Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/4288E4568F0911F1AC9254B1CE1D38B0.roa
File: 4288E4568F0911F1AC9254B1CE1D38B0.roa (raw, json)
Hash identifier: GE12R4RqUVM3naTuWSQa6p1HS7+tCOZPLqrhgpTvbNM=
Subject key identifier: CD:13:96:36:6B:D4:DF:87:23:41:19:0C:53:B3:A8:7D:B3:4A:72:F7
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 1002
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/4288E4568F0911F1AC9254B1CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:02:16 +0000
ROA not before: Mon 03 Aug 2026 07:02:12 +0000
ROA not after: Wed 30 Apr 2031 07:02:12 +0000
asID: 327750
IP address blocks: 102.69.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4098 (0x1002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Aug 3 07:02:12 2026 GMT
Not After : Apr 30 07:02:12 2031 GMT
Subject: CN=6a703cf8-1d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:a7:ce:4d:f3:f3:ff:4c:28:01:1d:d0:11:
4f:01:a4:fe:24:37:44:ed:a3:a2:74:a7:91:38:e5:
63:02:c8:3d:84:10:ff:7c:c6:ac:3c:f6:6c:52:d5:
af:61:e4:70:69:8f:fb:22:f0:ab:d0:a2:fc:c6:b5:
86:c5:4b:a8:2e:8e:23:13:29:ff:4c:77:6a:7b:79:
96:49:91:91:b0:db:dc:71:b4:a7:5d:0f:6d:d1:f3:
b0:e2:4a:05:97:53:a0:7d:83:5b:86:9a:a5:48:2b:
70:4f:12:bd:95:fa:db:bf:9a:e8:c0:73:60:5b:85:
de:2b:89:f9:e7:21:4b:20:57:6c:16:39:08:d3:f8:
57:52:de:34:d7:88:86:5e:f9:c9:eb:1f:f2:9f:18:
1b:23:5b:6c:d3:14:5f:7b:70:bc:2e:9c:bd:46:48:
ce:36:4c:b5:54:c4:12:40:7f:4b:4f:ab:47:a3:3c:
90:e6:b6:8d:87:9b:6c:a1:c8:94:d9:72:0c:19:3a:
3e:bf:ee:93:af:d9:38:c4:56:b8:ea:36:96:bb:52:
d5:55:50:eb:eb:3f:cd:ea:64:82:3c:c2:11:dc:d7:
81:b7:67:ea:1a:3c:db:29:d6:1f:cb:f5:70:7f:33:
f0:5d:d2:69:dc:a7:0b:96:24:2e:03:7a:7c:c1:7c:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:96:36:6B:D4:DF:87:23:41:19:0C:53:B3:A8:7D:B3:4A:72:F7
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/4288E4568F0911F1AC9254B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.248.0/21
Signature Algorithm: sha256WithRSAEncryption
03:45:f7:08:12:4e:c9:20:88:e9:9c:32:65:37:cf:44:d6:88:
75:f2:96:c9:f3:98:cd:a7:47:f2:07:c3:77:b6:9b:60:23:c4:
9f:27:6f:b7:db:66:3c:f5:51:93:eb:a8:f4:b0:5a:c2:8d:5d:
83:0b:f0:da:d9:85:53:cd:6c:95:2c:84:16:84:61:af:dd:18:
2f:b3:5a:4a:96:46:9d:a3:ce:8e:4e:a6:6d:ef:4d:70:00:73:
6f:18:39:f3:97:0f:c4:d9:bd:83:91:55:4b:ca:5a:59:fa:82:
c8:cc:6d:ed:d6:3c:ef:72:87:8e:63:25:c8:78:a7:28:b5:f3:
0c:c7:c8:21:e7:6d:a2:b6:c0:6d:9b:13:9d:39:2b:ba:79:79:
07:23:ce:38:c9:81:0f:2a:21:05:0c:b5:c9:a6:f7:fd:e4:6f:
3c:c1:a3:cc:9a:ba:7a:71:e1:51:bc:29:93:4e:3c:1b:61:17:
d8:b3:5f:82:bd:ea:ff:3c:db:d5:d6:2d:c4:e8:84:20:6b:1c:
0c:fc:0d:8e:2d:68:20:03:9c:20:b0:7f:1e:61:d5:89:46:d6:
a4:b9:e9:bb:b6:31:ef:48:22:b4:52:5b:5c:b7:09:59:ea:d2:
b8:f1:73:a1:16:b4:1f:ed:62:b7:e2:9c:95:37:e1:44:f5:f9:
99:0f:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:01 2026 by rpki-client