Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/92A716CA84EA11F1B89441EECE1D38B0.roa
File: 92A716CA84EA11F1B89441EECE1D38B0.roa (raw, json)
Hash identifier: DhKLW5QHJIHhIFQqa5Eo94jK6mXcZzdjIDbbxOGDEJQ=
Subject key identifier: CE:74:63:C6:DE:D8:50:05:46:49:D9:D5:F4:17:3D:A6:4E:7B:87:6E
Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial: 05D7
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/92A716CA84EA11F1B89441EECE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:57:25 +0000
ROA not before: Tue 21 Jul 2026 09:57:20 +0000
ROA not after: Mon 31 Dec 2046 09:57:20 +0000
asID: 328888
IP address blocks: 102.206.100.0/22 maxlen: 24
102.214.20.0/22 maxlen: 24
102.219.8.0/22 maxlen: 24
2c0f:1500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1495 (0x5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Validity
Not Before: Jul 21 09:57:20 2026 GMT
Not After : Dec 31 09:57:20 2046 GMT
Subject: CN=6a5f4284-59a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:39:5c:51:1c:4d:fe:dd:db:f5:c6:20:4d:
ce:59:90:9c:da:0c:9e:2e:49:1a:c2:54:4c:4b:33:
1c:c8:10:d1:92:9c:73:12:66:1a:31:cf:27:5a:e6:
a7:ad:75:2b:31:3c:9c:4e:9f:51:a6:60:09:17:9c:
62:f1:e5:b4:10:da:e9:74:9f:de:78:73:2f:ec:3e:
8e:2e:19:cb:15:37:7a:ca:c8:75:8e:de:d6:9d:09:
ca:59:1b:7a:85:c0:f4:da:2b:ca:17:8b:37:eb:30:
a0:85:f1:eb:6c:2b:34:53:e8:5b:07:e4:1f:7e:cf:
86:98:01:a7:31:2b:53:98:03:4b:0b:f9:f6:03:2b:
e1:40:00:82:26:1b:2d:36:8e:c2:1e:ae:09:00:d6:
de:4d:33:e1:7a:aa:75:d4:e9:33:52:97:84:c8:a9:
05:0e:64:ad:7c:cf:35:12:ff:ef:79:56:8d:e4:6c:
ae:78:51:57:32:b7:e5:54:55:e1:aa:9f:ed:a5:46:
c5:b8:e0:0d:d7:6c:1e:43:01:4c:81:50:15:d2:a8:
37:25:33:e1:a2:3b:98:ce:7d:62:dc:57:e3:a1:99:
e9:75:d2:49:6c:8d:95:3a:ed:db:7c:b4:e7:58:4c:
ff:24:ae:c5:26:4e:87:df:6e:8f:0d:2e:f6:ff:ff:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:63:C6:DE:D8:50:05:46:49:D9:D5:F4:17:3D:A6:4E:7B:87:6E
X509v3 Authority Key Identifier:
keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/92A716CA84EA11F1B89441EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.100.0/22
102.214.20.0/22
102.219.8.0/22
IPv6:
2c0f:1500::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fc:b2:56:08:66:72:e5:1a:50:2a:15:62:66:36:4d:36:a6:
86:6a:39:42:a8:0b:75:c3:35:ea:fb:cb:30:c8:d3:76:42:dd:
82:f4:8a:eb:a8:1e:fe:df:9b:7b:bb:07:73:18:5a:65:3a:e2:
b2:8d:b6:b2:ac:b7:33:aa:6e:e5:cc:ac:77:37:f9:64:dd:cf:
ef:bd:00:cd:25:81:4f:84:d7:88:d5:f5:6b:9f:f6:97:87:4d:
3a:26:03:bc:0a:21:a6:c7:1d:96:d3:d7:19:24:59:88:12:db:
76:89:2a:35:83:25:23:a4:7f:fa:c3:6e:34:61:c7:56:d7:49:
32:31:80:5f:a8:57:31:45:94:ee:7f:81:c3:05:f5:85:8f:ea:
a3:ff:6d:9e:45:2f:e9:45:9d:54:ae:19:50:8a:a6:d9:bd:53:
9e:9e:57:f5:b4:15:94:0e:1d:41:ad:9b:aa:0f:f7:b8:28:ad:
85:de:35:81:3d:f1:a8:c3:d4:28:d6:e2:f3:de:ee:1d:f8:c6:
98:4b:e0:c0:7f:ee:69:8d:a6:c0:25:7c:0c:4c:00:96:f1:e1:
30:58:65:86:c5:3b:e3:c9:1e:41:30:0b:be:09:a5:92:94:5e:
1d:d5:9e:3e:82:28:05:af:11:b8:9b:99:02:d4:7a:55:d7:7b:
88:49:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:57 2026 by rpki-client