Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/D4AC99EE84CE11F1B611EFC7CE1D38B0.roa
File: D4AC99EE84CE11F1B611EFC7CE1D38B0.roa (raw, json)
Hash identifier: ZkOeB2MCYaW3wCGIrJG6fIlkRJfAvzJwtuP5KFzDs5I=
Subject key identifier: 24:50:B4:0F:07:ED:27:75:0B:18:85:75:C0:AD:55:BC:3D:D6:11:89
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0811
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/D4AC99EE84CE11F1B611EFC7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:38:49 +0000
ROA not before: Tue 21 Jul 2026 06:38:45 +0000
ROA not after: Mon 21 Jul 2036 06:38:45 +0000
asID: 37053
IP address blocks: 102.210.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:38:45 2026 GMT
Not After : Jul 21 06:38:45 2036 GMT
Subject: CN=6a5f13f9-f996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:7c:27:b8:2a:0f:32:64:e3:96:f2:b0:d5:
ac:14:e6:6e:49:50:cf:aa:a3:7f:d8:57:56:74:7c:
1f:35:6b:0d:9f:a7:19:85:6a:fb:83:7b:fe:75:be:
70:7d:b6:d6:59:14:76:1e:56:ac:8c:f8:44:72:3c:
f3:52:ff:29:44:fe:d9:06:cf:cd:e0:2f:0d:3a:f4:
4f:f0:d8:b5:cf:88:ba:6a:0f:57:ff:d3:83:a2:3a:
f2:2d:02:91:1e:46:58:e1:4a:0f:b3:bc:c5:6d:ab:
10:cb:7a:57:98:12:99:95:1f:25:e5:3f:44:35:b9:
32:83:05:65:50:fe:31:8e:13:3b:43:3b:2b:07:b9:
60:2f:72:dd:18:04:e0:60:ad:48:de:9d:d4:bd:82:
64:22:82:58:42:76:f3:63:e9:d5:56:f5:8f:48:f3:
d1:38:60:25:f8:93:2b:72:47:ea:a7:65:83:c1:60:
2a:32:12:5e:c9:52:a1:f3:99:0c:5b:32:16:19:57:
3a:78:e4:e4:1f:64:bd:dd:26:e3:ce:68:5b:96:90:
b1:6f:0f:5b:81:e8:7f:83:57:9b:1f:dc:0c:5c:af:
c9:03:7a:ee:88:bd:02:f7:c4:36:d2:38:04:5b:94:
46:e9:0a:51:ba:18:f5:04:7c:03:fd:c3:4b:e6:ba:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:B4:0F:07:ED:27:75:0B:18:85:75:C0:AD:55:BC:3D:D6:11:89
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/D4AC99EE84CE11F1B611EFC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.136.0/22
Signature Algorithm: sha256WithRSAEncryption
22:bc:06:ac:0c:df:4f:d7:bc:d5:37:75:31:12:88:c9:11:9f:
9c:28:ec:06:28:29:47:07:09:08:43:8d:d7:90:40:13:88:6c:
73:f8:0b:2d:c9:44:26:b6:a4:d5:aa:03:0c:fb:3b:23:6d:16:
f4:6e:93:90:52:83:ef:6b:6b:2a:01:6a:0a:00:57:5e:82:af:
ae:75:ff:c6:c8:fb:3d:f3:2a:05:31:4a:51:80:0e:71:71:6e:
cc:fc:ce:4e:fa:5d:ed:f1:46:1c:42:60:1d:02:11:96:81:db:
63:7f:7a:47:38:c3:11:b9:11:f2:43:46:ae:e3:0f:99:2d:ac:
c1:0c:95:ba:d1:b7:01:ef:e9:ea:a9:72:46:2c:98:fc:a3:b9:
e1:b0:cf:89:da:ad:ad:b3:b1:4a:46:fc:85:64:00:9e:b4:b0:
cd:ab:9d:52:96:47:8c:c3:fe:d5:4c:b7:e8:25:2d:f4:ad:b3:
47:3e:f2:4f:0b:80:6e:85:be:d3:aa:39:d1:90:19:96:e0:00:
31:fa:08:5c:8e:4b:df:44:f1:9f:e4:a5:7e:c5:75:69:4a:35:
16:ea:49:02:d8:e8:f6:c6:64:fd:5c:c9:7e:00:76:8c:31:44:
e3:01:31:de:c7:ee:31:4e:aa:6f:2e:91:b5:18:93:31:ca:75:
e9:f8:8a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:02 2026 by rpki-client