Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/5781D1FE7B6F11F1A27D61F0CE1D38B0.roa
File: 5781D1FE7B6F11F1A27D61F0CE1D38B0.roa (raw, json)
Hash identifier: qY9gTFyxLeKKP3wsEKrrnFvi3gpHzdRPEYsotda9ylk=
Subject key identifier: C0:F2:38:78:19:A4:2F:F5:25:F4:D3:4A:7B:58:41:3E:27:F4:3A:C0
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0FE5
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/5781D1FE7B6F11F1A27D61F0CE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:22:37 +0000
ROA not before: Thu 09 Jul 2026 08:22:32 +0000
ROA not after: Thu 31 Jul 2036 08:22:32 +0000
asID: 327750
IP address blocks: 102.164.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4069 (0xfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Jul 9 08:22:32 2026 GMT
Not After : Jul 31 08:22:32 2036 GMT
Subject: CN=6a4f5a4d-2860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:a6:e1:92:d2:ef:dd:af:27:f4:73:96:6e:
ad:4e:99:5b:65:c6:96:57:d2:79:65:53:98:6c:75:
1d:4a:12:76:35:a2:25:f7:93:c7:26:8b:19:4d:f9:
c1:2b:b3:e0:81:68:e9:81:76:6d:07:3f:bc:fe:6b:
01:3b:23:0a:83:da:04:1a:95:be:77:b1:54:84:02:
21:e9:78:5f:e4:c9:ea:cf:45:04:ac:55:d5:89:0d:
6e:59:09:29:10:97:38:19:53:2c:7c:01:60:28:5e:
da:4b:f3:e6:aa:32:6b:39:44:c4:87:2f:a7:28:0c:
9f:03:1b:b4:b7:b8:97:88:c9:94:58:97:18:22:e5:
40:7e:de:16:26:b2:3e:a2:6b:77:92:60:e0:b1:b7:
c8:98:90:c7:fe:9b:5e:ce:1a:01:80:ab:9a:46:bb:
b1:4d:95:75:49:f9:b7:ca:4c:37:92:06:db:1e:e7:
88:d8:da:1a:98:18:33:71:19:74:cc:b0:61:fb:22:
65:f8:49:d0:7b:fc:27:5b:dd:1a:16:b0:57:fc:f7:
c6:24:24:de:41:9b:37:d6:66:f6:48:b4:ac:ab:d4:
c1:f7:12:cb:41:f8:ac:ac:1b:56:f0:08:3c:eb:75:
db:8f:9c:0d:e4:0c:53:57:5f:43:c5:31:5d:16:52:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:38:78:19:A4:2F:F5:25:F4:D3:4A:7B:58:41:3E:27:F4:3A:C0
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/5781D1FE7B6F11F1A27D61F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.192.0/19
Signature Algorithm: sha256WithRSAEncryption
87:3d:e9:0d:ca:17:b7:70:b3:7c:1e:0a:51:ea:a9:9f:38:30:
5e:c7:3c:b3:49:f8:c6:92:c0:ec:aa:aa:d2:1d:a0:a2:16:a6:
b3:02:43:42:db:69:be:02:3e:20:3a:43:42:59:3b:07:48:d5:
e9:99:bf:13:06:fe:7d:63:31:6d:92:e6:41:cc:e8:85:db:36:
db:da:d8:2e:2a:47:03:74:17:ce:7c:cd:82:b9:58:84:29:91:
84:68:ab:a6:8a:a5:22:01:c6:10:36:8a:ed:11:49:6f:05:4d:
1a:96:d4:f1:16:5d:52:8d:40:c6:a9:1b:57:73:09:e4:3b:11:
7c:5c:77:bd:f4:0e:81:a0:55:58:9a:38:b9:c1:67:64:03:7d:
89:1e:52:04:60:8c:24:8e:35:7c:f2:81:0a:96:42:9c:14:4a:
f0:a2:e8:73:c6:a7:3e:30:20:de:43:3e:26:87:14:2a:e5:22:
59:90:8f:7d:65:49:05:df:e1:96:1e:02:a5:07:96:9c:24:f4:
fb:fa:f3:ae:42:fc:44:17:01:3f:5f:24:34:41:be:60:5c:2d:
73:1c:8d:9f:b6:72:f4:58:9a:11:b0:f5:0e:4d:1c:ce:13:75:
4a:fc:de:ea:ab:a9:06:5e:3c:76:6a:42:b6:88:4e:54:f0:03:
e7:94:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:19 2026 by rpki-client