Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/21FFF270243711F19BF46CF5DAE4EC9C.roa
File: 21FFF270243711F19BF46CF5DAE4EC9C.roa (raw, json)
Hash identifier: y+yR/BjY5lbVDSiSHrjGsQSh+U1LLc7b06ohNZElnJ0=
Subject key identifier: 5C:45:A3:33:D9:12:3F:93:11:DE:DE:04:64:AC:02:67:FA:CD:86:04
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0802
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/21FFF270243711F19BF46CF5DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 08:31:04 +0000
ROA not before: Fri 20 Mar 2026 08:30:59 +0000
ROA not after: Fri 15 Mar 2030 08:30:59 +0000
asID: 6079
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Mar 20 08:30:59 2026 GMT
Not After : Mar 15 08:30:59 2030 GMT
Subject: CN=69bd05c8-06ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:03:fd:26:cd:cf:60:b7:ba:e3:c1:10:cd:
b2:95:7e:a8:6c:cf:c7:27:13:2f:87:79:69:ab:64:
69:eb:21:f6:94:87:0f:ac:44:26:db:5c:42:09:cb:
e9:27:97:56:76:5a:c2:f9:58:bd:01:86:a8:ee:63:
62:dc:d4:85:70:87:42:1b:ea:dc:b8:8a:f0:15:8d:
43:4d:04:6b:de:ab:97:86:8d:fe:f0:4c:c2:56:fa:
70:8a:8a:8a:28:2e:30:c5:0c:0d:14:f2:9c:9a:48:
3e:e9:86:80:41:9a:2a:fc:b0:4f:a8:01:07:77:3c:
39:d1:a6:45:1f:43:47:f3:5d:40:08:cd:6e:46:93:
cf:67:55:25:a0:3d:b0:17:94:1b:63:f3:e6:6c:45:
c0:b8:9f:4c:de:88:65:89:76:cb:f6:b2:a2:e9:d9:
c2:9f:16:c7:c1:90:4b:ae:e5:06:f7:08:f8:12:b2:
73:5b:54:3f:4a:41:f7:12:be:4f:0f:e2:11:08:09:
80:65:b9:c7:ae:a5:15:b2:c5:6f:2a:06:d5:71:5d:
fe:0a:b0:8c:c6:48:82:2f:30:18:72:8d:c2:ac:5f:
f0:ad:71:eb:ab:d5:c1:a4:b2:35:cc:e4:89:fe:22:
8a:67:fe:7f:ff:04:3c:4b:2f:fd:15:83:80:8e:93:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:A3:33:D9:12:3F:93:11:DE:DE:04:64:AC:02:67:FA:CD:86:04
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/21FFF270243711F19BF46CF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d5:6e:53:f5:35:23:97:13:02:a6:15:8b:7a:31:9a:f3:4a:
5a:8d:70:dc:85:c3:0b:ca:36:42:0b:4e:cc:10:48:e9:b5:56:
46:b6:df:08:01:44:d7:b9:6c:4b:b2:94:0b:b1:d9:7d:fd:0b:
75:40:c9:b3:ab:7e:25:60:3f:fe:b6:49:1b:3a:d1:df:7c:34:
57:6a:7f:56:44:1f:82:fd:2d:17:08:81:c8:13:e4:58:ce:1d:
a0:28:1e:d3:22:b4:af:ec:01:a8:1d:38:e3:ea:72:f9:72:b5:
2b:89:2a:2c:97:ab:7d:ca:fa:2d:8e:0b:73:7c:4c:f6:3a:fe:
b1:0b:fe:e7:9a:da:e8:bc:ea:71:c1:d3:e2:ec:40:ad:7e:46:
ba:41:f4:e4:bd:c0:d0:6e:f5:01:30:2e:9f:e0:28:50:67:aa:
e2:a0:3c:65:80:79:f5:06:8d:81:98:36:91:85:19:78:04:f9:
21:94:58:9e:c4:c9:d1:93:79:87:4d:b2:53:32:54:40:46:28:
b7:00:79:55:7f:ae:4e:b5:b0:c6:93:a7:7a:90:6d:06:91:5a:
66:ac:68:13:09:7a:b2:ff:80:20:9b:b0:6a:d7:70:ac:68:cb:
eb:23:03:65:86:ff:80:52:fa:2b:19:96:34:a3:42:b9:f4:f5:
dc:e6:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:01 2026 by rpki-client