Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/DE32767C26A111F18A03048CDAE4EC9C.roa
File: DE32767C26A111F18A03048CDAE4EC9C.roa (raw, json)
Hash identifier: cFgU0rkBiooP5t2op0uOagxyM9Y5m1ekTnNkc5voo+0=
Subject key identifier: 68:CC:4E:01:5B:38:A2:B4:2C:7F:23:F4:5E:E4:84:17:99:5D:F9:F7
Certificate issuer: /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial: 064E
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/DE32767C26A111F18A03048CDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 10:20:09 +0000
ROA not before: Mon 23 Mar 2026 10:20:04 +0000
ROA not after: Sat 10 Mar 2029 10:20:04 +0000
asID: 327900
IP address blocks: 102.217.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 10:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660137AF, serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Validity
Not Before: Mar 23 10:20:04 2026 GMT
Not After : Mar 10 10:20:04 2029 GMT
Subject: CN=69c113d9-860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:5c:cd:dc:cf:56:5e:be:fc:ca:b1:74:1b:
01:14:b3:cd:77:11:66:cc:0e:f1:ff:31:40:2a:6e:
86:3a:37:74:a9:c3:48:ce:3e:b7:a0:04:50:48:26:
70:0d:0c:32:52:aa:dd:db:02:a9:d6:da:67:55:10:
2e:13:b9:06:c9:37:52:3f:66:d1:76:29:cd:34:0e:
00:85:0d:f6:94:d7:59:31:11:68:66:7c:17:5c:c6:
12:3d:bd:0f:bb:1b:a5:08:38:30:32:4e:90:2c:e8:
fe:96:02:1e:f0:48:07:a2:88:b8:d5:5e:00:67:f6:
99:2a:97:1c:05:b9:15:01:51:25:46:0f:55:a6:61:
19:cb:91:93:6b:ae:72:64:11:6c:60:d1:81:44:d3:
8f:0f:3e:2f:d8:7d:f5:c8:c8:83:01:d9:31:99:ec:
69:fe:56:16:95:26:95:11:d5:b1:0f:27:0f:ff:76:
69:f1:a4:4d:7f:cc:ed:7d:d8:c7:87:af:8f:d2:48:
be:b7:b7:a9:09:b9:34:e9:2c:55:18:39:11:2e:bd:
1d:f2:5a:d1:e1:f2:8e:6c:b0:fd:23:39:91:90:26:
fd:be:26:19:d0:56:dc:15:c4:58:21:ec:81:9f:a3:
93:a3:3d:0d:94:72:2d:cb:9c:cc:02:1f:73:7c:86:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:4E:01:5B:38:A2:B4:2C:7F:23:F4:5E:E4:84:17:99:5D:F9:F7
X509v3 Authority Key Identifier:
keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/DE32767C26A111F18A03048CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.72.0/22
Signature Algorithm: sha256WithRSAEncryption
68:28:22:b0:78:21:d9:bd:bc:04:c9:ae:72:02:e0:0f:82:e0:
ea:7a:5d:18:5e:ca:51:2f:2d:71:d0:6b:20:6b:c9:62:fa:30:
0a:b6:d8:b3:8b:4e:b4:f3:49:37:2c:b5:07:db:43:7c:6b:0b:
da:78:01:8d:06:95:2e:7f:36:17:3c:5d:15:9a:12:5e:61:43:
26:b4:ce:38:e1:67:05:5d:1b:f0:42:5f:17:e0:58:b9:3e:04:
43:31:e2:52:ce:b1:55:d6:f6:c1:ee:fe:60:95:a5:a1:f4:f8:
07:da:3a:27:c4:b4:dd:b2:a7:fd:c8:7d:26:15:72:6c:4c:58:
12:08:37:58:37:c5:d7:6d:c3:1a:d8:7c:8d:7f:ca:ea:fb:a1:
52:93:f1:bc:a4:fb:b1:77:a6:90:03:25:1e:20:d6:a8:f0:53:
ff:a8:14:89:0f:a1:da:4d:86:e1:c4:f9:de:ad:10:73:ae:62:
8a:33:b8:4b:b4:19:2f:d7:8c:71:67:38:79:3d:8b:73:ce:0d:
50:a1:a1:80:8a:76:aa:0c:ce:d1:2d:8b:5d:bb:e4:be:d7:7b:
43:78:52:0a:e5:ba:20:58:f9:ee:ae:9a:8d:ce:ab:87:cd:92:
91:3f:7b:c1:f2:a9:cf:33:6f:24:7e:70:be:86:67:43:bf:02:
14:70:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 00:13:29 2026 by rpki-client