Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/74A188D4198F11F1A0453B9FDAE4EC9C.roa
File: 74A188D4198F11F1A0453B9FDAE4EC9C.roa (raw, json)
Hash identifier: heRN3Hl/VoKOoahx6fv1krdzclqG2Ce9G2KiMF/ZKFs=
Subject key identifier: 0F:18:56:28:94:F7:C7:FB:EB:96:99:EF:AC:7C:4F:57:0F:F0:8C:17
Certificate issuer: /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial: 03DC
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/74A188D4198F11F1A0453B9FDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 19:05:36 +0000
ROA not before: Fri 06 Mar 2026 19:05:31 +0000
ROA not after: Tue 31 Dec 2030 19:05:31 +0000
asID: 329038
IP address blocks: 102.216.112.0/22 maxlen: 24
2c0f:6840::/28 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Validity
Not Before: Mar 6 19:05:31 2026 GMT
Not After : Dec 31 19:05:31 2030 GMT
Subject: CN=69ab2580-6704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:53:15:d1:d0:ac:8f:34:53:1c:29:68:6c:
83:d4:01:79:30:ff:ea:c3:25:38:9f:7b:8c:fb:bb:
c0:b0:18:29:9f:4d:03:8a:85:ba:d3:69:fd:38:93:
ba:f9:fb:2f:72:c3:f5:59:0a:18:34:7b:d9:c0:14:
7c:ee:c8:2c:eb:53:d6:09:37:4a:5e:f8:7f:61:70:
ef:9c:8d:08:0d:94:24:db:f5:df:f9:c0:00:16:b6:
da:38:0f:c1:e4:9a:91:e9:0e:4c:05:b5:8e:db:a4:
d0:ee:30:99:a8:71:48:52:be:c7:c8:fd:d2:50:ac:
12:d1:d3:f2:28:ca:8f:b6:ba:f8:99:2f:33:d9:80:
6c:f5:95:d1:94:22:fd:64:0f:61:0b:be:c5:2c:0c:
88:1f:23:59:02:06:83:dc:eb:2e:54:63:e5:f1:1b:
85:4c:87:89:2f:3b:9d:37:c7:7b:72:d7:7e:1d:22:
1b:bb:e7:b0:7f:96:cc:22:d5:bb:9d:ef:1d:99:7c:
f9:ef:ff:4e:3f:4a:ef:9b:8e:25:28:0a:6f:87:ff:
5a:ea:f0:01:cc:ba:b9:ca:60:31:0e:45:d3:dc:76:
9c:84:97:ef:39:f5:69:cd:38:a5:22:fd:b2:44:43:
7c:1f:4f:be:fa:21:df:08:e3:84:7d:33:d9:af:2e:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:56:28:94:F7:C7:FB:EB:96:99:EF:AC:7C:4F:57:0F:F0:8C:17
X509v3 Authority Key Identifier:
keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/74A188D4198F11F1A0453B9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.112.0/22
IPv6:
2c0f:6840::/28
Signature Algorithm: sha256WithRSAEncryption
78:6a:e6:16:fd:c9:b4:20:94:83:a4:e4:2e:32:77:0b:40:21:
86:33:6e:ea:12:63:4d:59:61:56:e0:b7:ae:a7:cb:c8:e4:0e:
8b:f6:cd:15:77:27:92:ce:fa:b2:71:5b:8e:51:60:cb:53:ca:
12:d0:0b:65:a1:bc:2d:e0:ad:65:40:c4:af:d9:89:d9:30:af:
2a:90:e7:79:4b:ff:b0:d7:b8:50:ac:49:60:6a:38:cf:23:31:
a8:f0:f8:61:11:18:d4:09:8a:35:25:a7:bd:57:30:75:00:b6:
e9:27:c0:06:25:13:d4:d5:4b:fe:46:88:9c:f8:c1:cf:71:46:
95:ec:4a:14:e1:2e:a3:cf:3f:17:32:7d:2c:09:f8:07:a1:57:
ad:a0:95:5b:3b:1a:ea:e6:c1:06:6c:d6:57:9d:90:ee:bc:fe:
cc:3e:07:54:d2:0a:c3:f4:35:d2:2c:e4:83:ff:bb:82:fc:f1:
1e:2d:1d:8b:f6:9f:49:e1:d8:b0:0b:de:10:85:f6:38:24:7c:
15:cb:58:26:ef:c8:14:13:80:a5:cf:43:4c:c3:49:72:b6:da:
e7:95:0d:e3:9b:07:3a:2f:21:28:cd:37:32:0c:37:fb:76:6e:
1f:40:55:c9:75:72:dc:a2:ea:df:b1:8d:bf:30:81:01:3d:9b:
57:78:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:20 2026 by rpki-client