Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/912FBF2E8A7911F1B31828D8CE1D38B0.roa
File: 912FBF2E8A7911F1B31828D8CE1D38B0.roa (raw, json)
Hash identifier: zYTBvHbOq51i/nbuKMgvUoNYk1P78hyVlO8xCIxqaFY=
Subject key identifier: 7E:2F:E4:F3:76:7B:AF:23:EF:CC:BD:9B:EE:9D:12:AB:8D:10:E7:AB
Certificate issuer: /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial: 0791
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/912FBF2E8A7911F1B31828D8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 11:43:36 +0000
ROA not before: Tue 28 Jul 2026 11:43:32 +0000
ROA not after: Sun 28 Jul 2030 11:43:32 +0000
asID: 328861
IP address blocks: 102.219.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Validity
Not Before: Jul 28 11:43:32 2026 GMT
Not After : Jul 28 11:43:32 2030 GMT
Subject: CN=6a6895e8-d032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:7c:6f:1b:01:b2:03:43:f6:6d:c0:17:ed:
1a:7d:58:0f:e3:34:3c:83:36:66:4b:9f:d9:2b:85:
6e:e6:26:34:f4:de:58:cd:2b:1e:64:6b:e0:83:54:
92:9a:44:1d:16:4d:3b:1e:ac:7a:9b:48:f0:e7:f8:
d8:1f:15:35:6a:c5:17:04:c2:c2:f9:fd:20:b4:c2:
85:86:67:0a:7d:4e:b0:1c:e8:47:3b:e4:b3:4d:71:
bc:22:89:af:ec:62:98:29:fa:35:82:94:8b:8c:3e:
1a:f7:77:63:83:d4:1e:24:13:b2:82:46:41:25:11:
3f:05:85:28:53:c0:8d:b9:57:8e:cf:2e:2d:95:5d:
36:e1:2f:b6:a9:6e:13:0e:97:7d:ec:09:cd:d5:c9:
59:5a:e8:73:86:eb:2f:92:9e:5a:de:cc:76:69:a8:
32:7f:ab:f2:f7:7a:55:e3:66:c1:9e:d8:62:e3:a6:
39:80:2d:67:7a:5c:58:bb:3d:2a:ba:50:07:da:74:
eb:1b:ee:81:97:07:f0:18:9a:ac:98:40:54:1d:d6:
89:10:e0:33:f0:cc:bf:c8:45:9f:d9:64:a9:e7:bc:
d5:87:45:b2:82:b5:93:e7:16:73:33:86:f4:b4:47:
61:a8:8d:28:ce:b5:64:16:4f:9c:98:a4:1c:09:cc:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:E4:F3:76:7B:AF:23:EF:CC:BD:9B:EE:9D:12:AB:8D:10:E7:AB
X509v3 Authority Key Identifier:
keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/912FBF2E8A7911F1B31828D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.221.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d2:64:d7:62:3b:8a:05:93:0b:60:5b:03:fd:b6:5f:ff:6b:
78:2c:00:41:80:5a:ca:45:e9:53:ac:7c:8f:ad:18:76:23:15:
0f:6e:f2:4e:38:6e:43:34:00:03:f0:e7:21:23:f0:05:ff:19:
0d:ec:08:b1:a1:cd:cf:8e:dc:7b:54:d5:aa:7f:b5:c3:ff:2f:
45:1d:ac:98:cf:3d:a6:a5:76:b6:f5:6f:34:c9:1a:86:2f:99:
54:02:4e:0c:80:48:b6:0d:2d:cb:46:74:9a:86:0d:fa:10:89:
4b:a9:9d:b8:44:3e:6b:32:ec:b2:25:0b:80:47:47:6a:83:9d:
4e:94:8f:c7:68:e4:0a:ff:19:3e:6e:89:e1:b1:6c:c1:5f:64:
6e:61:13:80:1b:ba:96:a1:72:1a:2f:a8:66:82:b3:f6:f3:0e:
e3:72:43:48:aa:3d:c6:e9:89:48:4d:7c:e9:af:78:b8:e8:3b:
9a:29:e8:cb:c0:b8:66:98:24:b6:46:63:f6:8d:33:ca:0b:e3:
2c:be:49:2d:c8:c7:78:38:01:66:44:f2:3f:8c:04:e4:e6:df:
e8:23:25:19:6e:61:01:3b:12:d2:71:7c:ea:45:a2:ce:c7:7b:
51:a2:4d:b7:50:ed:6c:6a:da:44:a3:78:32:a4:db:ea:57:a9:
5f:14:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:48 2026 by rpki-client