Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/709C9AF07E9611F1B670E8A0CE1D38B0.roa
File: 709C9AF07E9611F1B670E8A0CE1D38B0.roa (raw, json)
Hash identifier: kULxAx5OQMS8RRQIFyZkaRuPIeQUE8SFLSbtCir4i1Q=
Subject key identifier: A1:F7:73:B2:D9:1E:31:81:13:4C:BF:03:D8:DD:DF:19:68:61:92:79
Certificate issuer: /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial: 078D
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/709C9AF07E9611F1B670E8A0CE1D38B0.roa
Signing time: Mon 13 Jul 2026 08:40:03 +0000
ROA not before: Mon 13 Jul 2026 08:39:58 +0000
ROA not after: Fri 31 Dec 2049 08:39:58 +0000
asID: 327750
IP address blocks: 102.221.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B5D1AF, serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Validity
Not Before: Jul 13 08:39:58 2026 GMT
Not After : Dec 31 08:39:58 2049 GMT
Subject: CN=6a54a463-d5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:0a:0c:9f:a8:78:1c:79:33:be:1b:81:2e:
df:15:a5:dc:18:90:30:98:55:52:c5:c2:e2:07:32:
3c:ca:04:44:1a:0f:8b:c1:db:52:67:d5:18:da:5a:
2d:1a:97:84:a7:45:42:a5:af:5b:af:fd:4b:14:e6:
e0:03:46:e4:c3:3f:fa:fc:98:84:93:c8:b5:2f:29:
26:4d:66:38:3b:1b:7e:08:19:35:e7:7d:f3:20:4a:
df:d3:be:a2:f4:ab:30:d2:ef:ef:da:a0:c7:d2:79:
d6:f6:9c:71:29:1d:3c:e0:4f:ce:92:b5:51:83:8d:
14:b8:b3:6b:d0:d6:f5:ba:ee:0c:90:8c:ea:88:01:
a0:72:1a:f6:e9:4e:bb:b4:81:63:42:81:77:58:46:
38:a6:49:8d:c1:94:6a:fb:0d:f8:d3:b0:12:26:4f:
77:03:ed:56:c2:08:3d:34:ad:03:94:ca:24:d8:83:
32:4e:bc:51:a3:65:c7:8e:72:30:00:ac:6a:e3:6b:
0a:53:6b:75:c9:45:17:c2:67:e6:a5:0d:46:9d:ce:
00:c0:ac:9b:4b:22:96:73:4e:85:60:2f:f3:4e:30:
a7:a7:fd:f8:03:df:c3:77:ca:1b:a9:1f:dd:23:a5:
6c:be:ed:68:01:f0:ab:46:2c:ba:ce:aa:a7:d2:3b:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:73:B2:D9:1E:31:81:13:4C:BF:03:D8:DD:DF:19:68:61:92:79
X509v3 Authority Key Identifier:
keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/709C9AF07E9611F1B670E8A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:94:5f:73:0d:13:9f:53:cd:72:16:7d:b6:b1:0f:01:38:85:
7d:83:91:c2:7c:f0:d9:64:f6:4e:2f:b0:5a:18:1a:bc:66:b3:
7d:4f:b8:ab:5d:b9:3d:49:72:d1:7e:13:13:5b:f1:02:e8:a0:
38:1a:d7:61:b7:52:a0:ae:1a:c6:76:47:59:0c:a0:e8:fb:d3:
ed:ab:5b:9c:7e:d9:b3:05:ec:ad:bf:74:97:bb:17:a9:43:a5:
e6:d5:99:97:ea:66:c7:3b:d5:88:af:a8:f9:74:e9:a4:08:21:
d9:9b:fb:34:51:71:4d:ae:c0:28:a0:9a:1b:ac:3d:57:e3:4b:
fc:0c:b2:0e:65:32:3b:5e:f9:56:b6:bb:75:53:15:5c:a0:59:
ea:77:ed:8d:97:16:5d:2a:52:a4:b4:4e:fd:93:ad:0e:a4:57:
a1:64:71:df:13:68:06:0c:ea:8c:8f:4c:24:66:5a:ee:47:05:
3c:f1:a7:e2:2a:2e:cb:03:94:c6:53:e9:08:1d:98:57:31:a8:
85:08:e1:6b:09:9d:5a:7f:37:11:96:5e:22:b2:69:ba:1b:b5:
14:e1:8e:07:92:aa:d9:b9:dd:53:9b:a6:54:51:fd:19:45:16:
73:4d:85:55:55:f7:a6:12:a2:b7:0f:9f:be:7f:ef:75:2a:3e:
d5:26:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:40 2026 by rpki-client