Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/9800F98A85E211F1A6B911D0CE1D38B0.roa
File: 9800F98A85E211F1A6B911D0CE1D38B0.roa (raw, json)
Hash identifier: tzAizvi1giS50O65pMYIy8/uljP75jG5cVLyTz+pbQg=
Subject key identifier: 16:F7:D8:6D:B0:38:56:FC:87:2F:C8:8A:10:0F:AB:C8:7F:4A:D6:2D
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 07F6
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/9800F98A85E211F1A6B911D0CE1D38B0.roa
Signing time: Wed 22 Jul 2026 15:32:49 +0000
ROA not before: Wed 22 Jul 2026 15:32:45 +0000
ROA not after: Sat 31 Jul 2027 15:32:45 +0000
asID: 328813
IP address blocks: 102.220.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.mft
rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF, serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Jul 22 15:32:45 2026 GMT
Not After : Jul 31 15:32:45 2027 GMT
Subject: CN=6a60e2a1-782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:1f:de:cd:c6:64:0b:64:c5:6e:11:bb:58:
7a:b4:e3:db:66:c2:f0:8f:c7:69:74:70:01:92:c3:
8f:1c:ed:6b:fd:8d:a3:b7:67:8b:1e:86:f8:2d:29:
82:67:75:fd:a1:7a:b2:f4:e9:09:ad:83:c0:73:5a:
a6:73:0d:5d:99:7a:d9:38:c9:92:46:0b:60:5b:4e:
86:fb:53:8c:fc:2e:92:93:1a:6d:26:85:1f:e1:ca:
ad:db:c4:8c:53:94:e3:4e:84:2f:8c:27:d7:0e:22:
80:54:eb:bf:40:75:7d:4d:2e:56:d0:98:74:88:fc:
12:ff:06:c9:81:9e:90:68:4d:d3:1e:c0:a2:c9:bc:
d0:b4:62:eb:64:32:a5:be:40:9b:0e:7a:44:0e:34:
90:b1:ae:d6:6b:33:20:57:0e:66:2b:33:4e:b4:bf:
7b:85:ce:83:70:9a:a8:d4:fb:40:c6:13:32:85:48:
3b:32:28:a5:2e:16:b9:1d:84:98:8b:1a:d9:3b:07:
a1:a9:24:80:ce:24:86:fd:f4:2e:1a:13:3d:3d:80:
cc:f3:ae:dd:ae:42:13:1c:1a:0b:53:19:d8:dc:b1:
f1:24:60:57:79:7a:f1:a6:8c:58:42:0f:f3:07:67:
9f:ee:7f:cf:f3:bd:11:18:e5:ba:5a:b9:48:a4:fa:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:D8:6D:B0:38:56:FC:87:2F:C8:8A:10:0F:AB:C8:7F:4A:D6:2D
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/9800F98A85E211F1A6B911D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.200.0/23
Signature Algorithm: sha256WithRSAEncryption
79:3c:b5:14:e9:41:a1:e6:e5:ff:d3:6b:b8:e5:c9:f0:b0:bc:
9c:e2:10:a1:ce:8f:ba:7f:b7:bc:4c:7f:5c:90:bb:72:fa:2a:
8b:48:a8:c5:89:13:7e:9d:24:bb:ec:cf:5d:7e:b1:af:1a:c1:
ae:9b:c9:50:bd:34:79:5c:03:99:94:10:33:4d:bc:3c:16:5b:
76:88:e1:45:68:47:59:be:59:58:c9:1b:03:84:ff:01:81:f4:
82:67:62:39:a0:b1:06:1e:d9:40:79:ef:21:65:ce:d5:72:ab:
96:6e:22:e1:52:f8:c3:90:4c:25:6a:f2:0c:b1:00:27:53:b7:
48:3d:06:16:d8:f2:d1:55:d3:ad:3a:3a:68:ce:fd:8f:6b:47:
d7:a5:ea:60:e3:82:00:ba:f4:95:fd:b1:ff:5b:54:f0:97:3e:
37:55:82:cc:fd:66:d6:89:aa:e7:e6:80:c8:f7:8d:66:24:66:
b7:df:3e:01:7f:ad:25:f9:d9:00:91:cf:7c:82:fe:f9:22:7d:
67:45:3a:e0:e7:8b:3e:06:b0:b2:09:93:82:5c:a2:b3:9e:4e:
da:0e:dc:3d:85:1a:bc:cd:87:64:18:10:a0:70:7d:a3:27:6c:
2b:cc:68:38:54:0c:fb:3e:21:28:8e:64:94:07:b9:56:cc:8a:
fb:62:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:47 2026 by rpki-client