Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/163DFFC48A7911F18B7BFFD7CE1D38B0.roa
File: 163DFFC48A7911F18B7BFFD7CE1D38B0.roa (raw, json)
Hash identifier: +oqp9hoIEG1zN/2lBG7ea/q/Jlp77lY4zxCoE4WrmFg=
Subject key identifier: 9F:FE:E0:20:E8:32:99:90:14:BA:EC:5E:25:CF:9F:4A:5B:2A:7C:14
Certificate issuer: /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial: 078F
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/163DFFC48A7911F18B7BFFD7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 11:40:10 +0000
ROA not before: Tue 28 Jul 2026 11:40:06 +0000
ROA not after: Sun 28 Jul 2030 11:40:06 +0000
asID: 328861
IP address blocks: 102.219.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Validity
Not Before: Jul 28 11:40:06 2026 GMT
Not After : Jul 28 11:40:06 2030 GMT
Subject: CN=6a68951a-f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:68:10:27:5f:ca:5c:e1:e6:da:4c:16:03:
62:d6:b1:c1:9c:31:4d:3e:c4:c0:02:0e:71:fa:20:
9e:9f:4d:28:9a:d6:3d:cc:87:3f:b2:64:2f:b4:05:
1c:5c:ee:78:8f:43:ef:fa:39:2b:7b:2b:fd:1e:07:
91:67:e4:2a:85:62:f4:48:20:57:c1:eb:11:19:2e:
bd:78:c9:a6:a6:ef:29:40:fe:88:e5:18:a5:35:51:
b5:e7:9d:9a:be:2a:74:fd:58:d3:c0:bc:25:38:90:
47:17:2b:c2:83:06:b8:39:14:e5:a1:2e:5b:22:9e:
cb:9d:85:1a:bc:a0:6a:72:62:da:23:ca:92:fa:58:
a9:5b:ee:0f:f7:d2:b8:3e:fa:74:93:d2:eb:15:fe:
d2:fe:40:64:d9:30:45:66:5e:ea:21:dd:6d:e0:c5:
40:2a:6e:9b:fa:87:3f:2f:63:7b:06:60:44:21:83:
fc:bf:a1:11:1d:d8:67:28:50:c7:36:bf:36:88:d3:
65:1e:b9:30:7e:1c:1b:20:f4:fc:32:76:95:be:f6:
80:db:f0:53:9a:c6:b4:4c:01:50:4a:9f:36:68:24:
b6:46:1d:fe:e7:98:10:f8:9b:a9:71:fa:b5:83:a9:
39:a3:78:bf:ac:98:cc:f6:9e:35:a7:f1:50:da:80:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FE:E0:20:E8:32:99:90:14:BA:EC:5E:25:CF:9F:4A:5B:2A:7C:14
X509v3 Authority Key Identifier:
keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/163DFFC48A7911F18B7BFFD7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.223.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e7:df:23:b9:4a:25:0b:46:61:6d:fc:13:67:06:a9:ec:d5:
36:1d:0b:be:e1:ae:f2:5e:b2:44:d9:24:74:16:40:2d:57:2e:
fc:44:48:a9:27:d2:03:39:c7:cf:f6:ac:0f:52:33:33:79:82:
17:16:5c:22:ca:3d:71:f8:76:6a:6b:97:98:75:b2:96:c4:c6:
39:22:02:6e:cd:5d:cb:f8:f9:3e:42:45:6d:87:ba:a5:08:0e:
61:d1:2e:26:ee:4b:e0:c4:62:d5:7f:c5:ee:f1:33:03:dd:c1:
30:5d:33:91:8d:b0:0c:39:89:4c:30:38:d8:95:b6:53:83:46:
c0:32:46:de:41:ad:6b:11:10:08:09:f7:02:e1:22:03:e4:e4:
48:51:52:9e:25:c4:e3:26:84:ca:4d:68:95:60:76:61:d4:24:
27:f6:94:b7:5f:f6:ff:31:f8:9c:5e:a7:ec:87:37:2e:09:61:
24:2c:89:90:a5:31:fd:e3:f4:c2:2a:6f:4a:06:77:94:ed:42:
d9:24:1c:3f:9e:98:99:29:01:57:07:6b:95:b1:fb:e8:5f:78:
e2:35:10:40:2d:9d:73:0e:b3:a0:7f:a2:77:0c:08:86:4f:a4:
be:da:1e:cc:14:32:f7:93:54:67:49:6f:e0:c7:08:f8:63:9d:
c8:76:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:34 2026 by rpki-client