Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/BC758CE6898311F18ED600FECE1D38B0.roa
File: BC758CE6898311F18ED600FECE1D38B0.roa (raw, json)
Hash identifier: ZY4XSqAaj9Niy1UnC1HxD+qKCvUNJWzVgkVAYQH/6k8=
Subject key identifier: E3:58:71:32:46:8A:BB:1D:2C:95:08:24:30:5B:68:1D:6F:A3:4C:DF
Certificate issuer: /CN=F36F633BAF/serialNumber=739B139D0B7978B0F750E6184D24CFCB27874579
Certificate serial: 0719
Authority key identifier: 73:9B:13:9D:0B:79:78:B0:F7:50:E6:18:4D:24:CF:CB:27:87:45:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/BC758CE6898311F18ED600FECE1D38B0.roa
Signing time: Mon 27 Jul 2026 06:23:52 +0000
ROA not before: Mon 27 Jul 2026 06:23:48 +0000
ROA not after: Wed 31 Dec 2031 06:23:48 +0000
asID: 60171
IP address blocks: 102.223.52.0/22 maxlen: 24
2c0f:e878::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft
rsync://rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F633BAF, serialNumber=739B139D0B7978B0F750E6184D24CFCB27874579
Validity
Not Before: Jul 27 06:23:48 2026 GMT
Not After : Dec 31 06:23:48 2031 GMT
Subject: CN=6a66f978-cf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:53:5b:3e:1a:6f:9a:e4:14:d2:49:df:e3:
97:94:ad:46:cd:51:fb:c2:eb:87:32:83:89:f8:5f:
e6:e3:98:c4:93:ee:64:37:77:d8:db:b6:1f:a3:cb:
30:32:75:27:8d:b2:a7:33:36:fe:3b:b9:2b:68:51:
c8:7e:8b:31:47:e9:bb:12:a9:07:f8:b6:ad:10:ff:
23:4f:db:5f:f7:57:c7:3f:82:d4:9f:9b:83:77:ad:
62:01:94:1e:df:62:59:f6:a9:97:ba:0d:e3:c8:2d:
f3:29:68:ec:75:3d:f7:2a:c1:95:f1:de:99:2a:9f:
28:92:fe:00:2f:fc:09:23:42:33:99:90:0e:75:56:
26:7f:59:ff:05:6d:7c:5f:3d:d9:3e:96:3d:24:07:
a9:e9:f4:0d:30:7a:cd:71:ad:d1:9d:5d:85:73:81:
cb:d6:db:53:f6:b0:73:98:af:fc:47:fb:31:55:51:
57:b1:86:03:e6:bf:ab:ae:67:4b:7e:50:91:27:24:
28:5a:3e:15:59:1b:de:19:83:f8:8a:ec:c5:b7:2a:
59:f6:5e:b9:2b:60:42:2c:a7:78:d8:8d:47:b9:aa:
fd:ae:6a:b4:79:83:03:f1:ff:29:ee:f6:ea:d7:b4:
2b:e9:39:97:30:e8:9b:63:18:41:12:9c:db:ff:4c:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:71:32:46:8A:BB:1D:2C:95:08:24:30:5B:68:1D:6F:A3:4C:DF
X509v3 Authority Key Identifier:
keyid:73:9B:13:9D:0B:79:78:B0:F7:50:E6:18:4D:24:CF:CB:27:87:45:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/BC758CE6898311F18ED600FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.52.0/22
IPv6:
2c0f:e878::/32
Signature Algorithm: sha256WithRSAEncryption
7a:e2:1c:3c:19:f5:2e:42:52:98:35:c0:c7:38:d2:fe:08:35:
b4:46:b5:d1:ca:43:34:ad:2b:96:d3:21:44:75:d4:ac:5b:1e:
9a:1d:58:64:7c:02:3a:40:d8:8e:0c:30:38:19:fa:f2:e5:8d:
c1:cf:07:63:ae:ee:1a:c3:12:d4:cb:9d:1e:70:64:b4:e7:e1:
ed:95:a6:52:df:a7:9c:1c:a0:17:92:19:ac:d1:91:57:de:19:
57:6c:c3:75:31:64:1e:8b:8c:f9:75:50:25:08:07:88:32:53:
3a:42:4f:2e:3b:fa:0b:5d:86:77:de:c8:70:e7:25:1d:66:f6:
52:36:d8:2c:87:10:ac:1f:99:63:41:9d:92:c8:73:cf:b7:5d:
99:9a:5b:0a:98:c2:49:b6:84:9a:3d:c9:c3:a2:ab:3d:f6:53:
5f:80:e5:b1:92:7a:38:bf:85:30:d4:c5:96:f8:12:96:c7:53:
15:b3:07:c3:33:ad:41:6d:44:eb:7b:4f:17:1c:75:a1:72:d3:
bd:d0:38:3e:5d:a5:04:c2:eb:42:39:e2:c1:66:27:fd:5b:90:
60:38:6c:f5:9f:43:2a:3d:b0:3b:c1:ca:b0:41:f7:3b:c7:07:
61:d7:3f:48:27:0c:a7:a6:1b:a8:0b:87:93:89:1e:ad:64:ff:
1f:b6:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:23 2026 by rpki-client