Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/7BC55F5684CD11F1B127B4BFCE1D38B0.roa
File: 7BC55F5684CD11F1B127B4BFCE1D38B0.roa (raw, json)
Hash identifier: LR+gyq2jccNOat5HaBgtE3Bf5otijfAgcftp0Nqre80=
Subject key identifier: 56:2D:EA:D3:60:DB:F9:F4:FE:EA:F9:FC:55:05:7E:6F:4F:2B:7B:6E
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 07FF
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/7BC55F5684CD11F1B127B4BFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:29:11 +0000
ROA not before: Tue 21 Jul 2026 06:29:07 +0000
ROA not after: Mon 21 Jul 2036 06:29:07 +0000
asID: 37053
IP address blocks: 102.217.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047 (0x7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:29:07 2026 GMT
Not After : Jul 21 06:29:07 2036 GMT
Subject: CN=6a5f11b7-ed42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:23:d0:05:df:53:52:8a:5c:5e:16:90:b4:
73:7c:2f:d1:3e:f2:9f:8d:b9:a5:49:75:2b:32:b5:
ed:5f:67:34:57:c0:a8:73:4e:f5:16:60:00:0b:34:
7b:6a:3c:ed:95:11:c1:bf:e7:9a:e7:01:c4:bf:a1:
0e:a4:78:a9:0d:cb:d0:39:1e:1a:d4:43:30:2c:13:
12:79:2e:23:cc:96:e6:a1:6d:2a:09:60:30:a3:1b:
4e:7a:e7:a4:39:7d:87:28:01:47:10:54:d7:c0:41:
3c:2f:4a:26:e9:b5:6c:5b:d8:6f:ad:2b:3b:db:64:
e4:0e:07:38:6d:ea:12:ad:24:31:b5:4b:7b:5e:a6:
d3:c7:2c:75:91:10:1f:0c:7b:c7:81:91:46:ec:ea:
84:bb:a0:e9:10:0e:b8:7a:99:59:f2:99:16:f5:13:
c4:29:21:bf:d8:e5:06:96:51:3f:10:4b:9b:fb:b9:
e0:ca:e7:25:79:89:34:7c:90:99:4c:b7:63:e2:0c:
1d:10:87:a3:75:e7:7c:f6:eb:7b:8c:e5:95:0f:ce:
20:9a:d6:75:89:e2:1f:9c:f1:60:51:c4:c2:50:02:
41:79:45:0d:70:f0:95:c8:8b:3a:c6:15:fe:75:ee:
3b:c8:7b:c7:6d:e8:db:8a:a4:b1:9a:c8:eb:76:ad:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:EA:D3:60:DB:F9:F4:FE:EA:F9:FC:55:05:7E:6F:4F:2B:7B:6E
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/7BC55F5684CD11F1B127B4BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.28.0/22
Signature Algorithm: sha256WithRSAEncryption
61:20:15:65:d2:19:14:e7:fa:3f:0b:cd:cd:3e:2b:70:a2:39:
7a:8f:a3:b5:7c:90:f3:a1:63:f7:a8:51:7a:6c:c4:40:38:db:
a2:22:f6:43:69:43:98:8b:65:09:b4:2a:d3:ca:8c:09:ed:ed:
e6:5f:b7:91:84:12:f2:8b:33:ed:b1:fa:05:97:58:43:90:81:
7e:35:b5:e0:a3:1a:a9:68:f8:99:cf:64:8f:bf:bc:15:db:19:
08:d6:2b:33:ad:d2:ab:2e:f5:9a:15:50:3b:24:ba:5e:8e:a7:
13:3c:99:d3:d9:20:12:38:a0:84:08:51:b6:70:35:40:ac:b0:
0d:89:12:fa:ae:6d:db:ac:51:62:c1:1f:73:14:77:f0:30:f7:
ca:ae:5a:90:f8:99:d4:37:84:c0:0b:22:dd:6f:7c:db:27:84:
d4:63:7c:50:ff:31:e1:7e:c2:ed:cf:51:2c:fb:e8:c8:11:60:
40:2e:13:2c:76:e3:3b:71:8c:67:f9:00:c1:7e:2f:6a:a1:bb:
35:9e:7f:50:57:1e:06:6d:ce:8d:66:07:aa:e0:aa:cc:23:c9:
70:ce:3d:19:ea:02:16:52:f2:78:cb:68:fc:82:fc:e4:47:48:
5f:5d:38:55:45:38:0d:0b:0b:3d:88:59:64:a1:5c:a7:38:a4:
a9:ca:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:13:45 2026 by rpki-client