Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/E9E4135E846611F190C3AABECE1D38B0.roa
File: E9E4135E846611F190C3AABECE1D38B0.roa (raw, json)
Hash identifier: QZ6J7q1ijc+soc8o1wXWWKMcX9fKVLJpvIDMUk+E0Xk=
Subject key identifier: 7D:51:A7:13:6F:5A:45:80:2C:26:F5:77:01:A3:2B:70:4C:55:8F:2E
Certificate issuer: /CN=F363F81FAF/serialNumber=93C9B21FC8543038BFB425F3D90D5C4744DD774A
Certificate serial: 02
Authority key identifier: 93:C9:B2:1F:C8:54:30:38:BF:B4:25:F3:D9:0D:5C:47:44:DD:77:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/E9E4135E846611F190C3AABECE1D38B0.roa
Signing time: Mon 20 Jul 2026 18:14:57 +0000
ROA not before: Mon 20 Jul 2026 18:14:53 +0000
ROA not after: Wed 31 Dec 2036 18:14:53 +0000
asID: 329755
IP address blocks: 102.202.79.0/24 maxlen: 24
2001:43ff:a800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl
rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363F81FAF, serialNumber=93C9B21FC8543038BFB425F3D90D5C4744DD774A
Validity
Not Before: Jul 20 18:14:53 2026 GMT
Not After : Dec 31 18:14:53 2036 GMT
Subject: CN=6a5e65a1-67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:a3:2d:43:eb:1c:7b:9a:fc:1e:83:a8:25:
d3:fb:aa:ef:85:94:ec:5f:dc:d1:6f:df:28:a4:de:
d3:2a:36:04:4a:d7:40:3b:fd:25:e3:a6:78:69:ce:
12:02:30:99:fa:5f:4a:be:2c:d1:38:2a:68:c6:c6:
ee:0d:11:fc:c9:d3:03:2f:2f:5e:6e:c3:c7:7e:c7:
73:e3:fc:57:a7:71:c4:44:77:f3:aa:3f:af:e5:eb:
ae:3b:90:43:3d:40:43:01:73:9c:21:95:67:f5:60:
00:bf:d2:d1:1c:b0:38:e2:81:e1:af:f8:47:78:e2:
d4:7d:e5:40:c0:5e:70:bc:40:20:03:a4:ea:65:ce:
c8:94:1c:f6:31:4c:cf:52:75:a4:90:fa:2b:d3:26:
f2:b5:81:81:79:33:f0:c4:96:df:9c:37:df:7a:8e:
e6:34:08:27:d7:29:39:25:12:f6:e2:0f:34:36:59:
67:02:9c:76:78:36:6b:61:3a:c4:6a:ee:5f:bf:a9:
97:08:02:36:0f:61:b5:1e:56:6a:8f:2e:4b:29:fe:
98:9d:f3:f3:c1:36:dc:ff:e8:87:d4:2c:e0:60:45:
9e:db:6d:fb:a4:04:1a:22:d9:74:da:43:1d:f1:96:
c6:e2:85:fc:9b:7b:34:4c:52:e1:98:04:7d:f4:2f:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:A7:13:6F:5A:45:80:2C:26:F5:77:01:A3:2B:70:4C:55:8F:2E
X509v3 Authority Key Identifier:
keyid:93:C9:B2:1F:C8:54:30:38:BF:B4:25:F3:D9:0D:5C:47:44:DD:77:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/E9E4135E846611F190C3AABECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.79.0/24
IPv6:
2001:43ff:a800::/48
Signature Algorithm: sha256WithRSAEncryption
2c:10:eb:f6:0b:4f:9c:12:67:6c:c1:fb:3d:6d:20:47:89:53:
a7:51:4c:99:6b:7c:e0:96:4b:25:d9:d1:d0:54:de:0b:3c:13:
3e:a8:90:a9:d7:4a:16:90:b9:a3:2a:50:5f:e1:40:17:3f:32:
39:25:bc:a8:53:8e:4a:5b:5f:fd:aa:7a:2a:d0:72:ed:6f:81:
0f:d6:73:b2:1c:b3:a2:e7:a7:bb:99:9d:dc:d9:ba:3d:b1:7e:
fb:49:63:4c:bc:e2:d8:c7:91:89:9a:f5:20:71:fc:bb:92:bd:
1b:b9:c4:35:74:72:30:3c:08:5f:e8:a7:06:57:af:c6:6b:ff:
4e:8d:8e:19:58:b5:be:e9:7c:34:14:a7:ba:ae:d9:21:3f:24:
f8:32:29:93:75:53:dd:e6:f5:79:96:4a:fc:dd:dd:4e:90:2c:
00:a1:c9:f8:77:d5:33:d7:4a:9d:cd:5e:d6:4a:b0:0c:27:b0:
f1:18:6f:f3:a2:bf:32:5b:f9:f2:cd:ea:12:f5:41:58:e9:b9:
d4:90:a6:98:26:25:66:b0:19:95:51:80:9c:f8:8a:26:8c:5a:
5e:8d:19:5f:ba:40:20:f5:6d:74:42:96:97:f1:1b:a3:3d:b7:
f7:e0:97:ff:33:d0:45:f3:b5:d7:d8:9c:6d:e6:8f:28:5b:64:
3b:f0:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:50 2026 by rpki-client