Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/2E8F703A8C9A11F19CA16FDFCE1D38B0.roa
File: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (raw, json)
Hash identifier: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=
Subject key identifier: F3:A4:A9:20:99:D4:36:19:97:DE:3A:22:FB:05:5A:AA:2A:BC:F4:20
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 08F8
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/2E8F703A8C9A11F19CA16FDFCE1D38B0.roa
Signing time: Fri 31 Jul 2026 04:42:06 +0000
ROA not before: Fri 31 Jul 2026 04:42:02 +0000
ROA not after: Wed 26 May 2027 04:42:02 +0000
asID: 37468
IP address blocks: 102.214.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Jul 31 04:42:02 2026 GMT
Not After : May 26 04:42:02 2027 GMT
Subject: CN=6a6c279e-d18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:27:21:b8:e9:8d:93:ac:00:0a:27:e9:06:
2f:d6:29:1c:c0:4b:6d:0b:02:a2:82:53:1a:aa:94:
94:84:94:c0:38:c0:46:0c:c1:45:3c:ac:6c:05:7d:
2f:14:7b:20:e4:64:aa:14:cc:3f:0b:2a:3c:41:62:
56:71:bb:00:88:c1:3f:b0:ba:51:e0:b6:63:4a:d1:
88:a2:72:21:5a:3e:4c:02:40:3f:e6:8b:59:83:fc:
59:b1:a6:ca:ac:81:33:29:0f:db:8f:99:68:9b:4f:
18:5a:55:a3:93:94:46:ec:e6:eb:98:ad:17:9f:21:
e2:1d:16:5f:25:83:e7:2e:e7:53:b3:c5:b1:99:5c:
b2:f6:4d:e4:a5:7d:97:a4:7b:3b:cd:1e:e5:8d:5a:
cb:a8:ae:e6:fc:36:23:f6:67:4d:5e:bf:9a:ed:35:
db:3f:6d:04:12:8d:02:bc:e9:6a:c6:f6:23:97:6c:
16:66:48:f3:d5:87:be:9c:1e:bf:a8:98:b5:15:42:
6f:45:17:ea:9b:32:09:e7:c5:a2:d7:38:88:29:e1:
a8:19:50:a2:b6:b4:84:60:46:6b:c9:ef:af:3b:57:
21:d5:b0:08:c9:20:55:0a:e3:e0:91:0e:cc:cd:1c:
2a:70:c9:de:fc:fd:e7:f9:0b:e4:8c:46:23:0b:31:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:A9:20:99:D4:36:19:97:DE:3A:22:FB:05:5A:AA:2A:BC:F4:20
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/2E8F703A8C9A11F19CA16FDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.120.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:15:bd:28:bf:de:d9:2c:c9:da:35:a3:bd:f1:4c:e5:6f:7f:
e3:74:1e:bd:09:a5:10:c6:31:61:9a:26:04:fd:a6:6b:71:66:
42:19:d5:d9:c1:77:48:f5:b2:11:5c:15:b2:86:34:a8:86:b9:
10:e6:3a:75:32:e0:45:1f:da:c4:2d:6d:fa:7c:0e:d2:49:1a:
4f:4f:54:3c:7b:7e:8d:03:8d:51:a9:cc:b0:1c:91:67:9c:bb:
9f:84:ed:8a:8c:29:d3:2d:e1:0c:20:60:9e:86:7d:b0:eb:f5:
7e:c8:7b:ab:f2:d2:14:02:aa:ae:fd:0b:3c:24:aa:26:a8:76:
ca:52:a7:13:e5:20:ba:47:57:90:fc:33:7b:de:ff:e4:52:e4:
86:32:42:64:5d:4b:a9:24:4b:39:38:97:d0:71:b7:fd:5b:ae:
22:b7:f4:a3:7f:7e:8b:4b:6f:71:73:90:18:69:60:06:80:55:
39:41:32:c7:56:2e:f9:d7:96:af:51:d3:d3:a1:5e:8f:25:75:
85:56:df:25:57:c4:f3:39:bb:f5:d1:64:d4:b2:f4:51:97:1b:
33:1a:04:e6:88:38:52:42:80:7d:9c:8f:d8:a4:1f:a7:7c:4f:
47:97:f5:f7:a8:01:ca:ce:de:06:97:c3:4b:4a:60:aa:d6:db:
54:5e:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 16:46:17 2026 by rpki-client