Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/12A7C33284CE11F1B3D7C2C3CE1D38B0.roa
File: 12A7C33284CE11F1B3D7C2C3CE1D38B0.roa (raw, json)
Hash identifier: /EIiF/biK6Rkr1BJhtsvuLTMlPWfkoPFNbwqLg4BIF4=
Subject key identifier: 1A:7A:51:53:D4:A8:0F:62:F7:92:57:ED:D6:16:08:B3:78:C6:3B:BF
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0807
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/12A7C33284CE11F1B3D7C2C3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:33:24 +0000
ROA not before: Tue 21 Jul 2026 06:33:20 +0000
ROA not after: Mon 21 Jul 2036 06:33:20 +0000
asID: 37053
IP address blocks: 102.217.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2055 (0x807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:33:20 2026 GMT
Not After : Jul 21 06:33:20 2036 GMT
Subject: CN=6a5f12b4-8347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d7:1e:4e:03:49:dc:57:bf:19:05:bc:94:37:
01:af:ea:1a:63:f0:86:6b:32:92:8c:35:b3:fa:eb:
a9:7c:c0:9c:37:ce:52:39:24:d7:01:9d:b0:95:fa:
94:1f:73:b8:b1:42:e1:57:f4:ee:2b:29:40:0c:b7:
f6:e0:d6:02:68:20:8c:43:d8:0f:77:a8:23:af:77:
17:01:dd:9a:88:43:81:d0:18:3d:dd:f3:f7:24:62:
a5:3f:84:8e:82:1e:f3:ad:e9:3b:4d:31:ae:84:8c:
b6:ce:e9:20:1e:fb:4f:e4:af:77:60:30:5a:07:10:
30:1c:ac:19:9f:3c:02:8e:fc:10:ea:2a:0c:0a:b6:
3d:e2:d2:1e:08:cb:2a:37:2f:95:bc:62:29:f6:80:
a0:72:4b:50:46:31:1c:31:b3:72:9b:50:0f:f2:20:
b0:17:99:f6:64:b8:e5:71:3f:e4:69:c0:89:3c:94:
17:c2:ba:07:e8:55:17:d8:74:e3:f9:21:9e:3a:65:
2d:7e:6d:e8:27:07:a4:c3:a7:4c:d1:bf:4d:a4:d6:
73:3a:02:09:77:a9:67:7d:dc:c6:e3:68:22:d0:76:
fc:f9:3f:26:d2:ee:4f:02:07:a5:55:d8:3f:c0:a7:
2f:56:e1:77:7f:d6:44:d2:bf:21:f6:a6:a8:23:ad:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:51:53:D4:A8:0F:62:F7:92:57:ED:D6:16:08:B3:78:C6:3B:BF
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/12A7C33284CE11F1B3D7C2C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:d6:2f:6d:ca:cc:b3:f7:bb:17:b9:a7:3a:f1:f5:d5:8c:53:
cc:e8:0b:d4:0b:86:98:8d:23:df:1f:a7:52:fd:1c:c1:28:ea:
e9:6f:22:78:b9:ad:a0:50:61:06:c6:12:69:e6:8d:b7:88:e8:
bf:9c:03:8b:77:a5:58:3a:20:3b:a3:e8:49:6f:f7:4d:71:87:
aa:60:05:e2:e1:36:4b:1e:5b:23:32:9d:6a:0e:f5:c1:ba:c7:
34:99:ab:19:60:d5:41:45:74:9d:8a:6e:8c:fe:93:fe:17:46:
f2:6a:b9:81:a2:17:2b:9f:31:ae:4e:4c:8c:4a:f0:82:40:3e:
5b:1e:4e:d0:b0:08:c0:69:f4:c9:46:3e:f0:6f:f3:7f:c7:77:
6e:6c:3e:fc:e8:0c:94:16:05:8b:e1:df:b6:9e:3b:3c:96:73:
0b:6b:fd:4a:72:b4:1e:6d:02:98:d1:f3:4a:08:61:bb:67:c9:
51:ea:40:61:5e:9d:1f:75:80:79:fc:76:5f:ed:4c:9a:c5:af:
bc:a4:05:96:70:52:09:ac:7a:d8:6c:a8:1b:2d:1c:0e:e6:2d:
45:11:04:5e:97:f7:55:88:44:89:6f:df:51:20:6d:18:25:47:
60:2b:5f:38:da:80:4b:cd:5d:5c:51:af:0b:e3:fa:cd:e6:2b:
de:f0:dd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:00 2026 by rpki-client