Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/F551951A84CD11F19134A7C3CE1D38B0.roa
File: F551951A84CD11F19134A7C3CE1D38B0.roa (raw, json)
Hash identifier: EaO04bLdi0m1O/TLlJIsUCpqw5S/IIMDhS+gwqI+2+g=
Subject key identifier: 6E:3A:FE:74:CA:AB:D5:BE:AE:D3:79:51:21:1D:6B:07:5A:51:E2:DF
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0805
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/F551951A84CD11F19134A7C3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:32:35 +0000
ROA not before: Tue 21 Jul 2026 06:32:31 +0000
ROA not after: Mon 21 Jul 2036 06:32:31 +0000
asID: 37053
IP address blocks: 102.217.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:32:31 2026 GMT
Not After : Jul 21 06:32:31 2036 GMT
Subject: CN=6a5f1283-90ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:db:ac:a4:0e:95:71:54:e4:22:9a:93:2f:
66:1f:5d:3c:57:04:64:50:52:d8:92:2a:78:ae:05:
8f:6b:c6:9d:9e:40:a4:10:60:2f:b5:2c:fb:d6:64:
ef:e1:b8:c3:ae:ec:ff:91:78:72:a1:7d:01:76:a6:
43:cb:5a:c3:94:24:45:d8:a7:b0:5a:64:5c:29:43:
62:19:38:f8:c9:4e:86:e8:0e:92:e6:88:ba:6c:15:
9e:10:af:d3:48:0b:a1:16:47:e4:fd:67:da:cc:d4:
7a:35:89:e4:28:9d:0a:e8:6f:d1:c4:74:13:c9:51:
87:ce:71:59:86:24:fc:d8:7b:ae:86:f3:c9:13:24:
a1:cc:17:ff:0c:a9:e0:3c:76:f0:8c:60:6c:de:68:
a7:90:f9:ad:2a:d1:8c:04:07:fe:eb:98:ac:90:13:
22:6e:62:a2:05:d4:66:b4:fa:51:0e:0f:c2:0c:e2:
16:fe:c6:61:91:e9:52:b1:9f:b6:4a:ec:dc:f5:f5:
b7:78:f5:f0:b9:f7:0a:fe:53:ff:a4:2a:e1:a8:6d:
b7:4e:91:12:67:fb:7c:04:39:f2:8b:70:23:23:8e:
ff:e2:7f:6e:cc:a3:3c:94:07:bd:a2:24:40:85:43:
98:46:a7:93:8d:2a:e5:3a:26:2d:c1:58:2d:f3:36:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:FE:74:CA:AB:D5:BE:AE:D3:79:51:21:1D:6B:07:5A:51:E2:DF
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/F551951A84CD11F19134A7C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:4a:63:a6:cb:c6:f0:d7:01:15:9f:ac:a1:8f:48:40:39:fe:
cd:87:49:e5:47:6e:70:67:7f:c5:9f:92:08:d9:a2:19:d3:5c:
1e:17:00:72:4a:16:41:72:62:83:6b:89:40:76:8b:f0:74:77:
a2:0c:31:27:20:7b:9b:71:40:3c:2b:24:a5:26:8b:9f:d6:57:
56:99:ae:a2:a6:b5:c8:6b:e8:75:b7:8c:7d:bb:30:c5:09:c4:
94:20:d9:80:62:de:d1:fb:bf:7c:6d:86:21:c4:1f:69:cf:62:
81:f8:44:47:cd:50:f1:94:7b:c8:aa:35:ad:92:27:e1:88:25:
37:2f:c7:3b:3c:59:c1:a7:23:05:ae:3c:57:4f:22:de:7a:50:
e1:70:fc:70:9a:74:f5:80:5a:9e:51:94:7d:62:dd:35:cb:d7:
56:31:06:91:15:d6:49:9e:59:b1:18:b3:68:ef:eb:78:4f:a3:
6e:8d:a6:ed:4c:8d:0e:1e:4f:74:87:a8:58:d1:58:25:66:c8:
18:ab:17:ee:ed:1c:ca:73:fd:c2:75:83:b9:b4:d6:0b:71:8e:
af:2f:31:9f:33:ad:9d:eb:00:d4:7b:9f:51:83:1c:45:77:ba:
95:d8:fe:9d:77:47:ec:82:91:03:43:88:55:c5:0b:bd:ee:59:
28:6b:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:55 2026 by rpki-client