Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/3196566E8B6311F19E3E65EBCE1D38B0.roa
File: 3196566E8B6311F19E3E65EBCE1D38B0.roa (raw, json)
Hash identifier: v7y9eUAibJifVNLUl1+W1iLBl8UIok0yyshaY1ZA/e0=
Subject key identifier: F5:4B:EC:86:CA:C6:61:66:3C:81:2B:DA:7E:97:A6:DC:DA:90:BD:D5
Certificate issuer: /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial: 0565
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/3196566E8B6311F19E3E65EBCE1D38B0.roa
Signing time: Wed 29 Jul 2026 15:35:58 +0000
ROA not before: Wed 29 Jul 2026 15:35:54 +0000
ROA not after: Tue 31 Dec 2030 15:35:54 +0000
asID: 329174
IP address blocks: 102.206.204.0/22 maxlen: 22
102.213.241.0/24 maxlen: 24
2c0f:2d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Validity
Not Before: Jul 29 15:35:54 2026 GMT
Not After : Dec 31 15:35:54 2030 GMT
Subject: CN=6a6a1dde-54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:b5:26:15:2d:10:79:4c:91:7d:21:22:b0:
c4:3b:e3:d9:59:df:a2:e6:eb:49:29:5b:18:2f:81:
32:9f:08:f1:b1:86:c4:7b:09:93:6b:32:0e:d1:2e:
7e:56:f9:05:c0:4f:58:00:c1:77:af:14:fd:ea:7c:
82:86:59:12:12:d6:72:2e:0d:0e:6d:13:40:c2:2d:
fe:3a:22:8c:0f:a0:0d:e3:e5:bd:3a:cd:a9:dd:91:
8a:92:5b:a2:66:95:32:2a:f4:ba:90:d6:c3:15:e1:
8f:14:00:ee:ca:dd:8d:60:3c:5f:50:85:31:a4:74:
9c:00:8a:56:ae:2d:d9:fd:75:d9:53:f6:27:68:86:
ae:55:69:44:87:c0:fa:2f:b8:14:ea:15:b7:6e:17:
05:d2:92:e3:b1:13:e8:fd:c2:c9:54:15:e9:3d:d8:
b6:ba:df:0e:f3:cd:35:67:3c:a8:29:6d:9d:b3:42:
b0:95:15:11:1a:46:18:83:51:f4:01:46:8c:38:a5:
b9:1e:f5:fc:04:9c:63:45:c4:0a:57:f9:ea:73:2f:
97:51:4d:92:8a:7a:cd:20:8e:fe:d5:04:fa:e3:c8:
dd:44:09:5a:e1:ab:45:09:33:8f:d8:e3:d7:13:d4:
c7:40:db:c2:dd:2e:2c:32:09:79:6c:63:5b:1c:ea:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:EC:86:CA:C6:61:66:3C:81:2B:DA:7E:97:A6:DC:DA:90:BD:D5
X509v3 Authority Key Identifier:
keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/3196566E8B6311F19E3E65EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.204.0/22
102.213.241.0/24
IPv6:
2c0f:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
6f:13:bc:bc:53:91:58:81:47:ff:c9:87:64:59:2d:16:b2:a6:
eb:64:59:0d:8d:9d:ad:41:b7:dc:a3:34:47:d8:12:b5:28:38:
e5:a3:8c:e5:15:9f:81:7a:78:db:3c:b2:2f:bf:46:7d:9d:81:
e5:6e:2c:9f:43:dc:b4:db:71:73:0a:07:ef:fa:c1:fb:1a:96:
0e:ce:dc:cf:9c:db:71:cb:7c:a1:15:e6:d6:dd:83:50:2d:e7:
46:72:c0:f8:40:20:cf:32:ce:97:db:2c:ff:4e:a7:e5:c8:ab:
be:74:da:3e:fb:21:72:7b:3d:9b:b4:b4:6a:cd:f4:5c:0d:af:
b9:be:5e:28:00:49:9c:82:9d:18:46:b1:95:5c:10:82:79:0a:
18:8e:ed:b2:a0:8a:01:15:2c:ca:0f:7e:2c:88:78:01:cf:d0:
74:0b:b1:57:e3:85:9f:84:53:4d:5b:bc:45:ea:5c:cd:71:2e:
bd:1a:76:c0:ad:63:03:10:6c:60:cd:3c:bc:67:21:1e:c7:38:
dc:7e:14:8b:f9:76:e3:1d:72:66:cf:13:89:ba:ed:8f:93:b9:
8a:21:54:3d:34:23:65:db:5a:b1:2d:7d:9d:1e:d5:4e:38:18:
1a:15:c6:95:f9:f4:56:b4:1a:e2:08:cb:bd:96:2c:b0:13:98:
c0:21:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:40 2026 by rpki-client