Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/D3EF1B2A296211F1A9D5138BDAE4EC9C.roa
File: D3EF1B2A296211F1A9D5138BDAE4EC9C.roa (raw, json)
Hash identifier: /KSI4OVsNdFUKIOWhEtJLVEojUxppooCdHRcCpRAkdE=
Subject key identifier: 5B:0E:E7:CE:80:92:E8:20:E3:71:09:91:97:C3:D0:A9:54:9D:86:2E
Certificate issuer: /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial: 053B
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/D3EF1B2A296211F1A9D5138BDAE4EC9C.roa
Signing time: Thu 26 Mar 2026 22:26:27 +0000
ROA not before: Fri 27 Mar 2026 22:26:21 +0000
ROA not after: Fri 06 Feb 2037 22:26:21 +0000
asID: 327872
IP address blocks: 102.202.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 02:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Validity
Not Before: Mar 27 22:26:21 2026 GMT
Not After : Feb 6 22:26:21 2037 GMT
Subject: CN=69c5b293-13a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:56:a7:8a:a7:6e:ae:78:f4:f3:b1:6d:42:
74:ee:dd:da:6f:70:30:96:e0:be:61:2c:87:60:2c:
6b:48:6a:29:fe:94:3f:d8:27:82:36:ac:11:ba:a2:
70:d0:d8:20:73:a4:2e:28:95:d0:1b:f8:f1:66:32:
52:79:6d:3e:cc:69:29:b6:51:31:ec:ad:a3:cb:f0:
c0:b4:0e:8b:b5:21:54:f6:3a:ad:1e:58:88:94:88:
e4:08:3e:10:68:61:62:cc:25:02:59:f1:91:5a:52:
9a:a8:27:6f:ea:cf:69:88:03:2e:2a:00:cf:17:67:
a6:cd:bb:69:82:fe:de:1c:87:80:24:28:f7:de:52:
e7:2a:ea:5d:5f:d6:31:db:02:f1:68:2a:3d:49:98:
08:f2:b5:2a:bc:20:c6:09:6b:0d:e3:cb:3a:ac:37:
9f:d9:f5:f8:74:21:70:29:90:ad:f9:94:45:a1:19:
ad:2d:0e:8b:93:1a:54:81:89:47:d1:2d:a1:57:d5:
6d:8e:99:9e:56:80:6b:86:7f:33:38:33:49:c9:15:
94:7a:ce:d9:9a:2c:70:fb:50:04:31:30:0b:83:a8:
0e:b3:ae:1f:65:49:3c:86:ac:0d:96:c2:c9:d0:bf:
9d:59:db:a4:35:9b:b8:02:5b:1d:04:f0:0b:fa:fb:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:E7:CE:80:92:E8:20:E3:71:09:91:97:C3:D0:A9:54:9D:86:2E
X509v3 Authority Key Identifier:
keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/D3EF1B2A296211F1A9D5138BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:70:1e:72:d6:9e:1d:97:71:c4:72:1c:44:cf:72:3f:53:60:
33:a2:e5:cf:66:97:0c:39:27:2e:6d:6b:25:1d:f5:d6:3a:3b:
98:68:2b:ed:8e:ca:fd:b3:73:df:ba:23:8c:e0:fd:f9:9c:cd:
65:5f:47:55:ea:9b:9a:b4:27:02:d8:5c:6a:b5:c0:8b:69:88:
17:41:83:1b:32:b0:42:79:e2:65:10:57:95:cb:b9:40:07:91:
73:8d:e5:6e:84:7e:ba:21:8c:60:dc:2d:0f:26:09:b6:71:27:
9b:70:e2:90:f6:c7:d3:6c:e9:2f:c9:91:e6:5c:5e:e3:3f:0b:
26:1a:6d:27:0d:39:d4:c6:74:3d:b2:f8:30:b3:60:27:91:88:
87:fa:d5:b2:ea:28:ba:63:a0:7c:5c:d0:a8:b2:60:e0:6a:40:
96:47:ff:33:48:27:83:c1:e8:90:e0:66:29:96:07:98:f5:56:
f3:73:95:19:96:71:15:cc:b6:b1:40:da:ba:59:b5:9a:0b:64:
5e:27:34:ff:51:67:b1:99:92:30:c0:07:c2:66:2a:c5:66:46:
8c:8f:e4:45:be:4e:2f:21:d4:76:b8:3b:18:6f:75:96:35:fd:
f9:3e:b5:98:06:e9:3f:f7:8d:aa:92:6b:2f:02:3f:8c:5d:da:
ff:d3:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:24:11 2026 by rpki-client