Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/290659E6874811F19AABACDDCE1D38B0.roa
File: 290659E6874811F19AABACDDCE1D38B0.roa (raw, json)
Hash identifier: 9fBt8y0Xy6UZyIDddji6/rEcq1klSN+nmu/tW7BYzKk=
Subject key identifier: 12:7F:19:D8:11:B8:10:E5:99:D8:88:D3:DE:4C:3A:30:0F:36:45:3F
Certificate issuer: /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial: 0679
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/290659E6874811F19AABACDDCE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:12:22 +0000
ROA not before: Fri 24 Jul 2026 10:12:18 +0000
ROA not after: Thu 24 Jul 2036 10:12:18 +0000
asID: 328598
IP address blocks: 102.22.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Validity
Not Before: Jul 24 10:12:18 2026 GMT
Not After : Jul 24 10:12:18 2036 GMT
Subject: CN=6a633a86-8267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:00:9d:32:0a:10:62:bd:8a:96:4e:c3:c4:
e4:05:33:b4:c9:6f:61:8e:a6:23:45:20:61:c5:59:
3d:87:e0:f0:37:1c:6c:7e:02:e3:fb:0a:12:f7:ad:
9a:c1:dd:31:8e:05:1a:30:d5:ce:ab:e4:8c:af:41:
0f:13:07:88:6f:82:3a:1c:f4:9b:1e:f9:7a:f7:df:
d3:ca:02:52:ce:e0:9c:92:67:12:49:8b:98:ab:62:
c2:21:8b:7d:a2:33:c8:9a:a1:9f:ba:43:92:09:a0:
54:ef:00:ed:63:f8:bd:60:7c:a8:4c:34:64:da:e7:
c8:a2:f2:49:04:cb:d0:1f:71:85:89:f9:a4:cd:b4:
5f:4b:c6:1b:93:a9:42:ec:66:ea:48:ae:74:3a:8c:
3a:d4:2d:26:36:c6:41:ed:3f:52:74:b1:f5:a4:34:
01:b1:2d:c2:17:ee:3f:fa:a5:ad:8f:93:25:02:94:
f0:c8:dc:6d:71:bf:91:8c:89:02:f5:f6:64:25:c4:
e9:b1:fd:b8:bc:af:5b:1c:62:b2:04:04:bc:41:db:
43:5d:bd:6e:c2:69:14:0c:f7:fb:3f:61:b6:7c:dc:
47:f5:79:73:8f:2a:ff:9e:15:0e:63:a4:e6:b6:36:
26:4b:40:79:64:a6:12:12:70:b2:ab:5f:22:1f:36:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:19:D8:11:B8:10:E5:99:D8:88:D3:DE:4C:3A:30:0F:36:45:3F
X509v3 Authority Key Identifier:
keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/290659E6874811F19AABACDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.88.0/21
Signature Algorithm: sha256WithRSAEncryption
91:ca:3c:a9:4f:a5:b7:19:44:61:d5:c6:6d:0b:54:e1:1a:57:
15:0a:5e:06:6b:df:84:97:c2:64:3b:77:60:a7:12:94:30:0c:
4c:d7:9e:f5:7d:a9:9e:bc:8f:ad:07:7d:83:fe:cd:03:7b:26:
70:ee:f0:31:bb:aa:e5:7c:1d:07:96:49:37:fb:91:27:38:73:
f9:00:6b:cc:47:c9:f8:ef:ff:e8:a5:22:3b:7c:22:7f:a0:60:
dd:9b:0f:13:0b:37:73:f2:2f:78:e0:39:d3:e5:53:11:c8:6d:
be:d3:29:ce:db:0b:32:b3:28:87:7f:de:d4:35:d1:cf:13:b1:
52:72:64:c0:68:57:fb:67:08:d7:db:f7:fc:3d:75:0c:ad:e0:
19:af:9a:63:b9:52:aa:9c:9b:af:fa:1e:b0:f9:5f:39:7f:0b:
7a:04:e0:fe:50:26:05:f8:40:c3:2e:3d:1f:14:66:fc:58:3b:
ff:a6:df:91:bf:ab:ad:92:dc:60:3a:24:d8:6e:3a:bf:42:33:
05:57:17:c9:0b:a0:1e:d2:78:f6:e3:cc:c5:6f:ce:fc:fd:93:
2a:c3:cd:c4:a7:63:7d:1f:c6:3f:ad:5c:6e:6f:0e:97:07:5b:
31:dd:53:ef:91:59:a7:2b:1a:a3:ce:5f:3b:42:c9:58:03:ee:
11:43:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:48 2026 by rpki-client