Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/7174266E8A5311F18E54A0F4CE1D38B0.roa
File: 7174266E8A5311F18E54A0F4CE1D38B0.roa (raw, json)
Hash identifier: XEi4kFey3Qxxjq83Jocm6vCIZNsqchWhybhghW9f978=
Subject key identifier: 5D:10:39:31:C5:D4:E0:89:3A:D2:C0:F9:90:C3:11:0F:20:93:97:17
Certificate issuer: /CN=F36E6D28AF/serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Certificate serial: 0759
Authority key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/7174266E8A5311F18E54A0F4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:10:42 +0000
ROA not before: Tue 28 Jul 2026 07:10:38 +0000
ROA not after: Mon 21 Jul 2031 07:10:38 +0000
asID: 328720
IP address blocks: 102.222.108.0/22 maxlen: 24
2c0f:7400::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6D28AF, serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Validity
Not Before: Jul 28 07:10:38 2026 GMT
Not After : Jul 21 07:10:38 2031 GMT
Subject: CN=6a6855f2-de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:6a:70:93:b1:b3:c7:f5:aa:54:19:b7:0c:
89:f4:50:04:88:ed:e0:5d:40:59:f3:8e:d7:0b:34:
58:62:63:3a:eb:ab:20:e8:72:71:2b:e8:a5:9c:7d:
f7:99:c0:38:a0:74:85:33:67:08:9d:b0:86:d9:30:
1d:2d:d7:b0:5a:8f:0b:85:b4:ff:0a:c8:bd:60:b9:
cb:5f:a6:35:8f:2b:d2:80:e2:38:38:27:7a:54:18:
4b:3b:6c:cc:d0:30:15:6e:de:5a:8d:56:db:4f:96:
6a:81:8b:de:aa:34:4a:ba:1c:e8:c3:1f:3c:70:b4:
a1:28:10:7f:6c:d1:7e:7f:86:38:b7:55:17:c7:16:
e0:0e:6d:e3:79:16:4f:c5:e5:77:e3:6d:50:24:00:
8e:75:1e:78:f9:6a:e2:21:23:4b:2c:55:9e:13:56:
d5:31:ad:7a:ae:22:2d:0a:23:92:a8:8b:74:c9:70:
d2:8c:1a:3b:52:da:59:5f:c5:24:24:13:77:68:a4:
b4:fd:d1:04:70:6d:1e:0f:ff:f9:67:a3:af:b3:a0:
59:2d:91:c1:01:55:49:e7:c2:23:a2:1f:db:08:e8:
e0:e5:00:83:08:d5:d1:d3:ac:7d:dc:e7:8b:be:04:
73:72:73:e0:e9:89:2b:d8:04:87:3a:01:d8:18:6a:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:39:31:C5:D4:E0:89:3A:D2:C0:F9:90:C3:11:0F:20:93:97:17
X509v3 Authority Key Identifier:
keyid:3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/7174266E8A5311F18E54A0F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.108.0/22
IPv6:
2c0f:7400::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f2:1b:7d:3c:61:87:1e:9b:3d:cf:97:22:c9:29:58:46:ad:
aa:98:54:28:b7:b8:72:1e:ea:d9:62:49:12:93:48:60:c2:bb:
12:cb:f8:69:51:f2:6c:81:3d:51:f1:22:75:89:9f:f9:4c:ae:
65:c2:51:89:3e:75:18:d4:b4:65:57:56:c0:a0:0e:4c:ac:f9:
43:16:e0:c7:21:78:0b:49:3a:fc:2c:6d:a5:06:80:f2:38:57:
89:12:75:02:1c:ab:15:da:d9:eb:3e:32:5c:e6:48:02:5c:9c:
51:29:c9:65:04:d8:25:4c:83:ba:06:51:d9:8d:59:9e:44:a2:
c8:24:37:80:d6:73:ad:cc:01:e4:0d:99:ba:e7:9f:83:6a:c8:
62:be:5b:6d:07:1a:c8:39:f7:96:56:89:6e:ab:59:d1:7a:48:
ad:eb:4b:0a:7b:cf:c0:4d:51:f9:0a:d2:7f:8a:e6:b5:90:86:
28:5f:1a:28:56:74:b9:04:6f:de:5a:92:67:ad:11:76:1d:82:
e2:f7:df:9b:1e:1b:ca:af:c4:0f:45:6f:ee:7b:ae:fe:62:85:
a8:13:4e:86:28:42:5d:54:66:4f:d7:67:0b:2c:ea:b8:2d:12:
e6:e1:82:08:0f:04:dd:84:c9:e3:3f:42:10:92:99:be:4f:4f:
8c:0f:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:26:09 2026 by rpki-client