Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/3B16B0DE8C0E11F1BAFCA604CF1D38B0.roa
File: 3B16B0DE8C0E11F1BAFCA604CF1D38B0.roa (raw, json)
Hash identifier: YXSEfQKDvArrbs+E42IuwAopLOPXqnS5iLmIjPz29tM=
Subject key identifier: 60:0C:B5:00:EB:72:49:14:FF:A9:53:70:06:A2:36:23:64:21:D8:67
Certificate issuer: /CN=F3694F05AF/serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Certificate serial: 05CA
Authority key identifier: C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/3B16B0DE8C0E11F1BAFCA604CF1D38B0.roa
Signing time: Thu 30 Jul 2026 12:00:18 +0000
ROA not before: Thu 30 Jul 2026 12:00:14 +0000
ROA not after: Thu 02 Sep 2027 12:00:14 +0000
asID: 328722
IP address blocks: 102.221.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694F05AF, serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Validity
Not Before: Jul 30 12:00:14 2026 GMT
Not After : Sep 2 12:00:14 2027 GMT
Subject: CN=6a6b3cd2-cd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:d6:05:2c:9a:74:de:3c:a1:38:25:56:e5:
9d:74:aa:e3:0c:fc:6e:ab:b8:28:e3:38:2f:d5:98:
a4:b1:d6:cb:55:e0:c1:72:32:ac:e4:8e:17:1b:2a:
5b:b5:5a:90:3d:18:57:d3:c7:f0:f2:27:41:bf:70:
f9:bf:39:38:1f:0f:f8:a0:c5:b6:5f:d7:ea:14:ae:
cb:05:70:6a:d4:7b:42:59:d2:d6:90:81:c0:1d:67:
71:c9:d6:b8:ba:5c:cb:dc:5c:c3:6a:f1:d0:56:d3:
b7:c5:32:47:83:2c:6d:99:57:4b:44:d9:2b:3e:50:
c2:99:1a:5e:29:38:02:13:3a:da:ba:8c:f8:3f:76:
e2:8f:83:60:bb:16:05:69:77:50:d0:0a:49:1e:db:
8b:59:67:71:8a:2f:84:c8:12:84:8e:6a:53:93:62:
26:8b:b4:2c:83:16:47:3f:e6:b1:4a:82:9e:5b:da:
8a:3b:f6:92:7f:cc:2d:b1:1e:72:3c:40:6f:46:6e:
5d:92:90:cc:40:3d:e1:01:f6:6f:06:e8:a5:37:45:
f1:a0:a4:e6:2a:e8:e6:79:47:2c:82:a2:47:b2:ef:
04:8a:bf:99:12:fa:b8:b5:4a:3a:d6:0c:7e:3e:6f:
60:0c:ac:89:99:89:1a:20:02:f7:7d:d1:f2:6c:f8:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:B5:00:EB:72:49:14:FF:A9:53:70:06:A2:36:23:64:21:D8:67
X509v3 Authority Key Identifier:
keyid:C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/3B16B0DE8C0E11F1BAFCA604CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.239.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bb:bd:23:fc:a5:48:63:0e:a2:f9:05:5d:2a:93:e2:c8:d2:
08:ea:b5:00:cd:7a:8a:eb:97:6a:aa:bb:56:63:c8:4d:95:5e:
88:61:55:56:24:0a:44:19:29:6c:09:db:76:04:05:44:69:76:
b2:9f:ac:73:97:d0:ec:aa:96:73:39:ca:32:0f:da:84:15:5e:
27:d5:f0:97:46:0f:7d:83:71:d6:4c:2a:ae:3c:9c:7d:b6:40:
ad:12:55:52:a8:ff:01:80:00:07:1e:51:83:ee:f4:de:83:be:
8a:ee:89:03:8c:6f:c8:ed:25:a6:db:1f:c9:13:1d:6e:ca:48:
0a:3e:d1:36:9a:dc:b2:47:c6:47:0a:6d:a5:dd:8a:71:0c:14:
47:2e:34:b2:f3:f3:01:e1:b4:1e:f8:a6:54:ff:34:ba:0e:41:
88:36:7c:8d:7b:f0:91:a4:1c:01:17:51:f5:66:b7:0c:03:43:
45:06:86:16:76:63:46:f9:27:66:52:7c:42:f1:cf:ed:4f:94:
f8:e8:60:d2:6d:81:53:88:7c:25:6c:b6:89:a1:a5:03:a7:b8:
09:50:aa:12:21:1a:6d:74:72:5e:93:64:66:b6:99:c4:0e:e9:
c9:cf:36:b6:4e:54:8d:3a:c0:8a:a6:be:e5:d3:f0:15:1e:20:
a4:2f:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:12 2026 by rpki-client