Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/11B6AE7E838F11F1994E2B1DCF1D38B0.roa
File: 11B6AE7E838F11F1994E2B1DCF1D38B0.roa (raw, json)
Hash identifier: 107O5Hc0T8kufuDN9DDsdJ548skzB1wVpr+HsKnPrE0=
Subject key identifier: BA:20:73:37:72:14:F7:BE:E7:A5:71:6C:75:2A:8A:37:DB:B5:41:65
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0886
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/11B6AE7E838F11F1994E2B1DCF1D38B0.roa
Signing time: Sun 19 Jul 2026 16:29:53 +0000
ROA not before: Sun 19 Jul 2026 16:29:47 +0000
ROA not after: Mon 15 Jul 2030 16:29:47 +0000
asID: 137897
IP address blocks: 102.217.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 19 16:29:47 2026 GMT
Not After : Jul 15 16:29:47 2030 GMT
Subject: CN=6a5cfb81-880d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:6b:2e:42:35:c2:11:ef:57:08:b5:af:87:
a9:d3:49:5f:09:fe:20:23:11:fc:a4:c6:4e:22:4b:
e2:5c:45:b7:46:7f:5f:75:25:10:4a:07:79:7d:be:
2d:4f:52:e8:3e:03:50:0e:87:f8:5d:87:58:8c:b8:
b8:ef:78:6f:1c:a3:b9:7e:38:79:e0:64:93:bb:c3:
86:2d:a8:e8:1b:02:ca:6b:0b:2e:75:d2:2a:cb:17:
49:47:f6:66:73:36:09:69:d7:a8:d5:73:b2:cb:1c:
42:53:76:f2:72:b8:e2:23:05:a9:d4:00:19:bd:ab:
db:c6:f5:1f:fb:1c:53:e0:b2:65:34:60:ce:d0:75:
0b:13:f9:b5:76:bd:74:9c:ef:18:b0:4b:5f:60:32:
fd:2c:e5:63:d0:0a:b8:19:59:08:03:d5:00:e7:71:
05:7e:8e:aa:ae:76:9e:12:36:e0:01:9a:66:f8:fd:
52:88:d7:2a:c1:f0:4a:ae:d9:78:c4:0f:4e:c7:d9:
3a:5f:b9:bf:54:73:15:a2:fd:a8:a3:9a:32:98:ca:
cb:45:31:84:2b:f0:2c:6c:cc:c9:0e:89:b2:64:bf:
cc:0c:3e:94:01:92:07:27:8a:d6:89:f8:eb:79:9d:
cc:b4:61:12:4e:1d:04:79:99:2f:0f:49:8e:1c:13:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:73:37:72:14:F7:BE:E7:A5:71:6C:75:2A:8A:37:DB:B5:41:65
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/11B6AE7E838F11F1994E2B1DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.105.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4a:2c:c1:4e:a7:dc:4d:f2:68:7d:d3:cb:c5:fd:13:56:1d:
45:0b:ec:9d:9f:03:97:48:14:c8:6f:8d:70:ac:e0:e2:9c:94:
e6:ed:a8:a7:22:bc:ac:82:a4:73:dc:71:d2:7a:4d:51:0b:b8:
41:8e:cf:af:f7:b4:d1:a6:b6:cc:80:93:2d:e2:36:f2:1d:a7:
b3:9f:07:ab:4a:6f:da:6c:19:a2:42:56:bf:22:d1:fb:40:93:
81:df:78:9a:4d:55:fd:4d:1e:8f:9f:08:ec:00:eb:4a:dd:5e:
28:46:fe:85:9d:e3:44:75:3b:e3:fc:06:d4:59:77:1f:2e:40:
ec:1b:af:80:24:09:b5:8a:06:ac:91:df:42:b4:ee:70:2e:4f:
47:76:37:80:02:3f:2e:d0:cc:21:f1:fe:82:69:0f:be:04:64:
df:71:56:62:33:aa:e4:bd:80:5b:42:e3:aa:85:78:05:f8:ae:
87:ac:7c:69:44:ed:05:66:2e:48:97:89:42:08:2f:20:a0:de:
32:6b:71:79:3a:ff:a3:4b:bd:d9:82:7a:55:a6:be:10:91:c1:
e0:0a:06:4a:6b:2d:64:2a:75:54:cb:da:e6:64:3a:61:2e:a5:
bd:9d:5d:78:99:8f:0c:44:a0:62:76:ac:48:34:db:17:b5:5f:
8c:64:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:44 2026 by rpki-client