Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/CD1104AC75DA11F1BC9990D3CE1D38B0.roa
File: CD1104AC75DA11F1BC9990D3CE1D38B0.roa (raw, json)
Hash identifier: Zg5RWEgoA8Ow+axhg3Kss4mDZWo7l8RiP49z0j1eexs=
Subject key identifier: AC:F9:2A:64:66:A0:A8:2B:C0:95:0F:56:7D:60:4E:5D:0F:38:9A:FE
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 018A
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/CD1104AC75DA11F1BC9990D3CE1D38B0.roa
Signing time: Thu 02 Jul 2026 05:56:43 +0000
ROA not before: Thu 02 Jul 2026 05:56:38 +0000
ROA not after: Wed 10 Jul 2030 05:56:38 +0000
asID: 329532
IP address blocks: 102.205.240.0/22 maxlen: 24
2c0f:fc78::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 04:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 2 05:56:38 2026 GMT
Not After : Jul 10 05:56:38 2030 GMT
Subject: CN=6a45fd9b-976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:a8:64:d2:c7:8b:0f:26:e7:64:11:63:6b:
b5:6a:27:28:f5:b5:b7:17:3c:5f:25:0d:10:f1:d6:
ac:4a:e1:b6:de:d7:07:f2:ea:1c:12:38:5e:e6:08:
66:f6:64:5a:79:cf:6a:40:0f:97:b2:34:03:9a:c0:
b3:a5:60:7b:bf:e0:f3:be:f2:4c:df:54:73:9c:7c:
45:7b:7d:cf:2c:d2:86:46:08:d0:18:c2:bc:7e:64:
ef:e9:bd:35:6d:a7:75:93:f1:35:1b:07:ba:e1:ab:
fd:6e:85:a7:ac:27:d6:3f:81:7b:23:ef:41:4e:cb:
e7:d9:57:66:c0:b6:6e:4b:f2:d7:82:a4:cd:b3:22:
52:16:1a:d5:cb:09:b0:e7:7e:7d:43:1c:46:b3:f9:
67:5f:5e:74:5c:b2:09:f7:20:ac:23:48:27:db:e3:
b2:2e:79:99:cf:3f:23:b1:c7:37:3b:ab:e6:d3:27:
18:b9:6a:bb:23:f0:55:9d:b2:bc:a2:db:f9:b9:5c:
65:46:28:7d:bb:a3:c7:c0:04:fe:51:61:cd:6d:ec:
22:0f:e8:5d:f4:95:10:e1:75:93:c7:13:b5:cf:3b:
d5:79:a0:2d:08:2f:15:76:1e:2c:26:5b:38:90:c5:
e2:f9:1f:3e:2a:e8:ba:0a:00:30:a7:d5:cb:4b:3f:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:2A:64:66:A0:A8:2B:C0:95:0F:56:7D:60:4E:5D:0F:38:9A:FE
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/CD1104AC75DA11F1BC9990D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.240.0/22
IPv6:
2c0f:fc78::/36
Signature Algorithm: sha256WithRSAEncryption
3b:1f:3c:79:9b:11:7b:a9:08:fb:21:9d:50:12:42:b1:bb:44:
37:54:3f:41:34:30:3b:63:99:b4:57:58:ff:9c:55:24:00:3e:
8a:e7:63:15:6f:1a:bd:99:7c:d4:fe:57:fb:83:63:86:f1:27:
dd:19:01:00:c6:c2:20:97:70:c6:bd:be:0a:61:6d:77:78:5b:
6a:c0:c8:57:c7:90:66:89:3d:d6:0a:a2:e5:63:7f:af:66:37:
66:aa:cf:2c:6e:4f:b0:d6:c2:e4:55:50:eb:1d:21:31:15:ed:
de:5c:90:dc:dd:36:94:23:57:11:ea:2b:e7:3c:c6:62:93:17:
a3:64:cd:46:1c:41:dd:8e:c9:25:19:5c:fa:7b:7d:21:47:e8:
94:6c:42:f9:f4:42:49:90:66:70:c3:ea:69:dc:61:aa:48:56:
2c:69:05:5d:48:3a:ba:2b:82:87:9f:89:f0:fc:f5:cd:2e:3e:
05:85:c7:78:41:fa:d6:64:ac:ee:b9:8d:ef:94:68:da:17:68:
e7:f3:2b:24:14:e8:7d:bc:a4:ab:f0:35:37:b7:14:7a:f5:c1:
2d:3c:4b:70:de:e7:bb:f3:57:61:aa:db:4e:f2:27:e5:9a:d7:
b7:eb:0e:e5:f3:2a:74:12:f9:65:88:06:56:d7:5e:9e:64:a8:
45:6a:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:41 2026 by rpki-client