Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/87B506F8874911F199E2E4E5CE1D38B0.roa
File: 87B506F8874911F199E2E4E5CE1D38B0.roa (raw, json)
Hash identifier: 9tTxq1QACIuo30DQkCB9jHWoCiHO40cBdOCKojq+Ma0=
Subject key identifier: 00:37:86:A1:70:2F:37:05:50:3F:EF:49:F1:3A:3D:7B:E6:08:EA:E4
Certificate issuer: /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial: 067F
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/87B506F8874911F199E2E4E5CE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:22:11 +0000
ROA not before: Fri 24 Jul 2026 10:22:07 +0000
ROA not after: Thu 24 Jul 2036 10:22:07 +0000
asID: 328598
IP address blocks: 102.22.88.0/24 maxlen: 24
102.22.89.0/24 maxlen: 24
102.22.90.0/24 maxlen: 24
102.22.91.0/24 maxlen: 24
102.22.92.0/24 maxlen: 24
102.22.93.0/24 maxlen: 24
102.22.94.0/24 maxlen: 24
102.22.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663 (0x67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Validity
Not Before: Jul 24 10:22:07 2026 GMT
Not After : Jul 24 10:22:07 2036 GMT
Subject: CN=6a633cd3-e79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:ee:a4:de:de:c9:a6:c9:49:a4:15:24:ab:
6b:bb:05:6c:88:26:01:ef:69:43:18:a6:d2:21:8f:
6d:10:a1:6e:aa:09:5f:c4:45:74:96:01:74:3d:97:
62:5e:4f:8f:51:84:f2:14:6c:73:b8:6b:e6:85:4f:
39:5d:8c:66:ee:b0:c7:a2:38:d3:40:d2:43:f6:c1:
6d:ce:ae:15:8f:8c:fc:2f:8b:1e:e0:a1:73:ce:e1:
d8:05:1e:e2:97:18:85:b0:b5:20:45:99:95:e8:a4:
a4:e3:0b:f5:1f:2d:9d:9b:c4:24:c3:9d:d7:47:b2:
f7:c8:68:ab:2f:99:79:da:4a:a5:f3:ef:b3:c6:65:
42:57:47:dc:82:f6:b8:61:5c:fa:73:69:2a:d4:cb:
0c:58:48:64:84:1e:cf:bd:29:42:b4:a9:c5:4c:8f:
36:e7:c1:83:27:8f:5f:f6:4e:61:d5:f1:60:67:d9:
b0:7f:2a:06:9d:ea:01:6f:18:f6:6c:06:65:1c:9b:
81:1e:10:d5:60:bf:d7:03:86:f4:d1:37:db:41:6b:
7c:a4:b6:7e:74:18:f4:38:1b:79:5e:12:34:5d:44:
a3:96:44:9e:fc:9f:b5:bb:8b:75:28:30:73:dd:5b:
8e:4b:76:92:55:ab:23:ca:c0:55:f4:ee:9b:9d:c6:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:86:A1:70:2F:37:05:50:3F:EF:49:F1:3A:3D:7B:E6:08:EA:E4
X509v3 Authority Key Identifier:
keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/87B506F8874911F199E2E4E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.88.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:bf:a5:76:44:71:f1:26:98:c0:25:d7:c0:72:f8:f1:65:7d:
c7:c0:d5:10:f6:33:d5:87:6a:5b:0c:ef:be:e6:f3:f0:c3:db:
10:1b:e9:1a:a7:c3:a4:94:35:85:df:10:e2:42:c4:67:38:0c:
b4:3b:ac:55:a5:60:34:96:e9:29:7b:d9:42:78:3a:f4:ad:3f:
65:99:17:3c:8e:38:c9:e7:85:bc:73:e2:b5:74:22:d2:74:dd:
08:ec:41:3f:1f:a5:13:56:b2:84:10:d6:30:5a:11:51:fa:fb:
cd:d0:5a:ba:26:6f:d1:bc:d2:d4:a2:a1:0d:f0:7e:0f:23:54:
f2:40:d5:f3:47:23:f1:8c:ff:2a:a1:d7:04:8d:ae:d4:64:11:
ca:97:75:86:24:2f:78:8a:b6:c5:ed:46:7d:39:e1:5d:ba:f8:
4f:75:bf:7b:72:08:d9:4e:b5:c5:53:77:d6:fd:ec:1c:0b:a0:
28:35:da:fc:ad:3c:dd:22:7d:ad:b8:01:61:31:01:c4:92:d2:
5a:d9:44:93:68:ae:22:38:8a:df:b3:a6:c1:57:fc:ff:0d:69:
80:c7:60:a4:e2:b5:29:14:6b:0a:7f:28:e5:fa:6a:65:5c:00:
22:8e:88:27:1d:d8:66:99:b4:0b:ea:72:6f:0e:fa:b1:8f:23:
89:33:38:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NThBRTBBRjExMC8GA1UEBRMoNDUwNkZDQTZBQTU1RUY4NEQzQTRDMDA0QUM4M0FC
QjUwQkVFRDNCOTAeFw0yNjA3MjQxMDIyMDdaFw0zNjA3MjQxMDIyMDdaMBgxFjAU
BgNVBAMTDTZhNjMzY2QzLWU3OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeSe6k3t7JpslJpBUkq2u7BWyIJgHvaUMYptIhj20QoW6qCV/ERXSWAXQ9
l2JeT49RhPIUbHO4a+aFTzldjGbusMeiONNA0kP2wW3OrhWPjPwvix7goXPO4dgF
HuKXGIWwtSBFmZXopKTjC/UfLZ2bxCTDnddHsvfIaKsvmXnaSqXz77PGZUJXR9yC
9rhhXPpzaSrUywxYSGSEHs+9KUK0qcVMjzbnwYMnj1/2TmHV8WBn2bB/Kgad6gFv
GPZsBmUcm4EeENVgv9cDhvTRN9tBa3yktn50GPQ4G3leEjRdRKOWRJ78n7W7i3Uo
MHPdW45LdpJVqyPKwFX07pudxhBhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUADeG
oXAvNwVQP+9J8To9e+YI6uQwHwYDVR0jBBgwFoAURQb8pqpV74TTpMAErIOrtQvu
07kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4QUUwL0U1NTFDM0VDOUEzMDExRUNCNTYzQTBCNDVBNDBENTc3L1JRYjhw
cXBWNzRUVHBNQUVySU9ydFF2dTA3ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JRYjhwcXBWNzRUVHBNQUVySU9ydFF2dTA3ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU4QUUwL0U1NTFDM0VDOUEzMDExRUNCNTYzQTBCNDVB
NDBENTc3Lzg3QjUwNkY4ODc0OTExRjE5OUUyRTRFNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmFlgwDQYJKoZIhvcNAQEL
BQADggEBAH+/pXZEcfEmmMAl18By+PFlfcfA1RD2M9WHalsM777m8/DD2xAb6Rqn
w6SUNYXfEOJCxGc4DLQ7rFWlYDSW6Sl72UJ4OvStP2WZFzyOOMnnhbxz4rV0ItJ0
3QjsQT8fpRNWsoQQ1jBaEVH6+83QWromb9G80tSioQ3wfg8jVPJA1fNHI/GM/yqh
1wSNrtRkEcqXdYYkL3iKtsXtRn054V26+E91v3tyCNlOtcVTd9b97BwLoCg12vyt
PN0ifa24AWExAcSS0lrZRJNoriI4it+zpsFX/P8NaYDHYKTitSkUawp/KOX6amVc
ACKOiCcd2GaZtAvqcm8O+rGPI4kzOK4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:48 2026 by rpki-client