Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/4C7DA85E402911F1AC2314E9CE1D38B0.roa
File: 4C7DA85E402911F1AC2314E9CE1D38B0.roa (raw, json)
Hash identifier: SKuYSEUTgADKXB1Cl4lh91s+CFbc+6/oE1Zl62kvoCc=
Subject key identifier: 0F:91:72:02:CD:F3:24:DC:BE:A8:F0:41:04:E0:A5:1E:E0:D5:A4:F9
Certificate issuer: /CN=F3689367AF/serialNumber=15D95F6E29EDB7D722343D8F1B1B89191CD7FEB6
Certificate serial: 02
Authority key identifier: 15:D9:5F:6E:29:ED:B7:D7:22:34:3D:8F:1B:1B:89:19:1C:D7:FE:B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Fdlfbintt9ciND2PGxuJGRzX_rY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/4C7DA85E402911F1AC2314E9CE1D38B0.roa
Signing time: Fri 24 Apr 2026 22:02:35 +0000
ROA not before: Sat 25 Apr 2026 22:02:30 +0000
ROA not after: Tue 30 Apr 2030 22:02:30 +0000
asID: 329673
IP address blocks: 102.203.215.0/24 maxlen: 24
2c0f:42a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.mft
rsync://rpki.afrinic.net/repository/afrinic/Fdlfbintt9ciND2PGxuJGRzX_rY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3689367AF, serialNumber=15D95F6E29EDB7D722343D8F1B1B89191CD7FEB6
Validity
Not Before: Apr 25 22:02:30 2026 GMT
Not After : Apr 30 22:02:30 2030 GMT
Subject: CN=69ebe87b-cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:2a:7a:91:24:e9:e0:1d:d9:ba:a1:31:9c:
4d:c0:89:c1:29:6e:f4:fe:8b:47:93:46:9b:1e:4d:
82:0c:ab:5a:fb:18:9c:ba:f0:83:d8:e9:11:9f:0e:
65:4f:f4:8c:53:60:1a:db:73:ba:38:d7:6a:23:e5:
b4:fd:f7:05:18:35:2c:ed:48:81:14:da:6d:18:ba:
94:78:78:be:e7:4b:f8:9d:55:ee:f2:94:a0:ee:3e:
d5:0f:e7:5c:74:22:5d:c9:3c:e6:1c:f7:6a:72:5a:
97:67:fd:4d:2a:59:af:03:42:22:05:55:26:85:a8:
4b:6e:bd:5f:60:97:7c:ca:bf:0b:d6:dd:98:6c:62:
1d:5c:f9:a8:b3:8b:bd:d1:a9:d6:17:10:ad:8f:7e:
64:a5:0e:02:9c:f3:c0:fc:7a:a8:77:8f:0e:dc:49:
69:2e:14:ca:36:5b:86:53:bf:21:ea:cd:92:69:c2:
77:d2:ac:22:86:58:de:03:90:5c:1a:23:30:1a:a6:
5e:e6:30:58:ed:7e:4d:6f:dc:ff:f6:29:aa:42:e0:
58:6e:c5:d0:84:08:42:ed:79:b5:28:3b:c1:a5:93:
f6:18:89:3d:87:c4:f9:2a:37:9c:28:af:9d:9e:1b:
eb:08:1e:4d:68:7c:a1:bf:97:4e:ad:84:01:5e:14:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:72:02:CD:F3:24:DC:BE:A8:F0:41:04:E0:A5:1E:E0:D5:A4:F9
X509v3 Authority Key Identifier:
keyid:15:D9:5F:6E:29:ED:B7:D7:22:34:3D:8F:1B:1B:89:19:1C:D7:FE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Fdlfbintt9ciND2PGxuJGRzX_rY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/4C7DA85E402911F1AC2314E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.215.0/24
IPv6:
2c0f:42a0::/32
Signature Algorithm: sha256WithRSAEncryption
75:80:9f:fa:e5:1b:76:f1:d5:52:46:63:1a:55:fb:56:5e:67:
ac:4d:04:01:24:08:c7:c1:f3:c0:7e:ba:55:26:7f:fe:66:ba:
4b:ad:c7:2e:c3:69:96:ed:f8:fa:ea:66:c1:1d:38:f1:45:3d:
b4:d9:24:0a:23:8b:0e:76:85:de:7b:fd:d1:2a:bf:ea:f0:20:
6c:d6:52:85:17:a4:5c:b4:64:f5:21:4d:e4:31:63:f6:4e:87:
0d:0a:ef:9f:d8:55:2f:f9:da:02:65:c6:bb:d0:2f:2a:56:1a:
20:6f:6a:79:8c:e1:a9:ce:13:5c:7d:e8:6b:0f:ea:e9:69:8a:
aa:8b:0c:87:5d:0d:3a:e7:17:db:eb:14:3c:0a:7e:d5:57:e6:
4b:be:1b:85:bf:f1:5f:4d:5f:e5:63:70:42:2c:16:67:f7:a0:
d9:92:f7:52:66:de:13:44:b7:e0:da:af:e2:a5:e7:aa:88:fd:
eb:c4:10:30:46:14:2b:fa:2a:2f:b2:08:4a:4f:83:2f:4c:2b:
23:05:68:e2:4f:b2:9a:1c:8c:31:be:db:19:8c:aa:28:7f:bf:
a7:97:ba:f2:f8:95:06:dd:f0:b3:5d:7b:22:c4:73:a3:7f:c4:
1c:ec:e3:ea:a9:48:a2:3f:4a:8b:1e:5f:5a:cc:b0:4f:4e:34:
3f:6b:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:11:48 2026 by rpki-client