Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/F72BDD006FBF11F19FA10EAACE1D38B0.roa
File: F72BDD006FBF11F19FA10EAACE1D38B0.roa (raw, json)
Hash identifier: q1BSIJaNrDUIniPmM0lbA3tl+9CWOODxwD+sTWhy1FQ=
Subject key identifier: 7D:D1:7F:19:5E:02:AC:DD:FC:0B:59:79:C2:ED:C9:1E:01:10:1A:57
Certificate issuer: /CN=F3615AB6AF/serialNumber=2561E44966F6265B7A101D273BCC1FE3FDEFDCF1
Certificate serial: 05
Authority key identifier: 25:61:E4:49:66:F6:26:5B:7A:10:1D:27:3B:CC:1F:E3:FD:EF:DC:F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/F72BDD006FBF11F19FA10EAACE1D38B0.roa
Signing time: Wed 24 Jun 2026 11:29:30 +0000
ROA not before: Wed 24 Jun 2026 11:29:26 +0000
ROA not after: Fri 31 Dec 2049 11:29:26 +0000
asID: 329634
IP address blocks: 102.204.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft
rsync://rpki.afrinic.net/repository/afrinic/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615AB6AF, serialNumber=2561E44966F6265B7A101D273BCC1FE3FDEFDCF1
Validity
Not Before: Jun 24 11:29:26 2026 GMT
Not After : Dec 31 11:29:26 2049 GMT
Subject: CN=6a3bbf9a-296c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:b5:80:34:d9:cd:c3:9f:8c:d9:4d:cf:95:
e3:e0:5d:9c:bf:68:03:a9:de:3e:f9:df:65:3c:6e:
c6:9e:7d:25:d5:78:8d:0c:5c:75:57:68:d7:9c:d9:
20:9d:cd:aa:e2:4e:e1:b4:61:ff:0c:d2:fe:b7:e8:
e3:f3:05:6a:17:c8:82:f4:fd:bd:2d:8b:f7:05:6c:
2d:7e:09:91:ab:21:16:13:5f:69:e8:62:07:2a:f1:
3b:21:7e:55:12:50:bf:7f:a2:79:0f:85:cc:cd:f8:
b2:9b:80:25:68:8f:aa:57:bc:42:29:2d:80:cc:f9:
25:c5:a2:36:8c:ad:1f:c1:6c:8b:0f:ae:0c:ca:18:
bf:7c:1f:c8:68:36:92:97:19:9b:d2:76:e9:a1:6b:
d8:ab:a9:eb:8b:8e:2e:ec:c9:ab:33:d6:7f:12:f3:
fb:2f:20:bc:04:43:33:27:f2:c9:b8:6b:7f:9e:79:
a7:41:ec:f3:a7:31:11:db:43:33:48:37:5d:33:4c:
d4:84:07:ac:ce:9d:c6:10:6c:b0:2d:2c:3f:f2:91:
c3:9b:40:c5:59:3e:84:4e:48:24:51:ce:c8:5d:7a:
37:29:a1:f2:38:e7:cb:10:1a:12:9e:f8:64:4b:01:
09:c2:e3:b9:5f:ac:bf:3a:dd:04:87:77:82:9d:6b:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D1:7F:19:5E:02:AC:DD:FC:0B:59:79:C2:ED:C9:1E:01:10:1A:57
X509v3 Authority Key Identifier:
keyid:25:61:E4:49:66:F6:26:5B:7A:10:1D:27:3B:CC:1F:E3:FD:EF:DC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/F72BDD006FBF11F19FA10EAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:89:a8:59:d8:a6:ee:44:d8:3e:e8:51:58:bd:ba:05:64:d6:
e6:8a:03:77:e7:49:ba:5c:8a:e8:be:23:5a:20:ae:34:52:28:
f6:0b:72:9c:8a:a1:a3:c8:9f:ab:0e:ac:63:2c:aa:cf:26:32:
9a:4d:e8:a7:29:b5:6b:21:a9:69:68:80:1e:b1:a9:b6:12:70:
5e:3d:ab:c2:3f:7b:60:c6:db:ed:35:2e:83:5d:b4:2e:68:e1:
dd:9f:61:06:bd:d8:bc:fc:e7:67:d3:5d:88:37:cb:af:b3:09:
e3:01:1a:bc:1a:a9:c8:c2:6d:2c:6b:ab:15:a8:8b:45:65:a8:
70:4c:ac:88:7c:86:95:25:c9:a1:16:bd:18:30:6f:60:f1:7a:
e3:e1:bf:61:41:c8:44:49:8c:dc:59:a3:6a:46:bb:18:56:50:
15:4d:7a:42:c8:8f:f1:dd:98:d3:dc:e9:5a:8e:e6:8e:45:ef:
7c:a5:a6:ba:df:2a:56:6a:e0:82:05:ac:e4:c6:88:83:df:14:
e1:55:51:9b:06:f9:58:d0:72:c8:80:4a:4b:40:31:2b:45:e1:
13:06:6f:97:c3:d1:09:3e:49:eb:d9:a9:bf:ca:da:3e:31:0a:
b0:97:aa:89:4e:cc:cb:c8:7c:a8:19:4f:6b:e7:16:58:74:59:
4e:0d:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:45:56 2026 by rpki-client