Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/78AAD6F686B811F1AD0338E6CE1D38B0.roa
File: 78AAD6F686B811F1AD0338E6CE1D38B0.roa (raw, json)
Hash identifier: kggO1PHAaeMi9Iq20hDB0z/CvbOz9LysF/AicQaTOXs=
Subject key identifier: 63:5E:7B:0B:3E:6D:A2:FC:67:59:16:89:A4:FC:7E:35:A1:3D:8C:97
Certificate issuer: /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial: 0504
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/78AAD6F686B811F1AD0338E6CE1D38B0.roa
Signing time: Thu 23 Jul 2026 17:03:49 +0000
ROA not before: Thu 23 Jul 2026 17:03:44 +0000
ROA not after: Thu 31 Jul 2036 17:03:44 +0000
asID: 37014
IP address blocks: 102.201.232.0/24 maxlen: 24
102.201.233.0/24 maxlen: 24
102.201.234.0/24 maxlen: 24
102.201.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Validity
Not Before: Jul 23 17:03:44 2026 GMT
Not After : Jul 31 17:03:44 2036 GMT
Subject: CN=6a624974-b7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:9f:22:41:4b:31:d8:73:82:fb:30:f4:8f:
ef:7c:a0:b8:0c:19:1b:37:bd:01:1e:a7:1f:b5:8e:
b8:cd:54:9b:bd:91:da:ff:3f:c3:09:25:4c:39:c7:
1e:bf:29:86:ad:b0:87:81:e5:a9:38:e7:f5:6e:36:
5a:2b:02:eb:c7:a8:64:3b:88:e2:e2:e7:7b:04:93:
a2:f3:9a:5f:9a:7d:39:1b:e1:10:c4:97:ad:3e:52:
46:a2:fd:b5:f6:9b:e5:d4:2a:ac:d8:c4:ed:f8:df:
38:73:1f:46:7e:47:6a:4b:8a:3b:3b:38:19:00:a6:
39:6c:42:d3:0e:de:2c:ed:92:26:4a:ea:b7:cc:31:
e6:cd:15:a7:42:ff:b0:b2:0e:03:f1:4f:95:2f:81:
fe:7f:ac:b0:da:c3:07:9a:b5:54:8c:40:7b:99:e9:
01:28:45:13:15:22:ff:61:0b:73:10:1a:86:5d:97:
2a:2a:a7:cf:c1:0d:7a:06:d5:d4:bc:f6:52:6f:4f:
c4:f3:49:3f:73:e2:0f:2e:7d:48:ae:fe:3f:f2:b5:
74:41:08:10:d6:e9:ce:5f:96:af:50:02:3f:74:05:
dc:58:bb:40:1c:01:52:78:b9:98:a6:91:53:cf:e3:
86:d7:73:79:87:a5:ca:55:d7:a0:0a:b1:1b:41:75:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5E:7B:0B:3E:6D:A2:FC:67:59:16:89:A4:FC:7E:35:A1:3D:8C:97
X509v3 Authority Key Identifier:
keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/78AAD6F686B811F1AD0338E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.201.232.0/22
Signature Algorithm: sha256WithRSAEncryption
85:69:07:e2:19:73:19:e5:74:85:b3:15:81:57:43:6c:30:0f:
73:f0:17:e5:d7:3e:dd:3c:67:83:3d:1a:5f:c8:fb:7f:53:2d:
05:aa:b6:04:cb:7e:7f:5e:97:55:85:d7:06:f7:62:ab:92:1d:
4a:ff:2e:e4:07:33:43:77:ca:ad:fd:4b:03:61:51:fd:99:b0:
2c:b0:9a:73:8f:d9:53:36:f4:6e:1a:f8:f1:e2:8c:f3:99:11:
84:dc:06:51:22:52:50:f4:0f:1d:4f:6d:74:f0:a4:6f:26:26:
f6:0e:b7:3c:2d:6d:b0:42:f0:06:43:f6:ae:5e:f8:a8:c2:1e:
8a:f3:e1:88:79:d0:b4:b3:43:39:30:e7:ac:84:a5:b9:af:07:
9b:aa:d4:23:32:94:90:78:2e:d2:39:23:22:96:83:21:be:fb:
38:2b:7c:b2:f6:3d:74:a3:89:ba:a6:f0:d9:e2:9d:cc:ab:df:
82:ab:ae:a7:2f:08:1e:8f:c1:53:5a:f7:7b:9a:da:51:16:c7:
f8:59:b2:41:0b:53:b2:98:e8:17:65:0f:77:28:12:c1:eb:43:
8e:18:9e:83:98:5b:ba:95:9c:06:85:4f:b2:e1:6c:45:8e:a3:
c2:84:40:8d:9b:7e:be:17:d4:9b:24:37:89:27:85:6b:52:8c:
6f:b3:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:29 2026 by rpki-client