Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/C8393F343B0211F1BB07DBE1CE1D38B0.roa
File: C8393F343B0211F1BB07DBE1CE1D38B0.roa (raw, json)
Hash identifier: ie2r3Kp2/vyJil6tMjxbUC1iyVPnVvwJpf0qlXAso+Q=
Subject key identifier: FC:AA:9C:A0:6E:D8:F8:D1:FD:90:69:D6:08:6F:06:56:51:F1:84:EB
Certificate issuer: /CN=F3660442AF/serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
Certificate serial: 052C
Authority key identifier: 9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/C8393F343B0211F1BB07DBE1CE1D38B0.roa
Signing time: Sat 18 Apr 2026 08:44:16 +0000
ROA not before: Sat 18 Apr 2026 08:44:11 +0000
ROA not after: Fri 18 Apr 2036 08:44:11 +0000
asID: 329166
IP address blocks: 102.202.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660442AF, serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
Validity
Not Before: Apr 18 08:44:11 2026 GMT
Not After : Apr 18 08:44:11 2036 GMT
Subject: CN=69e34460-a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:58:69:8b:40:19:ea:03:2d:a0:70:04:91:
1a:9b:72:19:eb:04:e6:bc:e8:e6:96:e8:d6:74:b5:
67:f9:47:c1:d6:53:3e:5e:6c:bc:3e:45:df:7d:a5:
66:c4:21:1f:47:04:37:9f:83:82:d0:67:ed:d7:3a:
72:1f:0a:51:33:bb:42:b2:6f:b6:a7:ec:94:5b:29:
c7:b8:5a:29:8f:44:fc:96:9a:cb:51:c9:97:30:bb:
35:db:f9:00:32:91:81:73:5b:f7:a1:b7:b5:98:4c:
c2:74:ce:16:10:aa:3b:ba:e1:80:e7:7e:99:83:da:
fd:fa:c9:b1:e0:f4:87:5f:57:09:73:27:61:90:c6:
a9:c2:0f:a2:7c:bf:8f:74:23:79:ea:a8:dc:62:39:
87:2a:cf:4b:be:66:89:05:b6:a6:33:7d:da:49:49:
87:04:06:60:8c:dd:22:38:cf:90:0e:23:a0:1d:c5:
af:f3:5b:e9:ef:72:3a:60:67:bf:08:34:58:57:2e:
a3:6d:2c:d1:17:36:d6:5c:62:7e:cf:62:d5:25:89:
78:52:59:3f:60:8f:9e:d4:06:c9:47:0f:00:fe:13:
31:f4:a5:58:08:c2:28:2a:66:d2:91:67:0a:d6:2b:
5e:0d:ef:e3:2d:7f:87:8a:30:5b:6e:d6:12:69:fe:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:9C:A0:6E:D8:F8:D1:FD:90:69:D6:08:6F:06:56:51:F1:84:EB
X509v3 Authority Key Identifier:
keyid:9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/C8393F343B0211F1BB07DBE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.192.0/22
Signature Algorithm: sha256WithRSAEncryption
75:04:5c:9e:c4:b9:5a:a4:0d:a5:f6:17:c8:85:01:7c:76:73:
1f:2a:5c:aa:ed:15:27:85:32:d2:a7:34:2b:a7:fc:43:7d:be:
06:5b:09:ad:7c:cd:4e:14:c4:2a:42:43:a0:b9:63:9f:f7:b8:
56:2e:36:67:12:34:9e:d3:dd:a0:39:72:8b:dd:a1:3f:44:68:
74:07:e3:27:b7:6e:d1:0c:70:c4:c7:04:f1:73:60:32:f1:82:
82:89:5e:b3:c8:f6:27:39:8f:ae:ab:a6:33:87:04:4b:58:c1:
1e:fd:1f:6e:56:d2:7d:bc:8c:e4:31:3f:7a:b8:be:9d:db:6d:
28:2b:6b:e6:e4:22:74:73:0a:2b:7d:77:80:96:4c:0e:82:99:
1e:25:68:98:43:56:86:d2:11:0b:03:fb:2e:27:d0:16:e2:df:
b5:ea:9b:cf:93:9a:d9:82:b3:81:4a:8b:52:2a:21:e9:70:aa:
54:73:86:94:cd:91:0a:e5:63:f4:03:f9:e1:48:43:49:a4:01:
11:11:25:0d:ce:3b:0f:7a:b6:74:6b:73:00:d3:c6:56:f0:d4:
cc:7a:58:9b:c7:26:58:45:ea:67:94:13:bc:2c:df:d8:08:7b:
28:33:f5:3e:b6:93:92:c4:b4:8f:b0:65:b3:fc:c4:04:cd:17:
c0:9b:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:27:31 2026 by rpki-client