Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/CAB1DA5C8C0E11F18822BA06CF1D38B0.roa
File: CAB1DA5C8C0E11F18822BA06CF1D38B0.roa (raw, json)
Hash identifier: BNag58NiIXf8j5rtxhonI1N3kC7yFk3cZ9zPteXXLkU=
Subject key identifier: 61:2F:62:21:99:D2:90:EA:32:54:AB:FA:DF:5E:AB:F7:CE:ED:9D:28
Certificate issuer: /CN=F3694F05AF/serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Certificate serial: 05CE
Authority key identifier: C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/CAB1DA5C8C0E11F18822BA06CF1D38B0.roa
Signing time: Thu 30 Jul 2026 12:04:19 +0000
ROA not before: Thu 30 Jul 2026 12:04:14 +0000
ROA not after: Thu 02 Sep 2027 12:04:14 +0000
asID: 328722
IP address blocks: 102.221.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694F05AF, serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Validity
Not Before: Jul 30 12:04:14 2026 GMT
Not After : Sep 2 12:04:14 2027 GMT
Subject: CN=6a6b3dc2-65db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:1b:f1:74:7f:87:6f:ea:36:9c:d2:a3:d1:
ae:f6:d1:70:fa:ac:46:52:2f:cd:b7:4c:ee:a0:18:
3c:b2:a9:29:84:1d:54:ca:ef:3a:2e:58:5f:c2:fe:
05:62:1b:dd:6f:42:ab:43:61:aa:74:f3:7b:07:15:
96:92:1b:bd:e4:86:4d:e7:79:a8:ae:54:dc:57:2e:
04:fb:29:3c:6a:d4:67:fb:a8:ff:06:b4:7f:3c:3a:
fb:a5:24:e3:09:bc:f0:bf:52:d2:c4:9c:89:c9:ed:
83:89:33:23:bd:d2:6a:5b:78:07:fe:49:d2:d0:52:
73:35:26:93:40:64:b7:55:b2:e4:49:c8:fc:60:d2:
99:5f:76:f2:5f:e1:9a:da:40:26:63:dc:0b:0f:49:
bd:07:6a:d3:cd:52:f2:42:fd:d0:25:56:5d:01:3c:
24:7c:40:cf:46:c9:f9:57:57:0f:14:aa:85:52:5e:
18:a3:40:e1:a1:33:00:fa:25:03:c2:b3:fc:a3:ec:
ff:c8:5a:da:f6:ab:99:8f:5d:20:4f:7a:8d:30:80:
de:c8:cf:dc:da:f0:7e:2b:de:f4:e6:c0:1b:e0:9f:
7e:86:36:0c:e2:42:4a:b7:8f:f9:8c:cc:a2:58:b7:
85:7f:15:18:ae:cb:21:6a:c9:88:3c:0f:12:95:e8:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:62:21:99:D2:90:EA:32:54:AB:FA:DF:5E:AB:F7:CE:ED:9D:28
X509v3 Authority Key Identifier:
keyid:C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/CAB1DA5C8C0E11F18822BA06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.236.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:f2:bf:7b:3f:18:71:18:7f:84:34:f5:2b:4c:87:b7:b1:64:
ad:0b:b8:1e:63:0b:cb:8a:2e:8d:6f:fb:05:46:d5:9d:76:44:
e0:92:10:80:88:a9:19:df:15:41:4a:fd:8c:8b:54:27:08:9e:
21:fd:91:17:0f:ce:dc:3d:c7:9e:47:0d:4a:30:82:35:d2:bf:
78:e2:23:5a:04:de:07:da:de:03:27:2f:50:33:7a:2e:06:79:
2d:90:18:f6:1d:bf:e5:b6:3b:94:69:f1:33:a3:97:64:8a:74:
72:4f:e5:3a:08:be:d6:ea:9e:62:e9:ba:f7:c3:0f:0f:94:af:
7c:94:1d:71:44:35:f6:ff:bd:f1:53:de:b2:07:78:d5:64:70:
7f:61:ac:69:90:96:a6:39:c0:fa:f4:a2:ae:48:1c:02:0d:26:
08:eb:20:06:39:05:65:15:52:83:ae:a5:46:cf:bd:5f:25:40:
70:6a:bb:0d:09:46:f2:7f:d0:88:8d:c0:9e:31:c9:c8:d0:9f:
e2:a7:7e:2a:8a:59:8f:4a:fd:d6:88:1f:bd:0e:b3:9d:62:17:
d3:72:da:bf:ed:d9:cb:b3:55:52:7e:6c:42:8c:f5:38:32:6b:
c2:a7:fb:b1:70:1c:98:a6:cf:1d:dc:24:fe:65:5d:9f:06:28:
cf:81:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:15 2026 by rpki-client