Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/6EB3E9463D8211F1BFB367BBCE1D38B0.roa
File: 6EB3E9463D8211F1BFB367BBCE1D38B0.roa (raw, json)
Hash identifier: JDQw1SItmn8dJ5vJZ59409x/u+m2Azdm6fUPsmf8m6Y=
Subject key identifier: 64:69:64:6B:AA:A0:10:55:37:AE:59:F1:32:29:68:2F:71:62:00:CE
Certificate issuer: /CN=F361033EAF/serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
Certificate serial: 02
Authority key identifier: 23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/6EB3E9463D8211F1BFB367BBCE1D38B0.roa
Signing time: Tue 21 Apr 2026 13:03:04 +0000
ROA not before: Tue 21 Apr 2026 13:02:59 +0000
ROA not after: Tue 30 Apr 2030 13:02:59 +0000
asID: 329531
IP address blocks: 102.205.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.crl
rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361033EAF, serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
Validity
Not Before: Apr 21 13:02:59 2026 GMT
Not After : Apr 30 13:02:59 2030 GMT
Subject: CN=69e77588-cf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:7d:a2:d4:51:4c:f0:68:75:74:24:59:f1:
8e:3b:ef:db:3d:e1:bd:94:fe:50:55:f1:e9:1d:b5:
6b:ac:65:2c:2d:f3:8e:6e:fc:e9:66:5b:ed:f1:03:
e8:e7:82:7f:5f:04:c8:fd:68:90:2e:47:98:3a:c5:
42:5a:9d:ef:01:64:0e:36:72:b3:90:8b:f0:2a:05:
dd:b5:00:70:f2:5a:42:91:61:58:e8:20:9b:c3:49:
05:65:77:11:b4:71:18:bf:22:db:7c:29:8c:a9:ab:
60:5b:d6:d1:79:98:8a:6b:81:82:6c:60:0c:01:4a:
ff:f4:e6:e4:8a:42:30:96:6b:c2:83:9a:f1:e0:e2:
0e:a7:6f:1f:a7:f1:fa:9d:1c:08:be:43:04:da:75:
2a:92:a1:4f:99:87:89:b5:bb:af:04:61:e7:24:d7:
25:11:ca:be:a0:3f:a0:7e:73:b2:cc:61:cb:33:0b:
3e:17:03:78:41:31:f9:38:b7:81:50:71:94:28:f2:
2b:58:f5:05:1d:80:84:0e:dc:73:36:67:ff:2a:5e:
f6:a9:14:e7:45:4d:d6:8c:7b:72:b7:6f:cf:cf:91:
13:67:80:8f:df:89:08:88:48:ae:c6:7a:f4:29:a4:
1e:f9:6f:c5:e7:aa:fa:63:6c:bd:e7:f4:00:6b:3b:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:64:6B:AA:A0:10:55:37:AE:59:F1:32:29:68:2F:71:62:00:CE
X509v3 Authority Key Identifier:
keyid:23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/6EB3E9463D8211F1BFB367BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.244.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fe:06:8b:78:b7:34:e6:f4:34:e4:b2:06:97:86:7e:13:91:
49:36:52:c0:a7:70:6c:05:44:f3:72:f6:91:8a:3b:12:9d:a1:
45:c2:be:09:75:e7:ea:09:f5:fe:f5:66:ec:c8:f4:90:95:ae:
45:e9:3e:cf:e8:d8:2e:50:98:91:98:f8:1a:f6:93:97:22:81:
ff:8d:ee:1c:a8:b9:f3:e6:f3:c0:7f:1e:d9:a4:b0:7f:f7:83:
61:a9:fa:ce:ca:5e:1d:d8:f3:8e:a2:e6:ac:34:cd:f7:ab:8d:
7c:42:cf:b9:3c:84:2e:b4:2e:16:6d:f4:d5:98:64:62:7c:6c:
5d:13:89:27:1f:e2:89:c6:43:41:4d:d4:b1:0e:d6:7e:d8:25:
14:c0:34:c5:b9:76:5c:5e:08:b1:26:ba:bd:29:3a:91:a0:0c:
bb:d7:c3:7f:40:7e:3d:5d:a4:7c:89:3a:c2:ab:49:ca:f8:50:
95:0c:f2:81:e7:f0:ce:6e:15:37:9c:29:03:bc:33:a9:53:bb:
3b:fa:3c:bb:25:c2:bb:1a:f2:80:a6:79:f8:e6:13:a4:37:b1:
e7:bc:55:64:fa:7c:9b:19:49:d9:9b:4f:93:bb:5a:b1:4a:13:
58:da:4a:ab:74:f0:59:76:34:2c:a6:27:0c:a2:c8:d0:da:b0:
3b:45:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:11:43 2026 by rpki-client