Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/381D545284CD11F1AB0F87BFCE1D38B0.roa
File: 381D545284CD11F1AB0F87BFCE1D38B0.roa (raw, json)
Hash identifier: xsdWeT57oHJUoWFQZiAMNoKhSUe1rM275rh2V8vVF5I=
Subject key identifier: 1B:09:9F:6E:BD:E7:15:70:C0:0C:15:33:D9:41:07:AA:E2:A9:42:D0
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 07FD
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/381D545284CD11F1AB0F87BFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:27:17 +0000
ROA not before: Tue 21 Jul 2026 06:27:13 +0000
ROA not after: Mon 21 Jul 2036 06:27:13 +0000
asID: 37053
IP address blocks: 102.217.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:27:13 2026 GMT
Not After : Jul 21 06:27:13 2036 GMT
Subject: CN=6a5f1145-8a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:b6:f3:c4:58:54:66:76:96:64:5d:b7:57:
68:2c:e7:1e:e5:00:4e:25:1b:9a:07:90:02:c1:c8:
af:fd:b3:53:b1:bd:a6:40:6c:3f:48:90:d2:9c:19:
41:b0:05:b5:4e:27:53:c9:1b:ab:76:b3:38:ec:cf:
c0:c1:05:e4:82:40:92:a3:7b:12:be:2f:57:4a:7b:
5b:2b:87:dd:4c:57:ae:d0:7c:0b:7f:4f:3c:51:7e:
20:8e:22:52:08:99:6b:8b:e3:f8:fc:3a:d7:a8:92:
1e:e5:5e:15:5e:06:36:96:c2:ec:65:21:50:0b:94:
ce:91:54:7f:98:79:03:e7:53:6e:3e:6f:b7:e5:5f:
47:8e:37:ce:c0:c8:7f:a5:70:2a:5f:b9:cc:7a:6b:
c4:58:95:81:a0:6c:07:d9:a8:ce:5a:6b:33:4c:e3:
8a:e0:43:cc:05:0e:06:20:0f:3e:16:73:84:b8:72:
c0:8b:f8:69:6d:01:ab:ed:ed:25:88:74:0c:10:a0:
e4:c2:9a:cd:4c:59:1c:5e:f1:86:19:12:d8:52:eb:
dc:7e:ca:74:3d:36:f7:7e:39:42:b0:0e:1e:a9:72:
d3:04:bd:af:2d:00:22:9f:aa:82:48:bb:0e:9f:c4:
b2:02:af:80:86:4d:e6:1c:71:a9:99:7d:9f:42:f4:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:9F:6E:BD:E7:15:70:C0:0C:15:33:D9:41:07:AA:E2:A9:42:D0
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/381D545284CD11F1AB0F87BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.76.0/22
Signature Algorithm: sha256WithRSAEncryption
80:2b:74:c1:07:06:f4:a7:d0:2c:ec:af:c1:5d:27:e7:37:fb:
b3:ed:fb:71:1f:42:66:c7:6f:5b:5f:09:9d:ad:b1:02:47:86:
a3:54:2d:05:ae:d0:27:8d:7c:2d:83:9d:f6:3a:d4:c0:2a:57:
41:95:08:01:6c:79:02:51:04:64:d1:b9:8f:e4:57:2c:6b:65:
7a:43:3f:c2:d9:35:d6:93:46:12:d2:e8:7b:d7:30:47:03:1e:
27:19:3c:17:38:86:d0:96:fd:30:05:4d:cc:76:b8:97:77:eb:
e6:85:2b:c5:de:bc:af:36:82:cf:c3:2d:f1:ef:93:f6:d1:14:
bb:43:6e:8a:b9:05:7f:f3:ec:5b:d6:45:02:43:17:f5:9c:cd:
a3:a8:ff:d3:d3:81:52:5f:67:70:ce:72:13:03:fc:cd:5b:be:
05:97:6d:80:a9:fb:ee:a3:ce:b9:d0:75:89:b8:35:fb:22:1f:
67:ec:15:ec:eb:e3:0a:3f:84:fe:b1:06:45:67:d4:36:f6:f7:
7f:cc:bb:70:ef:49:eb:05:22:72:8b:ae:70:a3:e0:26:c5:80:
3a:d3:5e:da:a5:d0:a4:d4:ee:e8:5b:1a:7d:8b:09:a1:29:b5:
29:74:68:b8:a3:a5:d9:ca:6c:3b:b8:36:9a:08:3d:d9:af:6b:
0d:5b:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:00 2026 by rpki-client