Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/7FCB43AC8C0E11F19589CA04CF1D38B0.roa
File: 7FCB43AC8C0E11F19589CA04CF1D38B0.roa (raw, json)
Hash identifier: gYF+aTALPbF3dm85uNI32uzh5vy/zYUkbPuNsuyikLY=
Subject key identifier: 9C:6F:BF:F4:65:92:73:B1:32:C9:9A:07:5A:7B:E8:68:6A:5D:A2:FF
Certificate issuer: /CN=F3694F05AF/serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Certificate serial: 05CC
Authority key identifier: C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/7FCB43AC8C0E11F19589CA04CF1D38B0.roa
Signing time: Thu 30 Jul 2026 12:02:13 +0000
ROA not before: Thu 30 Jul 2026 12:02:09 +0000
ROA not after: Thu 02 Sep 2027 12:02:09 +0000
asID: 328722
IP address blocks: 102.221.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694F05AF, serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Validity
Not Before: Jul 30 12:02:09 2026 GMT
Not After : Sep 2 12:02:09 2027 GMT
Subject: CN=6a6b3d45-0fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:08:0f:e7:83:e4:77:e6:13:16:ed:40:44:38:
52:33:2b:ae:ed:ec:dc:65:df:29:dc:59:13:b7:27:
f4:47:9d:1a:0e:e8:62:d9:99:32:25:6f:2f:50:35:
36:bd:33:f8:da:a7:48:39:37:2b:d7:df:c7:76:2f:
4e:bf:94:fc:d7:50:48:9c:d8:06:e8:50:92:e6:53:
60:ac:0e:da:48:0e:73:cd:6a:43:da:c5:7a:a6:f1:
d7:c6:3c:03:c7:b6:ac:a2:87:ea:68:e0:44:51:b7:
73:6f:e9:de:6b:6a:64:c3:13:94:22:33:5a:eb:e7:
d1:46:d4:be:40:2e:85:a1:a5:9f:7a:ec:d6:cf:40:
3d:ba:93:5f:13:51:68:54:0d:1b:b5:eb:3e:b5:75:
12:e8:1a:9f:99:c2:ec:ba:d5:17:6c:f5:2e:f2:5c:
a7:65:8c:bc:2b:8d:3b:4d:05:ad:f3:42:c6:3b:ea:
72:73:0a:8e:28:f3:ad:15:43:74:e7:3f:21:3a:24:
64:47:c5:f5:27:51:e0:89:cc:3a:7a:a0:a2:96:30:
dd:47:41:21:7d:8f:d9:ed:85:60:64:69:b4:ca:7f:
65:13:97:92:36:ac:4d:28:cf:e5:a4:dc:a4:9c:0f:
fc:66:88:9d:ba:a1:63:6a:d1:59:88:2f:c3:8a:55:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:BF:F4:65:92:73:B1:32:C9:9A:07:5A:7B:E8:68:6A:5D:A2:FF
X509v3 Authority Key Identifier:
keyid:C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/7FCB43AC8C0E11F19589CA04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.237.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:d1:88:e9:a8:2b:5c:a8:b1:a1:5c:42:ff:50:87:01:55:
1d:61:4c:57:e9:77:1b:07:e4:0a:9a:a5:04:eb:69:4b:22:96:
fc:23:a9:0a:0b:59:e3:60:86:60:45:6a:7d:1e:e9:d0:bc:19:
2b:69:b3:b8:6a:cb:5f:62:d5:70:bc:fd:a8:42:6a:2e:d9:8a:
0b:c8:dc:55:b2:c6:1b:35:cf:26:83:f0:9d:be:0f:89:53:26:
78:ad:79:61:70:35:eb:e1:b7:2a:cc:7f:ce:86:79:03:3a:62:
20:1f:c8:17:c0:95:84:b8:3a:f7:c8:fd:03:2f:65:de:6d:c0:
4e:d6:e9:b6:d3:c0:4e:96:f5:ef:bc:9b:da:53:5a:9f:98:d6:
4f:0b:a1:73:65:e7:fc:ce:52:4e:b7:b9:9b:87:bc:42:99:e6:
52:6b:7f:e3:ba:d4:1b:c0:cf:19:e3:d4:ee:39:c2:fb:4e:fb:
3c:47:78:b6:e0:8c:45:6d:ce:60:d1:59:5d:e7:6c:2d:e6:89:
d7:17:7d:7c:63:bb:43:be:1f:50:59:b5:33:24:ab:e3:05:2a:
ec:ab:08:5b:cc:0b:71:ee:5d:0b:5a:eb:5c:e6:f4:1b:54:8f:
4a:4b:29:93:dd:f1:45:2b:21:f2:19:4f:a5:2c:d5:a2:45:b1:
51:0b:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:09 2026 by rpki-client