Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/21D46A1A76F811F1937C3B0DCF1D38B0.roa
File: 21D46A1A76F811F1937C3B0DCF1D38B0.roa (raw, json)
Hash identifier: MKCYxKjd2uNuwqyT9k0lVtIuI9mAGX3CL0R0CGuQ8yA=
Subject key identifier: 2A:BC:B2:FC:66:59:15:79:A1:3E:07:7D:5B:88:F8:51:34:60:B9:EE
Certificate issuer: /CN=F365BBDAAF/serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
Certificate serial: 0B
Authority key identifier: 2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/21D46A1A76F811F1937C3B0DCF1D38B0.roa
Signing time: Fri 03 Jul 2026 15:59:12 +0000
ROA not before: Fri 03 Jul 2026 15:59:07 +0000
ROA not after: Thu 31 Dec 2026 15:59:07 +0000
asID: 329470
IP address blocks: 102.208.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BBDAAF, serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
Validity
Not Before: Jul 3 15:59:07 2026 GMT
Not After : Dec 31 15:59:07 2026 GMT
Subject: CN=6a47dc50-cf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:93:11:94:f4:e3:2e:c6:ca:a9:fb:b3:0c:
00:24:29:b9:b3:ff:e6:98:1e:a6:8d:60:4c:dc:ba:
e7:ec:76:40:c5:06:8f:e1:5a:dd:35:a5:86:bf:88:
b8:29:fd:88:f3:3c:68:a0:c8:81:b7:df:d0:68:08:
e0:63:7d:24:1e:86:fe:07:b9:fd:2b:4a:94:45:44:
69:10:d7:3d:55:ba:18:e6:cf:bc:0b:59:a7:d5:a4:
5d:19:80:b4:7d:36:09:13:f8:10:65:fc:a4:07:1d:
59:0d:d7:49:ab:5a:2b:3f:2b:64:1e:a2:4b:cb:08:
81:3e:ca:6e:e8:92:30:6a:37:7a:3d:1f:5a:9a:40:
44:3d:73:d3:4a:23:a2:f3:8f:41:c4:b4:20:26:bd:
18:f8:fa:08:0f:a3:c3:01:9f:e6:6b:9b:b3:c3:89:
07:16:ba:13:a8:f4:a0:f6:50:15:1b:3c:2d:1a:78:
f3:5a:81:0e:22:63:7f:b9:02:e0:60:fe:3d:6e:ce:
fa:8f:a0:a7:9e:fb:97:86:fd:a7:c5:1a:63:2a:be:
06:d4:2b:62:f6:d6:f7:3a:8f:8e:c5:ac:40:a6:78:
88:b3:c7:2e:b1:29:c0:70:bf:16:54:b8:1c:28:ee:
3f:1e:ff:00:6f:fc:1c:fb:d6:e1:8c:cc:a7:58:16:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:B2:FC:66:59:15:79:A1:3E:07:7D:5B:88:F8:51:34:60:B9:EE
X509v3 Authority Key Identifier:
keyid:2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/21D46A1A76F811F1937C3B0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.54.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:cd:34:9c:54:ed:53:90:0b:2a:12:26:a9:ba:67:a2:ba:88:
20:58:50:53:5f:f5:a6:ef:f2:a7:b5:de:96:1f:92:8c:3d:54:
98:ae:9f:7a:28:fc:95:56:36:00:bb:2a:2e:40:ce:3d:b7:77:
ea:6d:1f:08:ed:6e:98:ce:a9:34:7c:5a:55:94:52:10:13:66:
34:d6:fc:52:04:f6:e9:4f:4d:48:e0:6c:76:a7:62:26:77:07:
8f:06:9e:0b:37:24:c0:04:e9:b3:5a:28:53:02:73:3f:87:9b:
37:55:ad:bd:cf:ac:6f:7c:9b:e3:ee:14:0e:ea:06:55:2e:3a:
e1:c2:a3:0f:19:83:1e:ff:3c:f5:cd:38:a8:35:64:b3:b2:d6:
26:23:ba:8b:dd:f4:d5:f0:b4:b3:7c:c0:e5:3b:27:2f:95:1f:
ec:ec:4a:af:a7:3c:21:60:f7:0c:79:11:b0:56:1e:bf:cd:cc:
0d:db:ca:1c:25:d7:7c:f3:87:67:70:65:20:2f:86:df:c0:41:
4b:7b:d2:f2:25:88:ac:84:0f:f4:0c:a7:f0:05:10:5f:72:f8:
4a:2f:ee:20:41:a6:07:eb:11:b8:e5:65:b9:e0:f2:2d:ff:0d:
97:b5:ce:8f:95:ed:fb:0a:8c:91:71:f0:e6:69:30:b4:8d:2f:
fd:e5:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:20 2026 by rpki-client