Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/B8FDD17C84CE11F19F46E1C7CE1D38B0.roa
File: B8FDD17C84CE11F19F46E1C7CE1D38B0.roa (raw, json)
Hash identifier: IeG5yGzU/O+CkLb/VHEImjizJE/hEB0NdDDpNaC08b0=
Subject key identifier: CA:5F:4A:E8:F5:5E:CB:C4:4F:2B:A0:F7:CF:1A:E8:67:8B:B3:12:00
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 080F
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/B8FDD17C84CE11F19F46E1C7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:38:03 +0000
ROA not before: Tue 21 Jul 2026 06:37:59 +0000
ROA not after: Mon 21 Jul 2036 06:37:59 +0000
asID: 37053
IP address blocks: 102.212.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:37:59 2026 GMT
Not After : Jul 21 06:37:59 2036 GMT
Subject: CN=6a5f13cb-49a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:aa:c5:45:52:27:41:cd:ae:1f:92:4b:7d:11:
71:99:57:d0:bd:eb:28:21:72:22:ca:e2:62:3a:80:
56:a7:12:ba:5b:e7:85:7f:5f:3b:cd:fd:97:85:a8:
3f:74:0e:d6:a7:c7:77:72:64:0f:bb:3f:5b:a8:1d:
b4:72:2c:61:29:2e:1c:1e:86:a3:48:54:31:5f:66:
6b:e0:03:16:88:22:d1:24:e8:38:21:16:e7:6e:c9:
44:41:cb:db:94:df:38:9c:da:d6:d5:49:0f:66:d0:
65:80:64:49:2a:9b:2e:c6:ab:64:7e:f8:d1:db:34:
7c:99:25:83:52:db:cc:a3:e4:6f:d4:87:46:2b:33:
2f:5a:db:7f:92:de:f7:7e:99:0e:9e:d2:ea:8a:64:
19:82:bf:9f:6d:17:c5:57:3b:91:80:46:08:a7:1b:
dd:62:a5:b4:81:cd:55:cc:3f:ae:23:73:68:f4:52:
91:13:ae:4d:d7:cf:4d:5e:dd:72:e2:82:12:29:f0:
a4:8a:fb:17:df:1d:85:a9:95:fb:18:67:fa:1d:a2:
05:71:e8:aa:a9:c2:fa:18:59:19:d0:3f:ed:b6:80:
92:13:3d:b3:3c:95:88:58:07:77:6c:77:fb:b1:a2:
aa:cd:be:8f:27:84:e9:00:91:aa:66:44:81:45:d8:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:4A:E8:F5:5E:CB:C4:4F:2B:A0:F7:CF:1A:E8:67:8B:B3:12:00
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/B8FDD17C84CE11F19F46E1C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:e5:54:6a:19:8c:15:f9:a3:05:dc:f2:b6:5f:79:3a:7a:db:
bd:a1:b6:82:20:1c:28:9f:39:d5:a1:a8:fe:96:fd:dd:5d:65:
6b:5b:9c:cd:ea:2a:f2:0e:89:ea:c6:62:05:d1:53:70:cd:c9:
14:4c:e9:ce:ca:a1:24:4f:72:de:c0:d8:40:b3:49:9a:d8:b4:
0d:72:16:54:5c:94:35:22:8a:3b:c9:69:5c:ba:c7:85:f9:d3:
b4:cb:d4:4a:97:4a:c9:0e:0e:76:b1:ec:e6:4b:cc:c8:b7:2b:
6c:d9:1f:5a:6e:a7:f1:57:b8:c2:3d:7b:b0:22:5f:58:a8:cc:
21:2f:6f:93:a3:77:c5:c3:80:80:ad:cf:7f:3a:38:0d:11:b5:
82:07:b9:50:a4:d7:50:70:a4:7a:86:e7:ee:16:ea:cd:23:e0:
62:29:13:20:34:bd:1e:d0:a4:e0:d5:69:0f:23:70:1e:17:1e:
19:66:83:d0:09:dc:67:d8:ea:e2:04:13:53:03:0d:b8:f3:f1:
a6:35:f2:98:0e:f4:f8:61:db:23:05:10:c7:7b:88:30:e9:84:
ca:0d:07:d7:43:d4:17:0f:04:07:f6:f1:d9:dd:40:57:50:84:
21:df:be:90:a7:25:94:cc:e0:01:8a:91:cb:67:43:81:3c:25:
a2:67:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:01 2026 by rpki-client