Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/B9D9790A188D11F1A76C66F1DAE4EC9C.roa
File: B9D9790A188D11F1A76C66F1DAE4EC9C.roa (raw, json)
Hash identifier: D3fxaNYXkOtJlbnpVPUhYfvM/B3R+LggxDLRf4MdM3s=
Subject key identifier: 4C:D7:2F:1C:B2:86:89:FB:AA:91:C4:E3:C3:E8:B5:D4:04:15:F4:B0
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 0A38
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/B9D9790A188D11F1A76C66F1DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 12:20:42 +0000
ROA not before: Thu 05 Mar 2026 12:20:34 +0000
ROA not after: Fri 01 Dec 2028 12:20:34 +0000
asID: 328366
IP address blocks: 102.204.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Mar 5 12:20:34 2026 GMT
Not After : Dec 1 12:20:34 2028 GMT
Subject: CN=69a9751a-5562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:51:53:be:40:d5:e7:40:49:10:d7:97:40:
18:02:e3:38:5f:1f:44:d1:98:12:35:46:16:c7:a0:
16:33:74:c9:04:07:cd:12:e4:f2:1b:4d:56:da:bc:
85:ca:65:0a:d5:29:5f:c4:c3:58:fb:2f:d4:2f:76:
7c:0b:47:5a:d4:15:50:9c:af:36:86:51:2b:a9:dc:
fa:3b:56:e9:9d:75:e5:2e:bd:01:8e:62:42:b3:3b:
31:ea:f7:50:37:a7:56:ed:40:2f:89:63:fa:d9:ba:
a5:ec:b7:36:ce:9f:aa:92:39:c5:59:81:39:cc:39:
0b:03:55:e8:af:4b:50:02:15:d6:94:41:55:5e:68:
55:21:35:31:f3:4a:45:cb:01:7a:69:d1:be:bb:a2:
32:0f:7c:ba:22:d7:e3:d4:1f:af:b7:71:af:ed:19:
bb:85:f7:32:73:21:74:05:a6:9f:91:f3:47:f0:16:
a6:ca:78:ec:7c:45:36:b3:1b:67:cc:81:03:28:e7:
95:cc:ee:aa:de:75:90:09:4f:8c:04:a7:10:8a:80:
81:32:c6:46:fb:fa:bd:97:df:52:dd:b7:9f:d2:8d:
96:41:6e:52:13:84:3c:e7:f7:ac:fd:ee:60:e1:dd:
d7:b1:f2:0b:5d:75:dd:e6:c9:22:02:d6:a9:6b:fa:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:2F:1C:B2:86:89:FB:AA:91:C4:E3:C3:E8:B5:D4:04:15:F4:B0
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/B9D9790A188D11F1A76C66F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.104.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f4:e8:7c:5b:7d:5a:02:c4:c7:a7:de:56:ab:ce:f1:2a:c5:
d4:a3:97:c9:ba:12:13:ae:2b:58:1e:2f:0f:d1:de:e1:26:bf:
c7:83:fb:96:20:a8:9b:f1:ae:7d:96:36:fa:95:2c:c9:97:49:
3c:46:db:65:53:2f:17:19:7b:56:c6:fd:5e:ec:53:9c:6e:c6:
6f:1d:57:4a:24:46:81:ab:09:a2:0a:43:a6:0f:ba:e6:8d:4e:
22:57:51:14:be:86:4a:b9:24:b9:6f:e5:78:f8:45:d3:da:7e:
40:80:f1:e8:64:f3:e9:8d:69:32:6a:59:af:f9:48:29:32:14:
ea:b6:13:d9:f2:2a:f4:01:90:1c:e9:56:65:f1:0f:74:f6:49:
21:f1:0e:20:84:c1:1f:b1:a2:c0:2b:61:9b:24:fa:03:fb:f8:
86:7b:65:34:86:da:36:a9:75:07:7f:12:36:8f:e2:8a:61:17:
f9:92:3a:0c:0c:dd:cf:44:73:1d:2e:ef:ae:7f:46:57:11:db:
c1:2b:0f:5f:97:c7:6f:7a:3a:96:29:09:6e:40:4d:31:25:2b:
cf:ec:41:a9:bd:35:24:9f:1b:dd:1b:71:e2:4b:e7:28:0a:34:
ac:1a:d8:97:f4:0e:f1:e9:b9:d0:c0:d6:ef:54:70:56:50:9c:
45:ac:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:13:35 2026 by rpki-client