Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/675B538879D111F1806496E2CE1D38B0.roa
File: 675B538879D111F1806496E2CE1D38B0.roa (raw, json)
Hash identifier: bp+YaCSeLhLpcUdTFTWzyzlCYsw83e8JSVdbDNSccAA=
Subject key identifier: DA:E2:B2:3F:5D:62:49:43:15:87:FC:A1:16:A2:15:D3:05:F6:0C:87
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0877
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/675B538879D111F1806496E2CE1D38B0.roa
Signing time: Tue 07 Jul 2026 06:59:32 +0000
ROA not before: Tue 07 Jul 2026 06:59:27 +0000
ROA not after: Sun 07 Jul 2030 06:59:27 +0000
asID: 402236
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 02:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167 (0x877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 7 06:59:27 2026 GMT
Not After : Jul 7 06:59:27 2030 GMT
Subject: CN=6a4ca3d4-b8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:d0:c2:ef:5e:8e:77:1b:73:74:f6:3f:b2:
2c:5b:67:7b:a7:f7:a5:8a:35:bd:7d:30:37:3a:a4:
01:c9:cf:21:e3:64:db:ed:ae:00:ff:35:73:10:aa:
0c:d9:61:47:6b:85:a7:65:08:b3:ca:2d:d1:0d:e1:
09:3a:2d:25:b0:fd:9b:f9:a7:60:10:e0:12:b2:c7:
4c:13:57:6a:0d:e8:63:bf:05:91:e7:19:e3:59:1b:
db:7e:ba:22:f0:9b:ce:c4:36:43:0d:46:61:4e:b0:
d2:d6:a6:9c:b5:ac:3b:02:5a:e6:25:a8:6a:43:8a:
9d:f2:46:1a:35:da:3b:c4:62:fa:97:43:b0:7d:65:
49:2f:5f:84:c9:65:85:29:9b:f4:8c:40:ba:e1:a1:
47:a4:92:07:a2:85:07:85:84:ab:b9:28:2c:21:f6:
51:d3:98:91:c8:c1:bf:fd:53:92:53:9c:f2:0c:43:
70:64:c9:6a:5d:48:9e:9c:ca:76:d8:6a:49:11:40:
1b:ca:5c:b1:5d:2d:58:55:ca:76:6d:2e:ff:0a:e5:
98:03:8b:36:59:06:f1:08:b1:ab:d8:8f:a0:d4:f8:
ce:fc:04:36:98:68:8e:5b:0f:fb:4e:b9:6b:7b:2d:
40:da:a5:54:ef:b7:9f:26:27:b7:2b:a8:5c:43:5e:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:B2:3F:5D:62:49:43:15:87:FC:A1:16:A2:15:D3:05:F6:0C:87
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/675B538879D111F1806496E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d9:c3:43:1c:cf:25:7d:74:d5:c0:6d:16:41:97:a6:41:09:
d8:47:7c:a6:77:e7:59:a8:ec:5c:ae:dd:d3:3d:9b:ff:fb:48:
2f:42:d6:8f:3b:c1:cc:ee:bf:ee:c9:af:ad:19:fa:5f:58:3b:
99:0f:f9:eb:5a:83:91:b5:47:1e:46:82:35:96:80:09:88:8c:
87:ad:10:8f:35:bc:c4:c9:6e:99:90:95:53:54:56:e9:c9:b5:
4e:0c:41:cd:56:92:38:b8:1e:ef:5a:7a:56:60:b8:3a:5f:24:
08:28:c8:74:80:73:ac:7b:43:0d:42:f4:67:2c:31:42:32:93:
b1:18:30:d5:85:9c:4f:63:32:f3:d6:aa:5d:cd:31:c5:be:9e:
ba:17:a0:77:94:5d:da:ef:c3:50:4b:00:31:d5:8a:0b:52:bb:
a3:04:bd:cc:ae:75:ca:87:45:1d:3d:cb:0c:37:4f:89:c0:89:
8b:11:23:f0:29:d1:59:05:6b:e4:79:be:7f:e6:01:3e:a0:c4:
03:4d:ac:50:92:70:b9:b7:e6:16:20:4a:7d:8c:f3:59:e2:32:
02:ea:3a:d2:ff:31:54:3c:79:4a:d2:a9:3f:3c:af:a1:61:71:
8a:a8:53:05:24:66:54:ae:39:66:71:2a:af:e5:ae:8d:4c:61:
6d:70:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:22:20 2026 by rpki-client