Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/FB93B02C1C7A11F1A786ADD1DAE4EC9C.roa
File: FB93B02C1C7A11F1A786ADD1DAE4EC9C.roa (raw, json)
Hash identifier: LA45DoibnKdqOAfxGDze0xKiP4O8foKmN7w18EWFxyY=
Subject key identifier: 3C:11:F6:BE:35:95:B3:B9:8B:19:05:69:58:08:EF:75:68:ED:6D:4A
Certificate issuer: /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial: 05A5
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/FB93B02C1C7A11F1A786ADD1DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 12:16:36 +0000
ROA not before: Wed 11 Mar 2026 12:16:32 +0000
ROA not after: Wed 08 Mar 2028 12:16:32 +0000
asID: 328737
IP address blocks: 102.222.8.0/22 maxlen: 24
2c0f:e9d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363D435AF, serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Validity
Not Before: Mar 11 12:16:32 2026 GMT
Not After : Mar 8 12:16:32 2028 GMT
Subject: CN=69b00ba4-dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:e2:c9:23:57:1f:f8:35:5e:80:ad:c9:cb:
1a:36:c3:27:c5:0d:24:f5:64:f8:b7:a0:f9:97:20:
93:bc:56:f5:56:5d:dc:48:b3:d4:e8:7c:a8:73:16:
47:60:38:a5:13:6a:8e:52:09:3c:60:8a:e0:0e:4d:
06:8f:29:5c:4f:91:65:ab:ae:1c:5a:d2:23:43:f8:
1d:e3:55:0f:e7:13:7c:db:2f:40:1b:52:2c:a0:6a:
6d:68:ab:25:ba:cb:07:60:3a:5e:b6:3d:56:59:e1:
54:00:e7:eb:f9:78:de:36:1b:48:80:59:4f:63:09:
b7:af:3b:0c:4d:93:3b:f0:fb:8f:c0:99:0a:ff:21:
6a:a2:71:6f:30:5c:9d:b4:c9:17:84:0c:b0:96:3b:
cd:b4:86:0f:1b:b8:9d:2d:89:e0:3c:1a:86:6e:c6:
7c:2c:9c:e2:86:3a:e4:6e:a7:e0:bf:49:fc:b1:25:
fd:e7:df:87:82:13:90:6c:28:55:de:50:1a:21:10:
2d:bd:4e:dc:ff:e5:72:4c:7b:60:0b:bc:7b:64:db:
15:22:4f:23:06:74:27:b4:0e:df:08:8d:dd:70:78:
94:fd:5d:04:a3:2b:a0:72:7a:b0:92:8d:2d:6d:74:
64:db:88:a7:83:bf:e7:c0:e3:1d:4a:32:21:60:72:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:F6:BE:35:95:B3:B9:8B:19:05:69:58:08:EF:75:68:ED:6D:4A
X509v3 Authority Key Identifier:
keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/FB93B02C1C7A11F1A786ADD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.8.0/22
IPv6:
2c0f:e9d8::/32
Signature Algorithm: sha256WithRSAEncryption
14:ea:8a:6b:4c:04:fd:44:79:93:32:89:15:1d:4b:f3:d2:20:
4b:96:02:0c:3e:0c:07:c3:75:df:9a:4c:8f:64:df:38:b3:be:
0d:b5:4d:c8:94:e3:d8:22:1c:f2:da:f3:22:f5:60:4d:3b:90:
06:ec:a3:96:ff:38:c7:56:74:e8:76:f8:91:44:67:b8:19:ab:
32:d4:f9:20:2f:cc:83:36:97:9a:d1:21:71:db:70:0e:63:a2:
e6:7e:79:50:4c:41:bb:2d:8f:55:e0:0c:12:41:09:f0:12:28:
bb:7d:dc:98:9a:63:a7:5f:89:43:33:e7:fc:b7:80:86:4b:09:
d6:75:e0:46:69:f3:c7:ae:54:6a:67:45:5d:78:12:2c:2c:3b:
3d:66:68:05:20:37:f6:7c:5c:bf:80:c9:60:7a:77:1e:20:c4:
15:23:e9:fe:c9:1d:54:d6:fa:5c:76:07:0a:3e:5c:d3:5d:51:
94:1c:82:cb:aa:5b:16:5b:fa:24:c0:35:b0:e9:38:e0:4a:15:
f9:59:db:a8:4e:43:07:22:98:59:2f:b9:6b:5b:e4:5b:30:cb:
4f:6d:1a:93:6c:db:16:c3:10:28:94:33:b8:f1:9e:b2:a4:51:
a4:29:f6:69:21:7b:3d:5e:13:e5:1f:1d:b2:d4:9f:17:47:f6:
58:d3:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:34 2026 by rpki-client