Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/C44EDCDE47A111F189DCF8F2CE1D38B0.roa
File: C44EDCDE47A111F189DCF8F2CE1D38B0.roa (raw, json)
Hash identifier: 5wtUZaGAD6hnevPQoGy0Wp/M21ZmQcq4eTIcxSJMHIM=
Subject key identifier: E7:F3:DD:E2:48:0B:28:8B:55:30:6E:1D:FF:D0:FE:42:42:60:F2:C5
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 0385
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/C44EDCDE47A111F189DCF8F2CE1D38B0.roa
Signing time: Mon 04 May 2026 10:12:34 +0000
ROA not before: Mon 04 May 2026 10:12:29 +0000
ROA not after: Tue 04 May 2032 10:12:29 +0000
asID: 328176
IP address blocks: 102.128.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: May 4 10:12:29 2026 GMT
Not After : May 4 10:12:29 2032 GMT
Subject: CN=69f87112-e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:b4:c7:ad:66:73:37:f0:5a:74:87:e4:38:
23:fd:72:33:a3:41:df:b4:11:59:71:f0:20:28:d4:
9a:d9:25:2f:33:3a:47:73:d3:a7:93:cb:ac:50:87:
27:36:08:87:a7:22:24:6f:a5:55:73:55:c2:8a:49:
17:82:81:9a:93:ce:28:3e:23:c9:83:b1:1d:96:ef:
ef:0f:6d:ce:a6:47:fe:fe:0e:9a:a2:c5:ee:62:0a:
d5:f5:45:9d:65:4e:bf:ab:b2:39:9b:d4:f5:4e:ac:
b1:fa:0a:bc:c4:b6:3c:94:c8:4d:5f:1d:98:27:bb:
b1:93:aa:bd:30:95:15:b0:2b:bb:78:50:58:47:4b:
4a:c1:ed:45:e3:b6:5f:d9:ee:d0:30:c2:1d:6b:0e:
ba:4e:de:fa:29:ba:0d:5e:d2:58:90:f7:0d:48:f6:
d6:76:63:74:ea:3c:cf:7c:d0:26:18:36:5d:ab:a1:
c6:54:b3:3d:01:53:67:b3:4a:11:8d:ba:73:09:0a:
20:6a:f5:a2:0c:2a:c0:9a:2f:60:d9:6c:16:00:f3:
51:03:c2:a9:d8:f6:cb:2b:a3:a8:30:71:4a:29:c4:
77:cd:7d:3d:2f:60:56:f0:5e:08:0f:d1:bb:70:aa:
cf:39:9a:95:1c:f3:d4:73:45:ec:e2:ee:39:f5:fa:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:DD:E2:48:0B:28:8B:55:30:6E:1D:FF:D0:FE:42:42:60:F2:C5
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/C44EDCDE47A111F189DCF8F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.172.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ea:99:09:45:c3:e6:02:e0:77:fc:41:9e:fc:e4:67:34:72:
d6:d3:a1:61:35:8f:89:92:06:f3:c3:70:94:a7:5e:13:97:73:
e1:04:a2:86:7f:41:88:32:27:5b:6b:e3:88:3c:c1:2d:9a:d7:
60:9a:db:98:19:ec:10:09:92:9f:c2:0d:61:74:c2:9f:41:a9:
84:ca:02:03:1f:6a:10:1e:36:d0:df:fc:f3:ca:4d:11:0a:bb:
de:ff:01:80:c0:b1:25:10:88:c6:66:68:0d:e0:d1:3d:2a:3e:
98:c0:bd:c4:3d:5b:2e:bf:34:6a:58:3e:6f:ca:97:e9:de:b6:
4d:57:64:34:85:17:b8:f3:f4:4b:15:1b:43:0a:de:0a:63:59:
ab:84:2f:29:8c:f8:48:e0:4e:2f:25:ae:32:86:b4:1c:0b:eb:
eb:f2:eb:b6:ef:8a:4b:c6:96:07:be:0e:9f:50:77:e4:c7:69:
b2:f7:c3:d7:b1:06:31:d0:9d:99:1d:d6:b1:14:2b:bb:ba:18:
67:cf:c2:0c:78:92:8e:5f:2b:4c:f5:0f:ba:c1:2b:60:ad:01:
cc:5a:08:c6:89:14:a1:4b:46:71:ed:f3:2c:e5:21:6f:ed:94:
a8:c9:a3:80:7a:f1:0c:ce:be:15:c8:e2:d6:da:ab:c1:da:05:
af:1a:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:09:09 2026 by rpki-client