Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/FED45DEE75EA11F18B33C1B3CE1D38B0.roa
File: FED45DEE75EA11F18B33C1B3CE1D38B0.roa (raw, json)
Hash identifier: nKWlg2D4RIZBs3lHbtX+wqy5k+dvX6IDFHmk81XF7LE=
Subject key identifier: 1E:BD:8C:4D:77:75:56:22:50:91:03:95:C1:D2:77:B8:39:75:B6:1B
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 018E
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/FED45DEE75EA11F18B33C1B3CE1D38B0.roa
Signing time: Thu 02 Jul 2026 07:52:39 +0000
ROA not before: Thu 02 Jul 2026 07:52:34 +0000
ROA not after: Wed 10 Jul 2030 07:52:34 +0000
asID: 213481
IP address blocks: 102.205.240.0/22 maxlen: 24
2c0f:fc78::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 04:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 2 07:52:34 2026 GMT
Not After : Jul 10 07:52:34 2030 GMT
Subject: CN=6a4618c7-b3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:91:61:3f:ff:34:60:09:b0:23:e1:2a:73:
ab:41:12:9f:3c:6b:5b:31:f7:e7:09:5c:e0:1a:27:
99:55:4d:15:80:11:14:20:f9:98:a7:d2:f8:13:96:
d4:83:86:19:45:1b:c6:51:c6:f3:4b:40:6a:fa:bf:
9f:e0:19:df:bf:77:9f:e0:87:f2:7b:1c:91:20:88:
fd:7f:8d:20:8b:2e:35:12:1e:51:c3:6d:24:49:9d:
8b:2a:d2:68:54:66:3a:61:38:2b:33:2b:48:77:59:
10:5f:98:13:ce:e2:45:b1:51:69:60:66:ff:aa:5e:
a4:b9:de:ec:5d:04:d8:0b:50:cf:37:2b:74:6f:ae:
a7:9b:6a:1b:1b:5f:b7:10:30:9e:98:bb:a8:46:01:
5d:6d:8c:1e:8c:66:65:1a:ab:c6:de:b0:09:c0:53:
c9:ba:73:08:f5:9f:21:2c:3f:9e:12:e1:38:7e:ef:
a1:fe:1a:80:97:66:e5:ab:ba:7c:bc:4a:ce:67:19:
de:54:d8:60:d2:27:e9:1f:3a:1a:9b:26:4c:29:47:
ef:fc:cc:64:c6:d6:56:34:a8:4e:a9:06:43:1f:df:
3a:06:93:42:e2:d8:aa:72:2e:86:2a:bb:5e:0d:b3:
c2:1e:96:3b:0d:97:1f:12:3b:79:ed:85:3d:21:bc:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:8C:4D:77:75:56:22:50:91:03:95:C1:D2:77:B8:39:75:B6:1B
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/FED45DEE75EA11F18B33C1B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.240.0/22
IPv6:
2c0f:fc78::/32
Signature Algorithm: sha256WithRSAEncryption
09:5b:a1:bb:0a:e2:6b:8c:dc:9e:aa:3b:29:e5:b2:5c:f8:90:
b0:de:ec:c3:db:eb:72:56:d3:50:36:6c:48:63:64:64:97:a7:
d5:0e:e4:92:c5:ed:61:e3:d5:9b:f3:e0:63:85:bb:77:ff:74:
45:28:9c:0f:ff:e8:1e:bf:32:42:5a:1b:f3:eb:fa:d4:e2:3b:
d9:3c:b5:38:31:4b:15:76:3a:54:e7:cd:d9:ba:b8:bf:eb:07:
73:0e:ae:06:78:e3:74:75:b7:50:f2:d2:a5:e7:38:b0:9e:9c:
b3:08:65:4a:31:10:23:b3:d1:f8:7f:ce:c8:23:58:7c:97:23:
af:76:87:3b:25:3c:ca:15:f2:20:f1:95:64:57:6c:a8:d6:57:
4c:ac:15:95:e0:d7:a7:58:aa:37:2d:56:c9:56:c6:d2:64:b1:
88:ed:bb:2c:fd:b4:34:3f:27:26:5e:35:2a:47:72:de:81:c6:
1a:3b:f3:ad:df:33:b3:0e:5c:51:0e:8e:56:e1:94:d7:32:31:
39:2e:8d:76:20:d3:26:ec:89:de:3d:ad:5b:4b:5f:ff:b7:cc:
9b:1b:a4:7b:07:26:00:1a:63:d2:d9:e8:0b:38:14:cf:74:9f:
83:3d:9d:8e:21:5b:49:88:5e:65:b8:18:75:f7:8f:b7:ba:c9:
ed:3b:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:52 2026 by rpki-client