Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/76290F528A7C11F18DE172EACE1D38B0.roa
File: 76290F528A7C11F18DE172EACE1D38B0.roa (raw, json)
Hash identifier: jHFfU1D2lcpOjyDVq5Ad204OjfgdXpwV2gg39IXTyHM=
Subject key identifier: E1:30:C3:57:F1:D3:B4:10:04:44:94:5A:4C:AA:49:4C:57:79:41:29
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 0528
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/76290F528A7C11F18DE172EACE1D38B0.roa
Signing time: Tue 28 Jul 2026 12:04:19 +0000
ROA not before: Tue 28 Jul 2026 12:04:15 +0000
ROA not after: Tue 01 Feb 2028 12:04:15 +0000
asID: 29286
IP address blocks: 102.213.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 12:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Jul 28 12:04:15 2026 GMT
Not After : Feb 1 12:04:15 2028 GMT
Subject: CN=6a689ac3-574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:21:aa:bf:c1:f7:0b:5a:06:7d:c7:ac:85:
c7:1e:69:fa:dc:3f:f4:4e:57:61:8d:59:1a:64:48:
37:7d:f7:2c:9e:d1:d9:b1:b5:2e:d7:75:c9:74:0b:
3b:63:23:af:e8:41:fe:93:33:da:35:8b:a9:be:64:
3b:b4:9e:d8:13:64:9b:64:27:3f:63:59:c2:d9:a3:
03:9a:33:78:35:fe:8b:6d:e3:ab:97:a1:a1:86:8a:
52:bc:43:76:2f:d3:bf:f0:77:dd:da:28:b6:2c:f3:
ef:d7:6d:6d:2f:2f:03:13:79:1e:21:09:58:19:67:
d3:41:9d:b2:57:16:a8:e8:61:09:2f:17:1b:a1:bd:
64:8c:48:b1:c6:a3:ff:b0:42:62:17:38:a7:9e:69:
ac:8c:29:60:9b:1d:2a:7d:b0:82:c3:31:30:60:fb:
6b:c2:58:f1:88:2c:fd:73:2d:c8:10:4b:69:37:9c:
5d:03:82:1d:37:64:48:fe:e4:d2:16:21:4f:a9:0d:
a6:8e:96:32:10:49:f3:cf:ee:f7:93:3f:5e:7d:e6:
3f:df:7f:90:5b:65:78:30:80:24:33:06:f1:d7:27:
d1:42:b0:35:6a:49:2d:73:60:b7:53:0a:5c:ab:07:
d6:ea:a7:6c:0f:68:de:ae:73:a1:e7:39:0c:a8:45:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:C3:57:F1:D3:B4:10:04:44:94:5A:4C:AA:49:4C:57:79:41:29
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/76290F528A7C11F18DE172EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.86.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9e:27:2b:fe:be:4b:c3:05:d4:00:24:1b:7f:46:18:75:39:
16:d4:4f:a8:19:1e:d5:a7:8e:e3:93:8c:90:b1:e6:91:dc:32:
dd:a7:1b:ae:d5:8e:04:da:56:63:fd:86:b4:81:a5:fe:33:46:
e3:12:cc:91:1a:f0:27:a1:f1:f1:64:1d:95:db:dd:80:d6:7b:
1e:d0:b7:c7:67:e4:07:ee:5d:70:e5:ea:46:4b:36:5f:78:d5:
be:da:7e:92:54:ec:e9:38:58:33:89:ed:b6:bc:f0:cd:f1:b0:
47:85:f7:a6:fe:71:d4:9d:57:12:29:42:37:70:a8:5c:8a:64:
ca:21:47:f5:0b:38:13:50:84:84:3a:c4:de:d0:b2:43:3a:44:
56:69:a4:27:38:7e:0e:84:c6:3a:e8:25:83:df:74:1e:3b:34:
e9:18:5d:c1:2a:c3:86:89:15:78:65:8c:b6:6b:01:e1:6a:f5:
22:70:70:68:d7:a1:b9:42:b3:f6:6c:04:1c:92:a8:48:05:0e:
ac:d8:e5:8c:97:21:23:be:7a:ca:a3:1b:04:ed:78:8a:f8:79:
27:6c:25:a4:84:a2:e6:0d:e5:4a:bb:e0:78:f2:34:a9:dd:47:
19:e5:1b:5a:34:b0:ff:ed:0c:0f:3e:e0:17:e3:0e:c1:6b:54:
17:cb:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:54 2026 by rpki-client