Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/F330454475E911F1912FD5ACCE1D38B0.roa
File: F330454475E911F1912FD5ACCE1D38B0.roa (raw, json)
Hash identifier: qmUbYot1nqsMbckCpWdEzy35tfteUOIURjfNCFIfS94=
Subject key identifier: 78:47:79:61:31:3E:4C:39:0C:87:37:48:03:ED:A6:A3:57:4F:A1:1E
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 018C
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/F330454475E911F1912FD5ACCE1D38B0.roa
Signing time: Thu 02 Jul 2026 07:45:09 +0000
ROA not before: Thu 02 Jul 2026 07:45:05 +0000
ROA not after: Wed 10 Jul 2030 07:45:05 +0000
asID: 329532
IP address blocks: 102.205.240.0/22 maxlen: 22
2c0f:fc78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 04:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 2 07:45:05 2026 GMT
Not After : Jul 10 07:45:05 2030 GMT
Subject: CN=6a461705-d6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:42:aa:9a:53:22:9b:4e:3d:8c:73:2e:70:
84:71:1b:7b:80:e4:48:ee:c8:59:23:a9:cd:99:8b:
b3:4d:0d:28:86:60:51:0c:8f:87:5e:4b:92:d6:56:
13:bc:31:e4:3f:33:cd:f5:1c:fb:5e:43:4a:18:5a:
a3:2e:41:40:94:eb:81:a3:27:f3:3b:6c:e1:fe:6e:
ed:93:c9:a8:af:8c:51:71:cd:c1:43:37:84:0f:6d:
d0:ee:3e:78:1d:5e:b5:53:47:bf:46:3e:9e:c9:2f:
d5:f0:bd:a0:3a:20:91:f8:a6:a6:7d:d6:a3:ff:3c:
9e:42:fe:a1:2f:cb:2c:91:a3:9e:04:a9:9e:b9:ad:
c9:9e:5d:46:6f:e5:61:ea:fd:0c:f4:89:8b:43:2c:
41:66:b5:6f:4f:ad:0f:54:b7:94:2c:de:13:c6:33:
00:0e:e8:a4:88:7e:41:32:77:fd:29:20:b5:d5:61:
c1:ee:6b:31:eb:e6:dc:73:f8:3f:ef:1c:47:4e:9c:
b5:79:b1:c6:1c:2a:29:69:e7:d4:01:4c:28:27:47:
87:64:fb:b2:69:a0:bc:a9:64:4c:82:c7:90:0a:d8:
f4:34:ac:b5:c7:93:b9:f2:fc:7c:7e:ac:d4:cc:16:
4f:6d:94:50:83:91:10:20:01:38:ce:c4:ec:ea:02:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:79:61:31:3E:4C:39:0C:87:37:48:03:ED:A6:A3:57:4F:A1:1E
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/F330454475E911F1912FD5ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.240.0/22
IPv6:
2c0f:fc78::/32
Signature Algorithm: sha256WithRSAEncryption
a4:f6:0c:39:31:03:d3:f4:2e:e5:23:7c:d4:e7:8b:9a:1a:a4:
73:51:88:10:fc:31:80:d5:88:d5:8e:11:f8:20:bd:50:1c:a9:
07:b9:68:2f:a6:40:08:35:5c:1b:a8:91:38:21:ce:4c:dc:f0:
86:d4:b8:b2:e2:ce:c0:82:08:e8:86:98:26:98:62:73:35:32:
bb:0c:4d:c6:29:61:d0:b5:57:f3:1e:de:cc:3c:d3:26:86:e6:
0e:2f:6f:70:c4:a8:69:ce:9c:10:ef:77:ee:7e:54:1f:9b:64:
10:c6:63:db:9b:8f:1e:95:bc:7b:a0:45:57:0d:a1:13:88:d2:
49:71:c9:d1:f0:d4:45:9a:ac:b0:83:96:67:7f:12:b5:6d:4e:
e6:30:9a:45:b5:23:d2:de:85:0f:eb:3a:51:40:b1:c6:e1:47:
b2:f3:26:45:c3:aa:62:a1:2e:88:c1:64:53:71:2c:c4:4d:69:
44:2f:44:71:c7:a9:e6:11:8f:7a:a4:1a:50:30:e4:5d:56:e0:
34:b7:5d:29:8b:7f:aa:3b:bf:1b:9d:7f:03:e9:3c:a6:dc:60:
fe:c8:62:2f:a3:c8:00:b7:d3:24:17:39:78:c3:3d:81:76:de:
e5:8b:80:76:53:b2:1e:42:d0:d6:d9:16:ab:ef:24:54:69:2c:
75:97:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:34 2026 by rpki-client