Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa
File: F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa (raw, json)
Hash identifier: C6BbRAJGJhQ26iah4zjRl/7QOH2SLtDjfPiGNF+cAyk=
Subject key identifier: 8A:02:78:2A:79:58:B6:68:70:8A:3F:9C:12:FA:01:0E:DA:82:AC:A1
Certificate issuer: /CN=F3641110AF/serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Certificate serial: 1E
Authority key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 15:56:01 +0000
ROA not before: Thu 12 Mar 2026 15:55:54 +0000
ROA not after: Mon 31 Mar 2036 15:55:54 +0000
asID: 43256
IP address blocks: 197.215.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Validity
Not Before: Mar 12 15:55:54 2026 GMT
Not After : Mar 31 15:55:54 2036 GMT
Subject: CN=69b2e210-d948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:47:94:d7:e6:1f:4a:a1:56:ac:21:94:b5:
f3:e7:d8:26:a3:4a:de:da:cf:fb:81:8e:b6:76:80:
a3:7f:11:2e:d5:f2:f9:b7:80:75:d9:17:94:e1:ce:
7a:74:48:0a:cf:30:24:32:04:f5:fc:65:f6:1a:33:
2c:e7:92:aa:65:dc:6c:bb:95:63:1b:6b:8c:12:4e:
31:16:a3:b7:4e:d2:a0:df:60:11:94:aa:ae:f5:66:
ca:f7:bf:7d:a5:65:c0:38:62:7f:4d:a2:c0:07:62:
61:4e:6e:8f:e5:c8:5f:e4:74:df:30:37:45:15:98:
06:94:c2:7c:69:e2:e7:a9:1e:a8:98:9e:85:50:1b:
6c:f5:d2:2b:d6:b5:cf:dd:ff:0f:e5:c1:6c:d4:99:
75:f3:95:d9:48:19:15:9d:98:16:22:bb:8f:94:c5:
d8:9b:da:36:fb:00:44:1f:51:3b:7a:2a:60:4f:4e:
e4:fe:7a:04:1d:f3:86:c5:fc:78:1c:a7:57:6a:b4:
7d:91:8e:df:49:64:7a:d5:e8:7b:90:33:6a:83:f4:
7b:ff:cd:18:da:91:38:cd:75:79:5f:12:fa:0f:03:
5c:69:2e:d6:18:3a:8a:c9:18:44:31:1d:5b:b2:98:
f7:ef:e4:e4:bd:ea:1e:96:d4:da:78:f2:81:d9:5f:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:78:2A:79:58:B6:68:70:8A:3F:9C:12:FA:01:0E:DA:82:AC:A1
X509v3 Authority Key Identifier:
keyid:0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.223.0/24
Signature Algorithm: sha256WithRSAEncryption
93:01:72:b5:3f:4c:13:fd:7b:43:45:9c:ec:5c:fa:73:ce:57:
8b:b8:0c:11:1e:46:d8:2a:13:86:be:ef:cf:c8:17:07:57:2a:
a3:8d:4d:da:c8:ea:f4:42:23:ce:86:33:74:5e:75:19:f0:70:
d7:fc:5b:70:ea:6b:17:35:8b:a4:18:15:c0:92:e4:a3:8a:cd:
2c:e6:70:01:d7:8f:13:d6:65:03:2b:ca:f8:40:15:7c:d9:35:
b6:30:ab:c4:ed:f5:48:d3:59:c0:ad:d5:55:82:59:fd:f4:c3:
6a:91:e8:b7:37:6a:f6:3f:ad:c8:bb:4f:c8:b6:4e:b4:37:86:
4f:5d:f8:3b:1f:b9:82:24:27:d0:9c:c0:d8:d4:99:33:b4:ba:
79:94:06:cf:75:ba:78:71:c2:51:08:fd:7c:ba:3b:bb:1d:72:
8b:80:8b:d8:24:ed:8d:2e:ef:a2:ef:bd:60:38:e5:a2:bf:05:
18:d6:c8:59:64:21:8b:87:4f:51:e7:0e:b8:79:5b:a2:72:d0:
63:5b:5a:4b:31:b4:bf:c4:d2:6b:3a:dd:b8:c1:75:56:ea:87:
9a:5b:0c:d1:52:56:90:a3:1e:f6:f5:6e:1e:f0:a4:ee:bb:66:
83:ca:d9:2d:6b:68:fe:ca:a7:6c:bc:cd:69:6f:e4:6c:8d:67:
08:a3:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 11:51:01 2026 by rpki-client