Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/62E4D3E48CB211F1BFC044F7CE1D38B0.roa
File: 62E4D3E48CB211F1BFC044F7CE1D38B0.roa (raw, json)
Hash identifier: bEK22q2Xzjs/lsjBZJD60M78vkIhFpI3jrjhmgIY83A=
Subject key identifier: DE:E1:C8:61:66:93:5E:EC:97:56:DE:25:A9:5F:9C:6E:66:E6:ED:C9
Certificate issuer: /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial: 071D
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/62E4D3E48CB211F1BFC044F7CE1D38B0.roa
Signing time: Fri 31 Jul 2026 07:35:22 +0000
ROA not before: Fri 31 Jul 2026 07:35:18 +0000
ROA not after: Thu 31 Jul 2036 07:35:18 +0000
asID: 60171
IP address blocks: 102.223.64.0/22 maxlen: 24
2c0f:e870::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Validity
Not Before: Jul 31 07:35:18 2026 GMT
Not After : Jul 31 07:35:18 2036 GMT
Subject: CN=6a6c503a-e381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:7d:ee:a9:23:d1:92:89:dc:cb:d8:70:da:
1e:64:37:21:6c:c4:5f:c9:e8:6c:cd:e9:30:75:fb:
0b:a5:a3:a1:1c:20:82:93:64:78:70:c7:17:cd:4e:
b7:6a:55:2a:e8:19:d4:3f:2f:3c:bf:97:fe:d9:fd:
26:94:38:b2:f2:b4:67:49:68:37:ae:91:4a:1d:9e:
01:79:73:7c:44:10:30:c5:ed:8a:36:e5:28:80:74:
58:3d:0e:76:73:73:e6:d3:bc:9d:27:27:a5:9a:a9:
7b:04:cf:5e:8c:f4:f1:3a:55:9e:7d:c9:c3:8e:ac:
d4:cb:d0:02:c4:d7:2c:ed:f1:ea:70:b0:a6:f9:a3:
52:1c:40:22:db:8f:26:ee:7b:99:24:ac:1d:e3:ae:
9c:3d:fc:33:3f:b0:9b:bd:65:28:df:e9:38:2c:c5:
6f:42:58:02:7a:7c:03:ef:fe:91:b8:4e:c4:bd:2f:
a6:30:ca:1e:2a:35:fa:17:5f:e0:a7:01:46:79:ed:
4f:01:ca:cb:8f:b9:07:80:fd:89:30:65:8a:b5:1a:
5e:79:d8:ae:60:15:8c:17:e9:cd:0c:3e:19:16:a0:
62:0f:d5:64:b5:4e:10:0e:c0:a3:b4:41:0a:ef:f9:
2d:f2:5f:38:df:74:09:9b:e3:68:9e:df:e9:1b:64:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:C8:61:66:93:5E:EC:97:56:DE:25:A9:5F:9C:6E:66:E6:ED:C9
X509v3 Authority Key Identifier:
keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/62E4D3E48CB211F1BFC044F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.64.0/22
IPv6:
2c0f:e870::/32
Signature Algorithm: sha256WithRSAEncryption
cc:7a:84:03:a5:68:fa:17:16:e5:3a:10:8c:30:01:2c:95:e5:
ac:6f:7b:a0:fe:b0:42:5e:1a:00:3b:90:9d:1d:02:c5:d8:fc:
23:0e:c5:2d:1d:81:d3:13:3f:cd:92:dd:d0:a4:4c:36:ae:da:
1c:5d:2e:a5:c1:bf:c5:66:7e:dd:70:02:99:d4:e9:71:6b:41:
8f:18:dd:fe:7e:4d:a4:17:ee:b4:e0:0b:b2:f7:1e:ba:d3:69:
41:47:11:3d:ac:9a:94:cb:71:e4:4f:97:14:99:c0:54:f3:43:
42:37:ed:fb:38:4d:4f:52:5f:5d:02:1b:3c:3e:7f:5f:3b:ae:
f7:dc:53:7e:54:be:bc:e3:8e:58:27:4a:b6:cc:c4:9f:ec:1d:
db:45:04:50:1e:b7:70:6a:7c:ad:25:3c:7f:56:4d:32:24:0a:
72:8a:60:27:dc:ee:12:26:b3:f3:61:25:b4:4c:fc:58:25:0a:
11:02:35:34:bd:95:ab:a2:5b:5f:af:0b:97:8f:a6:2b:57:49:
03:4f:e6:ea:fc:1e:99:a0:c6:90:02:89:3b:c7:49:dc:99:73:
14:05:8d:02:fa:6e:30:22:da:4d:14:0d:02:9f:5f:de:64:71:
2a:99:61:f5:99:7b:15:9a:62:5b:5d:0e:9b:2e:40:29:98:3d:
aa:f4:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:12:09 2026 by rpki-client