Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/7A8E9D30755211F1A6F15909CF1D38B0.roa
File: 7A8E9D30755211F1A6F15909CF1D38B0.roa (raw, json)
Hash identifier: q6y+hzQYmx0hO6P1zdgO/Rqo1yAI57rkaFbZAachqLo=
Subject key identifier: 1B:85:BA:6B:2F:05:F5:92:16:C2:0A:96:68:52:97:AE:9D:70:1A:AC
Certificate issuer: /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial: 0135
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/7A8E9D30755211F1A6F15909CF1D38B0.roa
Signing time: Wed 01 Jul 2026 13:40:53 +0000
ROA not before: Wed 01 Jul 2026 13:40:47 +0000
ROA not after: Thu 01 Jul 2027 13:40:47 +0000
asID: 329530
IP address blocks: 102.205.248.0/22 maxlen: 32
2c0f:5cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Validity
Not Before: Jul 1 13:40:47 2026 GMT
Not After : Jul 1 13:40:47 2027 GMT
Subject: CN=6a4518e5-ebd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:5a:c1:8a:4d:78:45:7f:db:98:6e:de:d4:
62:47:d0:15:a4:99:db:aa:d9:f4:3f:9c:49:1b:38:
8e:1c:d8:c2:a1:a4:e6:34:1f:aa:65:95:3d:db:0b:
c6:ea:be:f7:27:5d:f8:fe:b7:b8:54:82:ad:29:0c:
e0:52:9a:57:09:bc:6a:ae:74:31:4d:52:ff:95:04:
17:b8:f6:aa:43:f7:80:e9:c8:41:b2:53:c6:6d:58:
e2:f6:e8:e5:d5:42:26:b2:ef:7d:0f:1d:94:2e:bc:
8d:14:3e:46:e2:b4:a9:ea:86:63:84:ad:50:f5:36:
3b:6d:4f:5a:6d:34:f3:7a:59:af:86:ea:49:77:2f:
30:1c:d0:dc:f1:fc:8f:70:1b:03:a9:89:4a:54:a9:
7e:58:f4:92:ae:08:e5:60:84:76:1e:84:95:7a:25:
9e:5a:6a:fa:0b:e0:ca:f7:f9:ae:da:96:1a:86:2c:
ec:33:1a:d0:26:c1:6b:de:79:d5:0f:09:58:23:e9:
de:ef:05:7f:8d:e4:da:12:c3:f2:ed:fe:0f:c3:2b:
20:e1:e2:ff:82:45:4c:fa:bd:ab:e6:99:11:3d:9e:
7f:be:67:58:27:5b:a8:4a:11:31:2d:39:84:09:d6:
8e:b4:43:2d:d1:3d:fc:ef:ee:cd:09:7d:de:c7:2a:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:BA:6B:2F:05:F5:92:16:C2:0A:96:68:52:97:AE:9D:70:1A:AC
X509v3 Authority Key Identifier:
keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/7A8E9D30755211F1A6F15909CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.248.0/22
IPv6:
2c0f:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
14:f7:4a:96:9f:6a:9d:c0:78:b7:7d:21:b1:b5:29:50:f2:87:
84:8c:22:4a:6d:3e:ec:c9:64:19:85:ad:77:8a:1e:49:1b:ec:
e2:2d:a6:ae:86:01:46:c2:78:5a:a7:59:10:40:6d:2a:9c:50:
d9:4b:34:f9:bc:a3:36:c2:9d:eb:a6:7c:aa:94:7c:e6:40:b2:
13:7f:a6:d2:76:02:aa:5f:a0:79:0c:95:23:58:c4:ac:60:33:
9f:eb:f8:ff:c5:88:41:f3:72:9e:cb:13:13:d9:ba:87:5b:d4:
09:24:6d:c0:95:55:a1:e9:3e:9b:7b:06:e4:d1:af:79:c1:ed:
e8:5c:5b:04:8f:38:71:d5:ef:b8:5e:57:e2:38:28:a7:a6:bb:
dc:35:04:1a:46:8a:b0:45:fe:0a:e7:7a:cd:6e:94:b9:8e:9a:
80:a5:55:de:b0:15:02:ff:c4:ae:33:f6:64:5f:b4:fc:ab:48:
24:e1:75:b7:b3:ca:e9:c5:7a:bd:b8:45:e6:65:f0:c5:a6:fb:
1d:40:e5:54:e3:41:3b:37:b5:64:29:3b:c4:06:86:10:cc:14:
60:e0:4d:b2:96:26:d2:90:1e:af:8f:fc:70:bd:31:d4:c7:5a:
ca:6c:1b:1a:8d:dc:ef:f6:ed:71:2b:6a:6a:0c:20:24:23:29:
eb:da:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:15 2026 by rpki-client