Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/8CE3B23E846D11F1A56407E7CE1D38B0.roa
File: 8CE3B23E846D11F1A56407E7CE1D38B0.roa (raw, json)
Hash identifier: Nw6b5ero/wWuFYNopyGbuS9j7QQwO11rcoEZb6aRGW0=
Subject key identifier: 0F:F0:CF:4C:6F:8A:43:BD:5D:DE:EF:DE:D1:46:61:68:10:99:D9:FA
Certificate issuer: /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial: 0568
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/8CE3B23E846D11F1A56407E7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 19:02:28 +0000
ROA not before: Mon 20 Jul 2026 19:02:24 +0000
ROA not after: Sun 01 Jul 2046 19:02:24 +0000
asID: 328029
IP address blocks: 102.207.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Validity
Not Before: Jul 20 19:02:24 2026 GMT
Not After : Jul 1 19:02:24 2046 GMT
Subject: CN=6a5e70c4-7263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:35:b5:b4:a5:e9:65:a8:b1:14:ad:ca:ec:
62:15:2c:50:d2:e5:d5:a6:eb:9f:e3:3f:0d:b9:be:
57:1c:b3:33:4e:5e:4d:f6:c7:03:70:b8:7f:29:9c:
89:04:ba:83:7e:6d:20:c2:69:01:37:42:16:26:31:
96:d5:dd:39:8f:30:79:48:09:95:c4:25:16:d8:ce:
1c:95:00:ba:2c:f6:14:a3:3f:12:c8:c7:96:ed:5c:
e9:fb:6b:90:4a:d7:60:86:c4:2a:f2:14:56:49:93:
cc:d1:fd:2a:1f:c1:5d:86:cd:e1:a1:09:f9:f0:70:
ec:32:a8:8c:b6:8d:6d:2d:4f:f3:5f:b8:6a:fe:f3:
d6:08:4a:d7:3a:92:a5:51:bd:87:8e:8c:76:3c:14:
7b:1c:bd:52:d4:1f:a3:46:f2:62:65:93:f6:a2:cf:
d2:78:82:8e:2d:f1:53:e4:73:5b:8f:bf:ce:20:df:
bc:3f:c7:db:bd:3a:23:34:51:06:0a:f5:a2:28:0c:
86:35:8d:1c:92:31:32:e1:28:d5:e6:a6:86:0b:e2:
75:1e:54:52:33:c7:dc:8d:34:d5:3a:33:e1:ad:e7:
a5:35:70:3a:d0:eb:b2:50:11:ff:e3:8d:9e:fe:ce:
15:55:36:2f:43:d3:b1:be:ea:41:d4:ff:d2:b1:7a:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F0:CF:4C:6F:8A:43:BD:5D:DE:EF:DE:D1:46:61:68:10:99:D9:FA
X509v3 Authority Key Identifier:
keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/8CE3B23E846D11F1A56407E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:66:40:70:11:2e:f7:84:f3:c6:db:d9:1d:d3:89:16:61:ac:
6f:bb:b9:9a:5d:7e:da:ad:05:20:89:59:dc:4b:12:ca:94:f7:
c3:30:a5:c6:a2:ca:6b:1c:3f:ad:ca:df:5c:3f:e2:34:51:25:
f5:b5:cb:e8:db:26:bb:b5:3e:ea:07:9c:02:0f:93:7d:05:03:
e9:ec:3e:60:4f:bc:19:fc:0b:17:fa:cd:97:7b:1e:b9:61:14:
d8:23:4b:a7:2f:15:33:55:90:14:0a:b5:87:7e:0d:90:39:63:
a6:1a:fc:11:9f:1a:fd:ad:a1:ae:f3:ef:e7:3a:48:04:54:82:
03:dc:81:9b:2f:12:d7:11:13:41:3d:43:7c:48:1d:c7:42:88:
16:79:72:9a:d3:05:a7:29:44:54:09:68:04:c2:09:c9:19:67:
6b:f6:58:cc:48:80:67:77:6e:e3:b9:75:69:cf:88:e3:2b:79:
d7:bb:c4:2d:6f:6f:00:62:d7:a1:a7:7f:df:f4:cd:a0:a1:f4:
68:57:ac:be:ad:30:27:96:de:63:be:4d:bd:73:ef:37:06:7c:
3f:7c:6b:9a:53:09:18:74:51:0f:12:9d:89:56:db:06:17:1f:
39:94:23:d7:b0:26:c4:1d:79:35:af:73:24:74:16:73:28:ac:
87:5e:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:19 2026 by rpki-client