Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/70DB8C14874811F180D694DFCE1D38B0.roa
File: 70DB8C14874811F180D694DFCE1D38B0.roa (raw, json)
Hash identifier: 7JSK8xsgw3knFJXcsAOvCA2IHW59t6BAODE2PhlWGB8=
Subject key identifier: 33:63:DD:14:64:A3:24:45:24:BA:0B:A1:15:EB:0D:B0:B5:EA:06:1D
Certificate issuer: /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial: 067B
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/70DB8C14874811F180D694DFCE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:14:23 +0000
ROA not before: Fri 24 Jul 2026 10:14:19 +0000
ROA not after: Thu 24 Jul 2036 10:14:19 +0000
asID: 328598
IP address blocks: 102.22.88.0/22 maxlen: 22
102.22.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Validity
Not Before: Jul 24 10:14:19 2026 GMT
Not After : Jul 24 10:14:19 2036 GMT
Subject: CN=6a633aff-3bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:57:80:78:a5:5b:85:bf:22:b7:f6:e9:1d:
2b:69:c9:b0:6a:57:5f:be:e9:d0:1d:77:ae:d7:18:
90:db:7f:8f:4b:b2:ea:26:48:75:40:6c:3a:6e:35:
0b:7c:f8:a0:15:8d:6f:43:4f:87:49:e7:a6:1b:c2:
a0:10:09:64:ab:56:45:db:92:aa:69:a4:9e:9e:e5:
23:e9:71:d6:03:b9:cb:51:0f:c9:c5:e1:48:0a:1e:
9c:cc:b9:68:d8:14:2e:79:20:34:c2:85:a2:77:7a:
72:0c:f4:35:fe:2e:04:5a:35:d2:2c:3a:9a:92:2c:
39:2e:2e:26:44:03:4c:ea:9c:0c:ca:d7:e6:dd:f8:
ca:97:ff:f9:55:d6:32:d1:f4:07:71:83:5e:96:71:
3d:95:86:92:d9:ac:0c:1a:cc:70:44:7c:c1:6b:e6:
f5:39:4b:dd:29:38:0d:a8:65:91:23:53:97:22:c8:
2e:52:c5:6d:5e:38:6e:4d:17:c8:2a:cf:68:80:30:
65:d3:12:29:ee:9a:a8:1d:aa:e5:cc:00:00:58:d5:
6d:97:30:ce:1e:cc:66:a7:b9:bb:44:be:39:dc:0f:
33:71:1b:e6:c0:d8:fe:aa:86:20:81:2b:89:02:b3:
d7:4f:8d:0c:21:b5:7c:39:66:e5:d3:03:b0:cb:56:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:DD:14:64:A3:24:45:24:BA:0B:A1:15:EB:0D:B0:B5:EA:06:1D
X509v3 Authority Key Identifier:
keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/70DB8C14874811F180D694DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.88.0/21
Signature Algorithm: sha256WithRSAEncryption
20:3c:6d:e2:63:ce:d0:2c:69:6a:ff:20:71:fa:65:2f:d9:d6:
c4:12:2b:24:15:43:73:20:a7:69:89:40:54:b3:5e:4f:0d:7c:
d8:58:2e:06:75:d0:c7:51:c2:60:c4:bc:ca:c7:cd:b4:20:61:
2c:d5:be:3d:0b:e4:04:c6:c1:1f:35:7f:c9:53:13:43:83:4a:
42:46:e4:b9:93:78:76:a5:76:43:25:52:b3:4f:6f:69:91:d3:
b0:17:03:96:1f:5a:6e:78:5b:a6:ae:77:48:78:18:00:a7:93:
8b:dd:ab:7a:45:e1:30:c0:f0:ac:60:20:1b:b2:78:0b:93:8c:
5b:34:a6:af:e7:da:8c:90:f7:0e:3b:04:94:de:2c:90:96:da:
74:65:c0:3e:ba:d9:90:06:5c:78:6f:f8:e2:df:9c:e4:fd:3d:
70:0e:fa:a4:f6:68:d2:20:ff:99:ba:e6:71:6c:9c:fb:3c:ad:
d8:6e:24:3f:db:e0:04:cf:36:b7:52:6d:7e:c6:c8:e1:96:d8:
92:f0:60:34:9e:b5:f1:81:de:ba:35:d1:85:d3:c8:f9:ee:0a:
91:14:4c:67:01:2f:1e:fa:c3:be:ee:c5:a3:a9:b2:7e:63:48:
ae:d1:98:e9:94:df:b8:b7:a0:1b:a0:e1:e9:5a:11:1a:46:a3:
a8:d2:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:48 2026 by rpki-client