Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/5701648E847E11F1A3CCAECBCE1D38B0.roa
File: 5701648E847E11F1A3CCAECBCE1D38B0.roa (raw, json)
Hash identifier: qvZ1JLP/OrBWL82dL9Vr2KdzQ/rtCn28C1cl0bPy284=
Subject key identifier: 99:E8:4E:95:97:F7:90:00:F9:6A:D7:A4:CB:D6:DC:86:89:2B:36:69
Certificate issuer: /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial: 0B96
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/5701648E847E11F1A3CCAECBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 21:02:39 +0000
ROA not before: Mon 20 Jul 2026 21:02:35 +0000
ROA not after: Thu 19 Jul 2035 21:02:35 +0000
asID: 37734
IP address blocks: 102.212.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2966 (0xb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AF, serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Validity
Not Before: Jul 20 21:02:35 2026 GMT
Not After : Jul 19 21:02:35 2035 GMT
Subject: CN=6a5e8cef-eb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:89:88:03:f3:04:0e:46:6b:fb:34:a6:ee:
0b:04:0b:54:82:b4:5c:e0:3d:46:a9:38:ce:fe:a8:
6d:f8:de:32:d5:1f:3e:62:91:cb:cc:6a:85:e4:99:
74:ba:3b:cd:66:85:27:db:45:79:ad:1d:bb:37:6e:
77:4a:1d:48:39:7e:e0:2d:cb:00:f2:8b:d8:3a:42:
3a:98:2f:6c:e7:4d:4b:36:f1:3e:3e:51:04:b9:12:
ea:09:57:00:de:29:b5:fe:cf:4c:27:b4:e9:5b:a8:
9a:a1:fe:7a:72:79:99:ec:4e:61:26:49:60:ca:ac:
3a:af:3f:62:07:a6:7f:b2:3c:5a:ab:ca:92:3b:3e:
55:d0:b1:68:61:7c:44:b3:4a:6d:91:39:42:19:93:
d7:df:6b:91:4b:b3:e3:e1:b3:70:5b:5b:76:c3:7a:
4c:3b:06:53:86:79:98:c1:a0:21:23:7f:9d:f5:b6:
99:44:25:ef:f6:81:d5:ee:22:c3:98:09:5e:96:e6:
18:6d:66:79:47:63:c3:31:d3:d2:c6:cb:1a:90:7d:
63:17:54:09:35:0d:06:03:be:b5:dc:31:dc:bc:3b:
e3:bf:cb:30:62:44:a1:65:b5:6f:79:24:c3:63:cb:
24:6e:08:bc:6c:3b:d7:de:c8:9a:d1:38:65:56:5d:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:4E:95:97:F7:90:00:F9:6A:D7:A4:CB:D6:DC:86:89:2B:36:69
X509v3 Authority Key Identifier:
keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/5701648E847E11F1A3CCAECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.160.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3f:76:60:30:87:5f:7b:13:37:37:10:26:df:d2:d6:c6:0e:
43:d2:0f:70:54:7f:58:0f:83:ff:d1:6d:eb:7f:c8:12:ca:27:
51:74:3a:13:da:73:1c:0e:c8:69:73:f0:b4:6c:03:f6:22:c3:
73:16:5b:3b:1c:b9:ae:f8:4c:ce:f0:d5:1b:82:82:96:0d:10:
28:e6:1e:6b:72:e8:27:1e:de:7d:d0:79:31:a2:16:53:4a:5b:
c8:22:69:80:b9:12:bb:46:65:b6:2d:00:f3:b4:46:b1:36:fe:
1a:88:e8:55:63:b5:67:2d:9f:2d:4c:ef:da:0b:e7:d9:4b:3a:
79:3f:5e:9c:bf:d8:41:8c:f6:2c:d7:ed:e4:79:ce:c5:f4:91:
bd:cc:d8:1d:56:1c:7c:9a:ae:85:5f:10:bb:b8:40:47:88:4d:
18:fa:f0:95:6b:ad:1e:fe:a9:d0:72:4d:0e:09:db:9a:48:79:
23:5b:d1:0b:1d:6e:06:e8:cc:af:8e:d4:2d:d5:c0:22:6d:00:
0b:81:b5:2a:f4:b6:e7:8b:11:8b:e1:45:43:92:58:44:b6:3b:
bd:9c:27:d9:bb:c4:8a:39:ef:1a:82:bd:0c:be:61:b0:cf:b5:
cb:41:24:e5:56:15:e7:23:dd:15:4a:40:22:cf:43:9a:81:89:
52:56:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:05 2026 by rpki-client