:29:f0:b0:d6:df:d6:c1:d6:
a5:0c:3f:43:d3:97:24:b9:a7:83:71:f3:3c:7e:48:
91:6a:fc:ce:c5:8a:12:b9:ab:02:3e:51:fc:b7:fd:
ec:4b:8d:66:95:98:9c:61:df:df:b2:dc:ab:6a:eb:
1b:02:2b:3c:e3:da:6b:90:5b:6b:4d:81:64:36:e6:
c2:5a:e4:b8:f6:e8:16:3a:4e:0b:7d:ff:bb:92:fd:
90:08:69:4f:cf:8f:f8:ea:00:5f:23:10:80:b2:46:
f4:d5:d0:9d:b2:f1:a6:8d:e0:19:30:45:65:77:3c:
ab:dd:a3:3b:c5:a3:7c:0d:c5:f7:a2:c5:02:7f:a9:
a6:e0:04:ac:eb:c8:2f:54:8e:4f:72:ef:7b:24:b4:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:C4:08:10:83:5F:D4:66:76:8E:62:67:8C:20:1A:F7:84:70:BE
X509v3 Authority Key Identifier:
keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/42CD7A328AA711F1BDD8B5ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.0.0/22
Signature Algorithm: sha256WithRSAEncryption
67:7c:b3:18:83:be:6f:1d:2a:8a:7a:f3:53:28:63:92:c5:bb:
91:c8:3c:1b:d8:1b:e6:cf:b1:5b:46:b4:10:96:b8:b4:02:84:
b2:fb:89:32:53:7b:9c:f2:2a:f9:65:7a:a6:fa:62:5e:fa:ec:
6f:53:36:96:2e:9a:05:2c:68:11:93:b2:ba:e9:c6:f8:70:34:
07:29:18:43:80:89:f3:56:1d:6c:85:dd:79:8e:14:c3:e8:09:
57:23:94:21:3a:6f:51:71:49:23:6b:a5:b4:d1:4c:4a:66:50:
24:69:2e:2c:c0:3b:4c:41:0a:70:4d:62:59:76:b7:52:ed:63:
df:77:68:dd:0d:21:e9:d6:c5:40:06:0c:fb:99:de:85:b8:20:
81:bb:82:15:c0:c0:a1:0c:e1:55:3a:f6:a2:f6:0d:47:53:88:
43:ba:8c:2f:f4:55:e5:cf:d8:d5:a1:5b:f3:44:86:3a:16:b3:
1a:d1:5a:5d:14:79:c9:ad:f0:7d:8f:94:ff:f4:1c:24:1c:af:
2b:9c:92:fc:f1:59:f3:fa:31:cf:b0:8e:a8:30:52:54:4b:5b:
25:1f:e4:8b:8f:3a:d5:29:3c:f7:44:e3:99:79:ba:b1:69:00:
f3:48:99:2f:4e:b1:85:c6:79:8f:9f:c6:4c:28:df:30:49:a6:
9c:fc:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:49:07 2026 by rpki-client