Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/71A334D28D8111F1BAEAB6E2CE1D38B0.roa
File: 71A334D28D8111F1BAEAB6E2CE1D38B0.roa (raw, json)
Hash identifier: vgaG/sv/n/TK3jqkGkIvEvoc4SH5psSKdKwPzFQdErc=
Subject key identifier: 81:06:F5:DE:82:4F:1C:4E:21:81:D1:3E:B6:56:DC:96:37:41:68:A1
Certificate issuer: /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial: 0518
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/71A334D28D8111F1BAEAB6E2CE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:17:33 +0000
ROA not before: Sat 01 Aug 2026 08:17:28 +0000
ROA not after: Mon 28 Feb 2033 08:17:28 +0000
asID: 328670
IP address blocks: 102.223.2.0/24 maxlen: 24
2c0f:1600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Validity
Not Before: Aug 1 08:17:28 2026 GMT
Not After : Feb 28 08:17:28 2033 GMT
Subject: CN=6a6dab9c-9153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ba:37:23:fa:b0:1f:90:b6:3e:53:9d:96:73:
6b:ff:fa:00:8e:ae:f6:7d:cc:5f:f2:ff:23:30:da:
fe:7f:c7:a6:59:87:b1:dc:36:b1:16:9a:07:c5:28:
20:df:f8:96:5f:96:b3:e4:24:95:b9:e2:dd:2f:3d:
d9:0f:54:c2:de:85:24:e5:3f:85:a5:f4:7e:67:02:
a2:37:f8:a7:5b:57:f7:1c:a2:64:92:63:b7:e5:c6:
ea:cd:83:d1:4f:5d:bd:eb:5d:03:4e:3c:a6:ef:55:
16:67:c1:b1:38:e1:5e:29:48:2c:ec:a1:8b:ef:53:
8e:80:82:64:26:e3:8b:5f:6c:81:44:27:e2:7f:7a:
3c:9c:46:92:ba:6c:3e:d1:1a:dc:bb:af:12:57:9c:
bf:71:26:08:22:b1:bf:65:b1:29:54:12:3f:53:7d:
4f:c7:f0:ba:cc:71:8b:c6:a3:c9:87:9f:64:bc:29:
44:83:be:65:54:38:47:99:50:31:df:b9:5d:37:39:
6f:d8:4a:30:14:65:59:cf:03:c8:e0:c8:39:95:48:
a6:8b:b3:d1:b4:b4:20:3b:87:c5:a4:90:10:9b:94:
69:bb:7f:1b:05:19:90:c9:51:19:3a:50:f9:f4:69:
84:e7:bd:87:e8:79:04:b8:da:18:4d:ba:88:e2:a6:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:F5:DE:82:4F:1C:4E:21:81:D1:3E:B6:56:DC:96:37:41:68:A1
X509v3 Authority Key Identifier:
keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/71A334D28D8111F1BAEAB6E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.2.0/24
IPv6:
2c0f:1600::/32
Signature Algorithm: sha256WithRSAEncryption
3e:43:07:16:20:74:5c:52:f0:94:46:ae:40:b9:68:83:0d:77:
cf:4a:5c:23:64:13:07:b0:f9:48:2f:5f:5d:23:3b:35:48:9b:
78:e7:d0:4a:de:9b:db:15:e3:cd:e4:91:d3:95:fd:d4:04:52:
c1:56:15:db:78:aa:2b:09:00:07:a2:6c:b8:4f:fc:b1:06:ec:
c1:86:27:a0:ab:7a:82:64:77:20:91:93:6e:09:d7:a1:f9:61:
31:1b:c5:19:76:bb:3f:73:83:b4:3d:d6:ee:3f:c7:45:33:8d:
d7:d7:4a:2d:46:24:cb:38:3c:1c:47:ad:cd:7e:3e:cf:0b:0e:
da:4d:42:27:b3:c4:b7:fb:00:35:5e:b8:ce:13:cd:dc:55:a8:
91:1c:62:cf:dc:4e:69:2a:22:b7:2e:c9:2d:f2:23:41:b7:fa:
42:65:a8:74:0e:62:f2:0d:02:a4:19:0d:af:2d:30:4e:89:76:
ef:0f:ec:06:80:f8:25:7a:b9:56:ec:ec:92:98:07:63:b8:84:
c9:c2:18:11:a3:7c:3b:08:5a:6a:2c:7d:d1:d6:54:a8:53:42:
8f:e8:26:9f:6b:5f:5e:b8:ca:cf:cc:43:37:a3:59:e2:ee:a8:
09:7f:21:51:e2:e8:a2:14:6f:9b:d4:a6:f7:e9:90:c5:33:d7:
c4:b6:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:03 2026 by rpki-client