Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/4A5DBA668CB711F189BFE714CF1D38B0.roa
File: 4A5DBA668CB711F189BFE714CF1D38B0.roa (raw, json)
Hash identifier: fsgrd200Fbpxxe0VEF0l5IGTl8akiYumueczfz12gNg=
Subject key identifier: 06:77:09:FE:BC:3D:F3:E4:02:59:09:4D:7E:9A:FA:FF:BB:97:EC:2D
Certificate issuer: /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial: 04DF
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/4A5DBA668CB711F189BFE714CF1D38B0.roa
Signing time: Fri 31 Jul 2026 08:10:28 +0000
ROA not before: Fri 31 Jul 2026 08:10:24 +0000
ROA not after: Thu 31 Jul 2036 08:10:24 +0000
asID: 328975
IP address blocks: 102.218.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Validity
Not Before: Jul 31 08:10:24 2026 GMT
Not After : Jul 31 08:10:24 2036 GMT
Subject: CN=6a6c5874-d18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8b:c2:d4:bc:5c:75:4b:fb:5e:e6:9e:a8:a5:
90:9a:3b:db:a6:f9:d2:2d:a8:4c:18:a7:94:39:65:
1e:ce:bd:8d:95:92:ed:0f:c6:57:51:ec:d1:01:cf:
7f:56:fb:dc:d8:99:ef:a7:ca:4f:c9:34:5c:22:fa:
d5:49:2d:17:9d:2c:c4:fe:7b:7e:1c:7d:3f:bd:75:
38:8d:7e:70:5d:aa:3f:63:82:48:5b:bf:fe:bd:63:
30:47:6f:63:cb:3d:7b:3d:51:d6:01:f1:49:8a:a7:
47:78:e1:b8:8a:ef:5a:3d:f2:48:31:f5:56:f5:ac:
25:2e:27:c7:b6:1f:72:23:eb:b5:e7:ed:50:db:7c:
bb:04:da:af:04:45:07:c5:df:fb:1e:71:7a:80:65:
c9:d0:04:44:18:dc:b7:76:a0:7d:f4:db:e1:7b:f2:
f6:80:80:1e:71:4c:73:fd:89:4f:1b:75:8a:17:a2:
4f:6e:6e:b2:dd:ad:ed:1b:0d:da:8b:a5:67:7c:0c:
31:36:d8:46:89:3f:ae:44:bd:af:20:32:53:9f:64:
57:cf:f1:03:64:75:5e:a2:58:0c:04:4d:a3:4c:d7:
d3:e0:f5:77:c1:f9:a0:c1:12:44:80:3f:8e:e8:85:
13:76:22:36:f5:54:bd:1e:b1:9f:3a:6c:a1:df:a5:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:77:09:FE:BC:3D:F3:E4:02:59:09:4D:7E:9A:FA:FF:BB:97:EC:2D
X509v3 Authority Key Identifier:
keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/4A5DBA668CB711F189BFE714CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
17:43:3d:47:2f:8f:88:3b:90:c9:57:bc:8f:e4:2b:7f:a9:bd:
e0:6d:c7:1b:02:4c:ac:e4:5f:dd:14:8c:7b:c5:bd:ab:e3:48:
70:ff:ef:82:88:aa:3f:35:64:eb:ec:5b:9b:1d:1f:ca:76:52:
2f:e1:dc:17:6d:41:bc:65:dd:eb:ef:14:52:5c:e0:b7:6a:16:
13:a0:77:76:95:fa:f4:22:d3:d2:35:c6:f3:e5:28:71:7f:50:
50:f8:53:9b:d9:f6:63:a2:b3:bc:38:da:ba:58:d3:43:39:f1:
04:12:63:e3:8b:03:37:f9:b8:ba:5d:34:40:2d:ff:cb:ce:bd:
f9:67:06:de:c5:e2:da:8e:89:44:03:80:24:fc:e2:cb:6d:5f:
cb:47:b7:d3:b4:de:63:a1:da:9d:b4:df:ee:98:4f:09:00:c5:
a0:ab:30:22:d5:04:d8:44:b1:e7:6a:1d:d7:37:e3:bd:b7:06:
18:9a:98:da:d0:33:82:c7:ea:95:15:d4:9a:52:7d:2e:c4:86:
90:20:b4:65:d2:e5:ac:02:a1:56:e4:3d:f7:6c:14:c9:f6:a2:
98:f8:3b:8f:aa:d8:40:57:56:5b:02:31:b6:92:9f:82:bd:89:
38:6e:a6:36:03:35:a9:82:17:06:71:b7:fe:c4:d4:3e:99:83:
86:cb:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:02 2026 by rpki-client