Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/87FFC5788F0D11F1B02EE1CACE1D38B0.roa
File: 87FFC5788F0D11F1B02EE1CACE1D38B0.roa (raw, json)
Hash identifier: bOMpRzlwmMmTR1werUtGOXerSfRpKaSsFxpaSlF4Y6A=
Subject key identifier: 33:97:46:CF:B8:21:89:91:F4:10:1F:71:0A:8A:75:B9:5D:89:C1:A9
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 079C
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/87FFC5788F0D11F1B02EE1CACE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:32:51 +0000
ROA not before: Mon 03 Aug 2026 07:32:47 +0000
ROA not after: Tue 01 Sep 2026 07:32:47 +0000
asID: 328840
IP address blocks: 102.220.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 3 07:32:47 2026 GMT
Not After : Sep 1 07:32:47 2026 GMT
Subject: CN=6a704423-8ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:88:92:0f:77:5e:a4:eb:54:31:49:6a:25:
2e:c2:11:26:9d:6b:2e:6f:fe:1a:a2:a1:6f:6c:b2:
64:e0:c4:65:03:cd:ef:78:21:88:bb:37:90:48:0d:
5f:75:93:2b:ff:f4:1e:a8:61:3a:fa:fb:d6:e7:24:
9f:f5:4d:a4:35:b6:4d:92:03:66:ad:55:c3:97:b1:
f8:8e:0a:2f:01:43:ee:66:bf:6b:19:c8:25:7b:59:
20:f9:1b:c7:63:d0:7c:b9:10:92:e8:82:a9:f5:ed:
ea:71:10:6d:4b:b6:7f:76:c1:4a:a5:20:9a:2c:b8:
1d:98:2b:41:55:1c:bd:95:a0:7b:86:10:fb:00:d6:
64:88:b9:78:04:26:5d:0b:8a:17:99:25:b4:4a:a6:
a7:66:c2:f8:b5:87:9f:06:f6:5b:73:d2:9e:b4:ca:
07:f3:ee:b2:53:41:d5:cc:b2:ae:5b:4a:cf:97:a8:
5f:81:ab:2a:dd:1f:e9:d7:8b:c8:c0:03:71:d0:2f:
fb:66:b0:a0:e8:98:64:dc:e9:a0:91:bc:13:56:7d:
35:77:90:f5:6d:5a:8e:13:b1:af:dc:48:a1:97:eb:
2b:ec:9c:7e:7d:de:b2:94:f6:fe:21:fa:36:c2:f8:
c6:03:3e:46:32:b1:74:a5:ef:4c:94:0d:46:ff:53:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:46:CF:B8:21:89:91:F4:10:1F:71:0A:8A:75:B9:5D:89:C1:A9
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/87FFC5788F0D11F1B02EE1CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2f:4d:af:ab:03:26:3f:49:6a:c0:b9:15:8d:bc:e2:cc:08:
45:46:dc:65:90:84:3a:28:7f:3c:96:3c:91:23:41:1b:6a:43:
71:e7:23:ea:4a:94:4e:6d:4c:0d:69:62:69:b1:06:1d:95:30:
53:72:6d:8d:00:b0:30:60:37:2e:52:56:ea:2a:8c:d4:a9:d5:
62:d4:3a:05:a5:19:fd:c7:42:36:90:05:12:39:ee:b5:b9:9a:
ef:37:e5:ee:a9:9d:98:18:3e:d0:9a:2a:df:6a:e9:da:dc:7f:
2d:23:f0:29:ef:51:a9:04:b0:7b:40:a5:7a:fa:a7:26:9e:23:
fe:fe:b5:30:f7:8a:83:f0:96:43:95:35:0b:6b:de:13:ea:af:
a7:f3:4f:2c:4b:75:e3:32:5b:3a:34:ac:8a:c5:3f:fc:8f:d2:
b4:ed:5c:43:ff:86:9e:ba:c2:d5:94:95:3b:70:a1:32:dd:72:
d0:0b:2d:29:72:7c:4d:dc:c1:86:de:b6:e4:35:51:a3:67:c9:
79:c5:7e:fd:e0:42:3c:a9:64:77:2d:9f:3a:a3:05:32:46:24:
b2:f5:e1:18:f7:a9:1c:0b:56:25:60:54:22:05:c7:ec:90:c7:
08:cc:da:5a:4b:74:9d:62:fe:90:2b:85:20:35:1c:69:7f:d0:
f1:17:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:01 2026 by rpki-client