Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/2AC4EAD085AA11F1A3694EFECE1D38B0.roa
File: 2AC4EAD085AA11F1A3694EFECE1D38B0.roa (raw, json)
Hash identifier: YLwkM31+3y0x8Uv07rBDPgTi/f+SHjxGNJJdr/5FxeI=
Subject key identifier: 2C:DA:32:FA:B6:8D:B8:BA:CE:F7:C5:A2:93:DA:19:A1:BD:3A:2D:09
Certificate issuer: /CN=F3656CC2AF/serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Certificate serial: 0794
Authority key identifier: F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/2AC4EAD085AA11F1A3694EFECE1D38B0.roa
Signing time: Wed 22 Jul 2026 08:48:54 +0000
ROA not before: Wed 22 Jul 2026 08:48:49 +0000
ROA not after: Sat 22 Jul 2028 08:48:49 +0000
asID: 37302
IP address blocks: 41.78.232.0/22 maxlen: 22
102.130.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656CC2AF, serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Validity
Not Before: Jul 22 08:48:49 2026 GMT
Not After : Jul 22 08:48:49 2028 GMT
Subject: CN=6a6083f6-0e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:a6:1e:9c:f9:51:62:7d:3c:3c:22:f0:18:
0e:94:47:9d:02:11:36:17:6e:b7:17:f2:77:0d:b6:
0c:a4:11:6b:62:0d:b2:0a:02:9c:59:98:d0:77:67:
ef:40:13:f3:3d:39:0e:30:1c:3c:e9:22:30:b1:7a:
1a:9f:6a:95:9b:4b:da:44:b8:d1:da:e7:9a:4a:b3:
d8:4f:6f:ce:8f:21:72:7e:86:65:73:79:be:f1:89:
93:31:ae:5a:8d:cd:66:c6:86:70:61:9d:fc:69:be:
c1:6a:f5:96:4b:d8:81:3e:38:4c:00:ee:2b:e3:3b:
32:38:78:6f:6f:f0:6a:0a:a2:b1:45:7b:0a:a5:05:
5c:f9:32:51:05:cc:78:a1:2c:3e:7c:9f:9f:10:55:
27:33:53:96:b9:57:cd:7e:ad:06:6a:bc:2b:5d:f2:
de:55:07:fb:75:e7:a0:e9:6f:eb:5a:a1:05:a5:d7:
9f:66:ec:07:91:f5:b5:dd:0b:9d:63:5e:d6:34:71:
14:a1:e9:0b:7a:a1:63:04:99:25:83:f6:27:cd:29:
20:52:b7:db:89:d3:ae:e9:18:e2:2a:cd:11:45:21:
07:1e:36:4a:e6:12:9c:49:ba:59:af:c5:3a:71:f8:
85:42:f6:5c:31:29:c2:39:cd:43:94:25:89:aa:fc:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:32:FA:B6:8D:B8:BA:CE:F7:C5:A2:93:DA:19:A1:BD:3A:2D:09
X509v3 Authority Key Identifier:
keyid:F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/2AC4EAD085AA11F1A3694EFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.232.0/22
102.130.40.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:4f:d0:cf:c2:89:84:6e:31:e8:10:54:4b:62:5e:2e:13:64:
49:b7:19:ac:0f:c0:19:b1:4e:21:fd:f1:68:c3:83:b6:31:a3:
39:ac:a6:5f:60:4b:b4:09:45:66:a5:a6:3d:2c:c4:31:35:2a:
33:37:66:df:1a:5e:8f:06:1e:14:32:cf:c6:77:11:1d:6d:1f:
67:39:b5:d5:fb:8a:86:d4:d0:8c:a0:37:81:cd:65:43:83:3f:
a2:1c:43:2f:56:31:db:ee:89:75:d1:a9:89:5e:1b:56:ad:48:
27:9e:c9:e8:20:74:4c:72:a8:e3:13:a1:c5:db:b5:ca:2c:27:
db:1f:89:17:55:be:a7:d1:67:83:0f:54:a0:52:15:56:ba:52:
c3:1b:4d:d7:0d:ba:f9:cc:a1:cd:06:ce:50:c4:76:78:12:64:
ff:88:cb:5d:30:eb:02:ac:94:f7:66:a5:c4:19:66:79:36:d3:
a4:2c:11:dc:45:00:ff:9f:99:3f:d0:d3:ea:35:88:6b:a8:3d:
fb:19:91:05:42:d6:39:c9:57:e5:83:bc:65:66:84:f5:cd:b4:
ab:9f:55:60:0a:e4:3e:0f:94:27:d0:a1:18:f0:a8:41:51:89:
c0:e2:fe:8b:ef:88:cf:a4:fd:6c:5e:49:90:88:b0:82:f6:53:
5e:4e:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:51 2026 by rpki-client