Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa
File: 4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa (raw, json)
Hash identifier: 3D+Quaj4BMO4jtOSxnbnu0sxbAWpBZqh6HWx8W4zicM=
Subject key identifier: 23:EA:B7:05:F0:FB:21:22:B6:C2:A7:71:D2:AB:95:B6:5A:CE:92:4D
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 07FC
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 11:55:08 +0000
ROA not before: Wed 18 Mar 2026 11:55:03 +0000
ROA not after: Tue 19 Mar 2030 11:55:03 +0000
asID: 10753
IP address blocks: 102.217.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044 (0x7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Mar 18 11:55:03 2026 GMT
Not After : Mar 19 11:55:03 2030 GMT
Subject: CN=69ba929c-bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:28:dc:d2:b8:32:28:46:1b:a1:15:fa:23:
92:00:f8:2f:c7:85:00:2b:6c:f0:8d:12:34:fd:ef:
db:dc:06:5f:09:57:77:4f:6a:79:d6:2d:8e:0d:6b:
5a:9a:06:4b:a7:db:e4:d6:3f:cd:92:3a:15:82:c7:
fc:b4:de:7e:21:c4:a7:2c:94:b9:87:28:41:8e:cf:
f6:87:1b:fe:72:0c:b0:8a:a1:f2:ba:4c:6e:4f:41:
0f:a7:7a:21:df:1e:57:83:a1:4b:d1:73:c0:ad:79:
45:16:e0:89:ba:a7:e5:ea:9f:90:05:c8:af:50:4f:
49:31:e0:f3:68:90:77:bc:36:ed:d1:0c:40:fe:88:
a7:6b:14:f1:5b:5a:d7:f0:db:c9:85:b2:58:07:57:
2c:1f:34:e7:22:b1:d5:40:f8:20:ca:a2:ca:4c:c7:
82:28:0c:68:3b:d6:be:39:a9:59:a7:79:97:60:e9:
76:33:bc:2b:e9:7f:f0:b4:40:22:b8:c0:d1:1b:27:
03:97:a9:9b:22:c8:5d:bf:0c:7e:dd:b1:17:70:5e:
bb:28:f6:14:2b:14:16:40:fd:a3:1d:f0:81:fe:5c:
55:36:90:2f:08:3b:4e:94:e4:95:21:85:95:f9:20:
17:cf:ec:e8:e3:e1:aa:f8:5e:d9:56:d3:66:f4:e9:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:B7:05:F0:FB:21:22:B6:C2:A7:71:D2:AB:95:B6:5A:CE:92:4D
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:1f:49:f9:b9:21:26:36:ae:f3:9f:b6:cb:93:ff:63:c6:a9:
1b:0d:c3:28:a7:a9:a7:c5:7a:13:d3:d1:59:76:25:21:dd:f4:
33:3d:7d:ee:60:7a:76:f1:7f:fc:e6:d8:fa:6a:fc:4c:9a:c2:
88:02:5b:69:7f:f4:ca:8d:62:fd:6d:4b:7e:df:f7:72:4a:20:
89:84:e1:6e:7a:a9:9d:d3:19:43:11:06:49:6a:90:ad:a6:da:
5e:2d:8a:6e:de:e8:35:5e:a5:35:b2:b3:fd:80:54:5b:97:7d:
c5:71:21:e5:ac:d9:7e:33:7c:04:31:cd:4b:99:b8:cd:90:c1:
02:82:c6:64:cb:2c:aa:71:27:96:63:37:65:02:f2:c0:2f:3e:
da:60:43:30:86:55:5b:5d:68:4f:ad:b6:4c:10:cb:6d:07:8e:
03:5d:95:0f:ed:94:59:02:23:6b:81:9d:a7:c2:ce:1e:f2:3d:
2d:7e:0d:1a:e8:fe:76:d2:98:58:c1:94:e5:b9:07:3f:05:51:
a2:f7:eb:ed:2c:1d:74:93:c9:88:af:cd:18:05:de:6e:c4:ba:
80:88:6f:7e:10:dd:c6:14:4c:66:fa:5c:5a:7d:81:9d:e9:f9:
2c:49:e3:b6:3b:a2:53:81:3d:1f:0b:43:57:8f:a4:09:ea:b9:
2f:67:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:13 2026 by rpki-client