Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa
File: AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa (raw, json)
Hash identifier: SgKxF5/8dtqg/2YdGcT3nH3vWLieJxae9WqWx8WQJDY=
Subject key identifier: 00:E2:3E:DC:5B:E7:8C:12:6F:89:D6:7A:57:71:D4:F4:71:44:5A:0C
Certificate issuer: /CN=F3678405AF/serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Certificate serial: 05
Authority key identifier: 80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa
Signing time: Fri 31 Jul 2026 16:34:23 +0000
ROA not before: Fri 31 Jul 2026 16:34:19 +0000
ROA not after: Tue 01 Jan 2030 16:34:19 +0000
asID: 329780
IP address blocks: 102.201.208.0/23 maxlen: 24
102.201.208.0/24 maxlen: 24
102.201.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678405AF, serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Validity
Not Before: Jul 31 16:34:19 2026 GMT
Not After : Jan 1 16:34:19 2030 GMT
Subject: CN=6a6cce8f-7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:53:7e:d7:69:59:ea:fb:45:5f:b6:d8:82:
44:05:8b:ee:5f:56:7d:98:17:6d:2d:cb:13:da:c2:
9e:04:7f:ad:b9:68:28:91:1e:38:6c:18:ba:ca:a9:
de:5c:e8:bc:71:7b:59:e5:a7:f8:7d:b6:f3:28:bd:
bd:64:e1:31:58:6f:78:ec:32:4d:ac:6e:0f:1c:17:
ef:76:7f:44:2f:7b:b0:79:85:0d:85:f1:d8:6f:9b:
ac:b6:58:0e:ac:3a:c0:8d:94:5d:df:7e:7a:91:b5:
3d:df:ed:50:17:c2:aa:bb:06:4a:44:02:62:16:b0:
a3:81:af:5b:89:41:70:28:db:9b:0d:2a:ea:9c:99:
f0:29:f4:c3:1a:dc:9d:32:bd:51:6d:9e:b1:b9:ec:
43:a0:06:3c:39:ad:b6:fa:6c:37:60:56:a5:2f:b3:
a4:0b:5b:8b:f1:c1:66:68:40:25:43:26:47:3d:e6:
94:fa:cd:11:e4:30:54:6b:15:8e:15:31:48:99:28:
fb:6e:60:32:4b:46:21:b7:66:e9:e5:41:be:05:91:
d3:42:8d:6e:65:1c:3e:6e:31:90:fc:3d:ce:08:87:
41:54:a5:2e:52:2d:31:69:05:e1:52:0a:67:f1:e1:
96:3c:a6:8a:32:44:4b:9a:b9:a8:4e:7b:6d:e2:cd:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:3E:DC:5B:E7:8C:12:6F:89:D6:7A:57:71:D4:F4:71:44:5A:0C
X509v3 Authority Key Identifier:
keyid:80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.201.208.0/23
Signature Algorithm: sha256WithRSAEncryption
63:3f:7e:f9:5e:5f:78:5f:78:8d:53:79:39:fe:b1:23:92:f1:
91:33:04:b7:40:e4:59:65:37:aa:33:08:c4:92:3c:b4:ac:18:
fa:ea:40:5c:51:99:a6:9d:b7:c7:21:07:58:0a:61:f1:24:73:
fd:90:02:fa:8b:e1:33:ec:28:d4:73:b2:6c:d9:b1:36:9d:e8:
2e:61:16:f2:c3:0d:05:2d:5f:1f:3c:52:68:6f:52:ef:8a:fd:
aa:61:b8:41:c7:10:21:ae:02:45:a9:e4:9d:2c:e1:74:5f:b8:
d5:6b:60:b2:dc:3a:2c:be:2d:2b:0e:f7:86:f1:14:57:33:d6:
61:99:4d:95:5c:96:96:05:49:64:69:54:56:15:e8:e8:90:af:
51:07:49:04:10:56:af:9e:09:b6:25:42:fd:d5:c5:0a:36:5f:
75:ee:5b:04:6c:72:57:26:4b:ff:97:06:9c:96:de:ef:26:c0:
91:02:7f:15:32:be:c1:33:c8:21:81:d1:02:04:59:74:75:b7:
7d:ab:a1:02:5a:57:9b:06:e6:1f:9c:44:31:06:fe:4b:bb:05:
03:77:58:bb:22:bb:02:4d:f2:8e:d1:88:91:13:64:58:2d:77:
85:a8:89:3d:61:89:fc:ed:48:17:08:2e:56:a5:1c:c1:a7:8f:
41:0e:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:35 2026 by rpki-client