Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/3F92F9488D8411F19BB2F2F2CE1D38B0.roa
File: 3F92F9488D8411F19BB2F2F2CE1D38B0.roa (raw, json)
Hash identifier: bJjoyi5Zc6lW8GW/nq2sPtGTz23gihRvLCOBF9bpm6A=
Subject key identifier: 63:8E:48:08:D6:58:AD:77:6B:B7:31:D7:03:DA:A1:D6:45:9F:95:B7
Certificate issuer: /CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
Certificate serial: 0641
Authority key identifier: 27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/3F92F9488D8411F19BB2F2F2CE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:37:37 +0000
ROA not before: Sat 01 Aug 2026 08:37:33 +0000
ROA not after: Fri 30 Apr 2032 08:37:33 +0000
asID: 329028
IP address blocks: 102.216.72.0/22 maxlen: 24
2c0f:4480::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E2C5AF, serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
Validity
Not Before: Aug 1 08:37:33 2026 GMT
Not After : Apr 30 08:37:33 2032 GMT
Subject: CN=6a6db051-3fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:fd:14:c8:9a:09:22:98:09:e4:fe:e2:46:
1c:75:d4:e4:0e:2b:c9:a0:40:29:70:d2:b8:c7:15:
d9:87:fb:f3:50:f8:85:ac:42:af:26:ea:15:2d:25:
d4:27:ad:1b:eb:ae:17:8b:09:93:f1:87:7c:ec:80:
be:40:4f:c9:61:f0:8f:2e:4e:d8:44:e7:1c:b7:c2:
a1:74:8c:12:18:4f:8f:df:b8:6d:17:58:d7:50:e9:
6a:49:04:e2:e2:a0:13:f0:b0:f5:82:4e:ab:f4:76:
61:fa:54:3e:7f:2a:0e:cc:7c:40:59:0a:c8:26:14:
e8:ce:d7:93:88:e8:1e:f5:26:5c:d6:9a:83:21:05:
5f:a8:8c:30:c5:59:61:c5:65:3c:b8:54:53:1a:c8:
67:df:c4:8f:bd:4d:b6:97:e3:f1:d6:c7:a2:04:7f:
75:1d:f1:44:42:9b:08:06:3e:bc:23:e9:60:2e:db:
c9:c1:f7:2a:bb:e0:99:7f:cc:cb:88:3b:dc:f9:67:
99:68:4d:18:67:cc:0b:c8:4a:37:23:ac:b6:ad:31:
4b:c6:18:29:66:24:65:7a:1b:da:02:95:f4:57:88:
5c:86:6d:1f:90:4f:47:31:e2:e3:9c:da:2a:ed:3d:
0b:ce:0b:68:49:04:3c:74:03:ae:16:2b:27:85:9a:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:48:08:D6:58:AD:77:6B:B7:31:D7:03:DA:A1:D6:45:9F:95:B7
X509v3 Authority Key Identifier:
keyid:27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/3F92F9488D8411F19BB2F2F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.72.0/22
IPv6:
2c0f:4480::/32
Signature Algorithm: sha256WithRSAEncryption
3e:0e:0f:07:84:37:bd:56:0b:a5:4b:b4:a2:f0:92:05:16:5d:
8c:5a:10:0c:ff:26:36:f6:02:ac:11:06:a3:b7:5d:1b:cb:1e:
6d:f6:9a:25:7e:8b:c6:80:80:6c:b3:b2:d3:69:07:44:1b:fd:
c7:48:0b:00:30:72:1e:d6:88:59:77:03:23:f9:95:4b:80:59:
73:a5:29:54:23:7f:da:de:11:d8:f4:e8:3a:5c:95:99:a9:9d:
97:a0:07:69:03:ee:57:e9:5c:96:99:2e:6a:f6:f1:76:60:a5:
88:14:67:13:3c:e7:1a:21:37:52:4f:7a:ea:9e:ea:5a:e7:e1:
f0:66:3b:c0:cc:f4:3d:d0:db:34:08:e2:48:b0:37:4a:53:82:
b8:ab:8c:bd:2b:66:01:b5:4c:6a:34:a2:db:e5:18:cd:e1:19:
53:9e:3e:af:44:bb:95:99:9c:80:75:94:b0:2b:e3:4d:a2:9b:
ac:ac:d6:d8:f9:90:05:1b:ac:4b:94:83:ea:fc:1f:f7:4c:41:
6b:76:97:48:8e:cb:76:66:37:60:54:6f:35:4e:8d:f9:42:0e:
c1:5f:73:18:63:a0:f9:2d:f4:cf:5d:2a:a9:b6:df:5c:a6:00:
38:a7:eb:fb:3d:42:34:57:f9:ba:ae:6e:34:50:84:e4:a9:a7:
69:10:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:01 2026 by rpki-client