Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/1774047C84F911F1B7D1B7C6CE1D38B0.roa
File: 1774047C84F911F1B7D1B7C6CE1D38B0.roa (raw, json)
Hash identifier: zmgrG3+ATTD/54qHzCYSgNiw6RJfVAaPzna4Spld7Os=
Subject key identifier: BA:50:14:36:A3:5D:F6:49:60:93:6C:51:DA:B2:2A:46:2C:A8:3E:38
Certificate issuer: /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial: 057D
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/1774047C84F911F1B7D1B7C6CE1D38B0.roa
Signing time: Tue 21 Jul 2026 11:41:20 +0000
ROA not before: Tue 21 Jul 2026 11:41:16 +0000
ROA not after: Mon 21 Jul 2036 11:41:16 +0000
asID: 329053
IP address blocks: 102.216.28.0/22 maxlen: 23
2c0f:5080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Validity
Not Before: Jul 21 11:41:16 2026 GMT
Not After : Jul 21 11:41:16 2036 GMT
Subject: CN=6a5f5ae0-73fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3a:81:d7:bb:0e:c9:14:b3:7c:1b:c5:2c:ba:
da:43:0c:36:1c:0a:2e:af:b4:c3:d0:5f:9b:7a:02:
ef:36:73:2d:ee:eb:d8:2b:a1:39:58:01:ed:f9:cc:
03:31:8d:e3:f5:09:fa:1d:e0:36:ae:ee:b9:b2:77:
1e:9d:a0:1e:a8:6b:67:ed:81:8e:18:6e:6b:bb:72:
d4:06:ce:27:81:e4:5a:07:0a:36:ea:dd:19:9e:d9:
75:4b:3d:f0:de:e2:75:f6:f2:24:5f:7f:dd:29:19:
9b:37:ea:d0:99:f1:6a:eb:8a:d1:73:04:2b:fd:d0:
8e:15:dc:19:62:da:cc:c0:7b:9b:e1:cd:86:8b:48:
96:7e:e9:6e:c9:99:22:49:98:71:44:ca:d5:71:36:
e2:34:ef:e1:ae:e8:a1:c3:23:04:29:ca:6a:9c:85:
b8:3b:e4:2b:75:45:08:e7:b3:6e:9a:61:dd:1d:dc:
3d:21:7a:8f:d4:30:72:9f:f0:12:66:a2:d4:43:35:
49:cb:1a:85:bd:8a:d2:55:e5:39:49:e9:f8:c5:8e:
b1:b5:bc:14:f6:f0:e4:a0:be:8a:35:dc:07:92:82:
4a:12:2b:3d:cb:61:19:f3:7b:c0:54:29:28:e7:a8:
90:55:5a:39:38:01:6d:6a:47:35:c4:54:43:04:b2:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:14:36:A3:5D:F6:49:60:93:6C:51:DA:B2:2A:46:2C:A8:3E:38
X509v3 Authority Key Identifier:
keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/1774047C84F911F1B7D1B7C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.28.0/22
IPv6:
2c0f:5080::/32
Signature Algorithm: sha256WithRSAEncryption
00:07:61:b1:e9:2f:3a:5e:59:bd:dc:0e:b4:54:bd:56:71:9c:
8e:61:f9:2f:05:2c:2d:4c:b1:f8:6a:b3:f6:00:c2:b2:0b:cd:
f8:34:f7:24:14:41:69:78:63:65:db:64:9e:fe:5b:35:84:d2:
f5:a7:42:a6:26:04:21:28:05:a9:3b:d3:74:5a:77:a0:13:d3:
3e:2c:f5:48:85:92:a6:5a:b4:32:06:bf:6e:0a:d3:dd:ad:ea:
e4:2a:4d:25:99:59:68:1b:43:61:95:c2:f6:98:e7:b7:16:cf:
b0:0e:80:e4:c3:d5:84:d9:ea:32:df:e0:15:55:96:57:30:94:
c6:62:3b:4f:ce:6a:48:ba:8b:58:dd:fc:c0:ec:7b:58:bd:cf:
5b:0f:ef:47:67:81:dd:6f:9b:24:20:73:4a:bc:57:46:80:d6:
b8:87:5e:68:f5:5e:ce:f2:e6:dd:17:65:5c:fe:de:66:1d:e4:
3a:da:0a:32:39:5a:2c:44:ec:05:38:db:50:1c:f7:86:92:52:
be:b4:60:f3:19:ed:95:86:c3:93:2f:13:a7:de:2c:e5:d2:63:
2f:ae:c5:e7:6b:5f:e5:e3:84:76:25:f0:c2:b3:d2:5e:f2:66:
9c:6b:ae:27:17:0c:57:19:9c:a5:54:54:d9:70:fa:02:e8:2e:
4c:9c:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:55 2026 by rpki-client