Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/8961C8808CF111F18A83BEECCE1D38B0.roa
File: 8961C8808CF111F18A83BEECCE1D38B0.roa (raw, json)
Hash identifier: QljAnFSb/QBMhFaqF0/T5YKBD3OTqbRzJH5A+zTfq1g=
Subject key identifier: 97:1C:A1:B6:EE:1A:92:0C:CB:51:D2:9A:CA:CD:F8:61:1F:08:B8:74
Certificate issuer: /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial: 0718
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/8961C8808CF111F18A83BEECCE1D38B0.roa
Signing time: Fri 31 Jul 2026 15:07:25 +0000
ROA not before: Fri 31 Jul 2026 15:07:19 +0000
ROA not after: Sat 27 Sep 2031 15:07:19 +0000
asID: 60171
IP address blocks: 102.221.96.0/23 maxlen: 24
2c0f:7800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633204AF, serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Validity
Not Before: Jul 31 15:07:19 2026 GMT
Not After : Sep 27 15:07:19 2031 GMT
Subject: CN=6a6cba2d-bebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:54:db:86:b7:ed:6e:84:fb:01:21:42:00:
9d:80:29:5f:19:5b:db:a3:80:d0:5b:6e:62:fc:a8:
a0:e9:13:c3:65:30:93:15:b2:d1:6f:45:a2:42:08:
b7:ba:d1:9e:4f:a3:e4:34:43:d9:f7:5d:0e:38:23:
74:23:b6:75:8d:9f:d3:9b:dd:bf:00:dd:f6:66:ba:
84:c4:50:1f:a2:5a:27:5d:f1:7a:7d:cc:cc:bc:e5:
e9:ef:ac:33:7f:f6:51:3b:51:af:c1:f9:0e:57:aa:
9c:3a:eb:93:9d:6e:4c:37:b4:dd:3f:72:43:2a:f1:
23:25:b5:2e:c3:7d:67:dc:c1:6f:a6:f6:17:de:da:
c1:a8:a1:55:71:0b:45:df:e3:2d:c1:5e:5f:6a:cb:
85:51:f4:8c:c7:b4:3b:51:5e:d7:cb:ca:18:2a:b6:
50:7f:25:e7:33:e2:95:0a:03:37:b8:fb:13:18:75:
fe:2f:83:d1:f1:f8:d9:d9:d2:80:e6:59:bd:8c:25:
25:94:37:1c:a1:7e:7f:fe:ca:de:e1:9a:03:8d:6b:
fb:48:d0:af:1f:7a:a3:e7:57:3b:ef:9e:96:4d:db:
e2:29:dc:c0:e9:1a:d6:e2:f5:c9:19:7b:29:de:f3:
06:d2:9f:48:e8:73:4f:94:2a:39:64:50:e3:78:2f:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:A1:B6:EE:1A:92:0C:CB:51:D2:9A:CA:CD:F8:61:1F:08:B8:74
X509v3 Authority Key Identifier:
keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/8961C8808CF111F18A83BEECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.96.0/23
IPv6:
2c0f:7800::/32
Signature Algorithm: sha256WithRSAEncryption
7d:54:6b:cf:fb:d0:94:fa:63:8a:6c:52:27:f4:ca:80:97:da:
0e:d1:ed:5e:c7:2a:5e:34:80:bb:3e:ab:d2:d8:3d:c4:33:77:
bd:f9:8d:c8:e6:3d:16:c6:df:55:1d:a3:eb:31:48:76:5e:7b:
83:6a:3e:39:ec:d3:22:18:7f:92:27:61:72:e6:e7:5d:40:97:
dd:4e:bf:65:38:f3:26:14:69:13:a5:1f:fb:77:0d:cc:9e:aa:
ed:d1:5c:7a:4d:2e:82:25:04:69:12:83:9c:e2:fc:6e:8e:c3:
7d:a7:cd:52:b7:05:11:78:d0:d6:01:7a:bb:be:2b:b7:44:b5:
46:84:b8:a5:dc:5c:b6:b6:7f:26:c2:5a:ff:74:12:f8:d6:1e:
f0:b1:9f:32:ac:93:b2:95:c4:e5:9a:a9:4c:f9:b0:55:9c:95:
22:3b:cf:9d:e5:d8:98:18:2b:61:51:1c:1c:6d:f6:df:d8:0e:
35:b6:10:3e:a4:23:62:e2:13:bf:79:d7:db:a6:49:78:2f:ab:
b4:f3:03:6c:44:73:d3:12:d3:68:1b:da:83:50:f6:bb:69:6c:
de:62:f6:cb:6e:8a:ae:8a:1e:91:7f:95:b1:01:84:81:c7:a8:
ee:b7:5d:26:df:e3:e5:a9:59:80:9f:8e:77:b1:df:b7:96:eb:
c6:77:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:12:05 2026 by rpki-client