Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/AADE53CA3FD511F1B4AE12F8CE1D38B0.roa
File: AADE53CA3FD511F1B4AE12F8CE1D38B0.roa (raw, json)
Hash identifier: i/TGMJEr4Iy+SC3OLf7KXhOgRufP1/hjUTCS/FesiFU=
Subject key identifier: 52:26:A4:9A:47:67:F8:25:3C:B6:E3:BE:F2:6D:85:46:84:47:A3:72
Certificate issuer: /CN=F3616C70AF/serialNumber=441C66D2E27E145D7A6ADC9296C0C350BC718B65
Certificate serial: 05
Authority key identifier: 44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/AADE53CA3FD511F1B4AE12F8CE1D38B0.roa
Signing time: Fri 24 Apr 2026 12:03:55 +0000
ROA not before: Fri 24 Apr 2026 12:03:50 +0000
ROA not after: Wed 30 Apr 2036 12:03:50 +0000
asID: 329422
IP address blocks: 102.209.76.0/22 maxlen: 24
2c0f:3440::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.crl
rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
rsync://rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3616C70AF, serialNumber=441C66D2E27E145D7A6ADC9296C0C350BC718B65
Validity
Not Before: Apr 24 12:03:50 2026 GMT
Not After : Apr 30 12:03:50 2036 GMT
Subject: CN=69eb5c2b-a0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f9:9e:b2:ab:a7:4c:1d:81:13:cd:10:37:67:
36:41:81:69:ad:d2:c1:fe:02:93:76:54:51:cd:b2:
9a:54:9b:ca:11:cd:bb:c6:cc:fd:ac:b8:71:73:c0:
f2:c5:ca:62:f9:18:9e:b6:71:cd:64:98:e1:a4:51:
61:10:b3:1d:e9:27:f2:e7:85:fa:b1:42:d9:24:8a:
74:b8:21:60:ef:fb:c8:a6:b3:41:84:b3:ca:68:94:
d6:d7:cf:f5:86:86:19:3f:49:51:87:a0:5a:05:06:
69:68:66:e7:07:e9:ed:d0:1f:aa:2e:3e:29:9a:26:
fb:16:b0:13:aa:a3:30:0a:f9:40:2a:a1:ac:e5:44:
58:20:4b:0b:c6:68:87:d1:60:3c:30:39:2d:bd:f1:
2d:0f:a8:17:5b:7b:54:6c:14:89:95:f9:05:7d:40:
4d:04:f7:af:23:64:08:e7:6f:38:5e:a1:ee:f5:0e:
46:85:53:bc:52:15:9d:c1:9f:93:b1:d0:27:db:80:
87:f5:69:da:c1:43:11:1f:ca:43:ca:6c:54:11:3c:
b3:2c:69:3a:fe:dd:95:6e:55:5b:e3:dc:92:b6:03:
f3:c2:9a:b8:37:6d:fb:cf:ac:6c:14:d8:e6:bc:62:
e8:b8:52:b1:90:3a:b1:0c:7c:18:5d:67:ae:14:1f:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:26:A4:9A:47:67:F8:25:3C:B6:E3:BE:F2:6D:85:46:84:47:A3:72
X509v3 Authority Key Identifier:
keyid:44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/AADE53CA3FD511F1B4AE12F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.76.0/22
IPv6:
2c0f:3440::/32
Signature Algorithm: sha256WithRSAEncryption
77:40:3c:cc:be:a8:e1:79:bf:25:40:8f:0a:06:40:35:e0:c1:
05:2e:20:f7:eb:eb:d7:53:d8:bc:af:d7:92:73:b8:d5:07:11:
45:bb:38:9a:0b:26:e6:16:6c:49:9c:5c:b9:1b:d7:4f:fb:21:
51:91:27:95:d9:f9:66:79:20:8e:41:ba:da:f6:bc:0a:1a:4e:
8d:39:05:15:73:07:67:f0:aa:4d:e1:93:bb:66:ae:e1:9c:fe:
e1:91:0f:ab:2d:68:b6:d2:28:50:97:f2:0f:a7:10:4a:4e:1a:
b6:89:fd:7d:2f:81:ff:92:75:9a:96:a2:83:eb:a5:c0:e8:ae:
ce:b1:71:10:be:14:bb:d8:d0:e5:9e:3c:a4:34:bd:30:17:1e:
be:fa:f6:cd:71:a5:ac:9e:cb:f9:27:74:78:d3:a3:b6:e1:0e:
02:6f:c8:fd:25:ad:c1:8a:1b:ca:b9:4d:52:b3:56:1b:1e:ad:
a3:27:31:fe:e6:f9:c8:30:e0:ed:d4:e1:8b:be:96:72:cb:cc:
94:f8:f3:32:5d:3d:56:44:12:82:ad:27:a7:d1:b5:4e:ed:38:
4a:a7:47:a9:21:89:12:59:12:7d:8e:0b:12:82:97:b6:cb:e2:
4f:2c:89:74:e2:fa:2b:6a:5c:70:6d:99:d6:cc:4b:9d:8b:e4:
ed:90:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:24:50 2026 by rpki-client