Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/73720FC0172C11F1AF4BCAEDDAE4EC9C.roa
File: 73720FC0172C11F1AF4BCAEDDAE4EC9C.roa (raw, json)
Hash identifier: 1ZL9z0h/1rN2O/aZ+bmlBn/vCALPp3lIlwXCHDci6Yk=
Subject key identifier: 5C:CA:90:FC:85:DC:6E:EA:06:84:D2:61:25:95:83:48:10:94:85:BD
Certificate issuer: /CN=F366E94BAF/serialNumber=57508CDF49523A38133E97BC0C1BF4A7A35F67A4
Certificate serial: 03D8
Authority key identifier: 57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/73720FC0172C11F1AF4BCAEDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 18:11:51 +0000
ROA not before: Tue 03 Mar 2026 18:11:46 +0000
ROA not after: Sun 31 Mar 2030 18:11:46 +0000
asID: 329247
IP address blocks: 102.212.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft
rsync://rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366E94BAF, serialNumber=57508CDF49523A38133E97BC0C1BF4A7A35F67A4
Validity
Not Before: Mar 3 18:11:46 2026 GMT
Not After : Mar 31 18:11:46 2030 GMT
Subject: CN=69a72467-e1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:89:09:3c:dc:46:57:f8:14:6e:79:56:10:
15:87:83:02:77:8a:8c:88:14:15:bf:a6:a8:44:9a:
24:39:ec:3e:eb:e0:be:0e:bd:57:83:a8:28:9b:d1:
c8:54:28:dc:06:38:d4:b5:5c:a9:46:d0:31:89:3f:
2f:be:43:76:8a:78:ca:28:b1:1a:f8:39:6f:38:93:
9f:b7:a5:b4:65:14:b3:2d:50:ac:78:ba:b6:0b:8d:
76:d2:96:01:5a:48:1c:17:2e:a9:d3:28:27:fa:dd:
c2:fc:12:ec:b2:7a:1b:24:de:82:2c:9b:ea:27:49:
df:63:90:9e:6a:07:3a:7c:1d:57:de:2d:5a:48:0a:
9a:88:82:b4:a1:3b:66:6e:73:fa:cc:c9:28:a2:5b:
4b:f4:ba:d9:81:67:39:82:8f:3a:b6:13:82:19:32:
05:72:ec:52:4e:e0:cc:6e:63:40:10:02:0c:fa:70:
c2:53:52:8b:ef:04:06:fc:f4:a5:35:bb:8f:98:e8:
50:e1:ba:1d:67:3e:11:6c:1a:4b:72:34:c2:13:f3:
cd:39:ea:eb:13:a0:72:71:15:57:79:91:73:53:c8:
34:32:a6:d0:32:b8:c6:8d:ef:53:71:92:ba:84:b0:
d0:e8:4e:73:09:fc:c5:a4:4c:51:aa:99:8a:6d:d2:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CA:90:FC:85:DC:6E:EA:06:84:D2:61:25:95:83:48:10:94:85:BD
X509v3 Authority Key Identifier:
keyid:57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/73720FC0172C11F1AF4BCAEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:17:67:2f:92:39:c4:5c:87:85:f1:12:97:49:af:2a:75:7e:
b8:88:28:91:b3:a3:f1:0b:ad:da:f5:a4:a0:43:07:c4:cf:42:
4e:7b:00:c8:64:1d:bd:b3:74:1f:c4:15:f6:b9:eb:45:ac:b4:
28:a8:55:a6:88:c2:32:8b:d4:1f:0f:04:9f:d2:35:1a:a1:66:
18:cc:0f:52:61:54:ee:6a:b4:71:05:f5:86:07:0f:7b:ea:70:
b2:02:f7:f5:63:fb:4e:cd:82:4f:27:dc:27:95:2b:75:50:3b:
21:a4:7f:d2:72:15:81:19:96:cd:65:a8:ab:87:de:c5:99:4b:
65:0c:82:da:87:7d:7f:1b:08:a7:0a:a3:b7:b3:9d:49:21:7f:
1b:8e:cc:42:f7:43:d4:44:1b:7f:de:46:34:5c:4d:90:f4:39:
aa:28:11:9b:e9:09:8c:83:92:19:6c:50:ca:e6:b2:fb:6a:88:
a0:f9:49:d7:9c:96:02:0e:61:c0:85:2c:ee:ee:f1:2d:41:c4:
69:04:07:f4:ad:6d:d4:b0:23:b6:a5:8b:ce:03:5b:fa:bd:87:
2d:2b:f9:cf:ce:c4:50:81:97:53:b4:01:1a:b1:8c:78:99:fd:
30:7e:0d:d6:75:7d:b7:0e:87:db:a2:65:5d:f1:dc:29:15:9a:
03:55:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:18:02 2026 by rpki-client