Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/D0DCBE4C8A7911F19DA91ADCCE1D38B0.roa
File: D0DCBE4C8A7911F19DA91ADCCE1D38B0.roa (raw, json)
Hash identifier: /o+O3ztThNiECWWwpWeQxfRZFgNL7pteuS2ywgWSCoQ=
Subject key identifier: 29:8C:2B:EE:6B:19:74:86:61:9A:14:37:3D:D4:BD:21:95:DD:E4:8F
Certificate issuer: /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial: 0793
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/D0DCBE4C8A7911F19DA91ADCCE1D38B0.roa
Signing time: Tue 28 Jul 2026 11:45:23 +0000
ROA not before: Tue 28 Jul 2026 11:45:19 +0000
ROA not after: Sun 28 Jul 2030 11:45:19 +0000
asID: 328861
IP address blocks: 102.219.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 11:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Validity
Not Before: Jul 28 11:45:19 2026 GMT
Not After : Jul 28 11:45:19 2030 GMT
Subject: CN=6a689653-cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:78:a1:2e:f1:f4:52:0d:d1:01:1c:99:4c:
77:45:70:0c:bf:4b:2c:db:22:1c:67:0c:8b:8b:57:
84:71:09:83:f3:93:59:fe:a7:fc:a4:63:e9:90:89:
45:8d:97:77:60:31:af:5b:e2:f2:40:f4:25:4c:04:
69:f4:51:e0:3b:d5:c3:2b:ef:26:22:c7:62:83:2d:
7e:7a:1a:05:f7:60:81:4e:e8:3d:57:2e:c3:c7:d8:
ae:68:fa:65:d4:65:04:d5:ef:f2:0d:c2:bf:1b:17:
89:36:f9:d4:95:3f:25:22:c0:f3:7b:8b:2f:93:5b:
e7:ba:83:31:03:9f:71:cc:1c:21:89:a3:cd:6f:e0:
99:33:69:b5:da:b3:5d:d8:f8:87:01:62:38:d9:b8:
5b:c7:42:47:fa:e0:cb:81:fa:46:0b:37:23:56:1d:
5d:84:66:3c:11:e0:98:f8:58:d9:92:0d:80:d7:b5:
8b:91:f2:a5:ba:da:4d:d9:97:0b:84:b2:38:f6:72:
8e:5d:6e:88:da:e1:b8:11:7e:d1:67:b3:f0:ea:1d:
37:07:65:31:a5:5e:be:74:c0:b1:20:39:ee:07:23:
e4:61:7e:3a:9f:39:6e:6e:ef:4d:1a:87:cc:ff:f6:
f6:81:ee:b1:cf:5c:5e:8e:74:78:8c:5a:b8:d3:d5:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:2B:EE:6B:19:74:86:61:9A:14:37:3D:D4:BD:21:95:DD:E4:8F
X509v3 Authority Key Identifier:
keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/D0DCBE4C8A7911F19DA91ADCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3c:a3:bc:7c:c2:3a:b9:cd:a6:4e:1a:c4:ac:1d:2f:0e:2d:
e1:0b:73:22:49:20:30:9a:10:87:d6:2c:78:45:3e:d2:04:bd:
fb:5b:64:35:1c:48:00:ba:4c:58:f3:2d:1e:cb:28:0b:35:d4:
a2:40:55:d8:9c:67:a1:10:e1:99:4c:d2:af:de:5c:3c:83:e6:
64:0a:2a:1f:13:4d:66:17:45:d8:a0:8d:83:9d:be:a0:19:4e:
b3:16:50:d6:55:92:11:64:97:bd:52:81:3f:e6:69:3d:77:c2:
4c:fd:14:2b:b7:86:92:04:4e:72:0f:32:6d:a3:b6:36:c9:bf:
bf:58:1b:31:88:0c:07:5e:73:9f:b6:71:a9:df:a8:e0:be:05:
52:45:98:21:f1:5a:9e:68:93:aa:68:bc:3b:25:1e:e7:0a:d4:
a5:fa:4d:b9:37:92:84:f0:65:8a:67:7d:96:30:47:11:ef:ee:
79:42:69:0f:9f:2d:e5:f2:b1:4f:c3:11:c7:35:d4:43:f8:2f:
eb:ac:10:89:b1:84:e0:cd:05:d7:37:c3:ee:65:cd:be:ce:b5:
3e:ad:c6:dd:ee:43:e8:1d:0f:02:37:4e:72:35:e0:a1:03:e1:
8e:4a:7d:5d:bd:65:05:53:cd:f1:cc:43:25:97:b9:29:26:6e:
53:75:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:27 2026 by rpki-client