Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/CD629ACC283911F19459E1D6DAE4EC9C.roa
File: CD629ACC283911F19459E1D6DAE4EC9C.roa (raw, json)
Hash identifier: qPit9p6L2vy+4Gs/Kz5RznJquqAkXnHPYQx08zDmu40=
Subject key identifier: F0:04:05:37:A8:A6:6E:0D:3E:17:18:87:47:B1:6C:8C:8C:EA:28:48
Certificate issuer: /CN=F36722D4AF/serialNumber=793C59BADF0C80889856605DA35B6E68D3A21C27
Certificate serial: 0245
Authority key identifier: 79:3C:59:BA:DF:0C:80:88:98:56:60:5D:A3:5B:6E:68:D3:A2:1C:27
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eTxZut8MgIiYVmBdo1tuaNOiHCc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/CD629ACC283911F19459E1D6DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 11:00:15 +0000
ROA not before: Wed 25 Mar 2026 11:00:10 +0000
ROA not after: Thu 25 Mar 2027 11:00:10 +0000
asID: 328157
IP address blocks: 102.204.20.0/22 maxlen: 24
2c0f:7ac0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.mft
rsync://rpki.afrinic.net/repository/afrinic/eTxZut8MgIiYVmBdo1tuaNOiHCc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36722D4AF, serialNumber=793C59BADF0C80889856605DA35B6E68D3A21C27
Validity
Not Before: Mar 25 11:00:10 2026 GMT
Not After : Mar 25 11:00:10 2027 GMT
Subject: CN=69c3c03f-f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:88:08:ab:62:1a:e2:8b:5d:3d:85:78:7c:
32:09:46:3d:70:6a:a7:b6:5d:9e:11:80:bf:6d:fa:
fc:23:25:e3:b9:59:e6:61:e7:83:4d:bd:7d:48:ae:
37:6b:f0:77:0b:4a:8e:93:1e:af:aa:1f:bf:ce:ee:
a0:fc:ad:2b:d3:99:95:b1:84:6c:5f:99:ef:1e:4c:
07:8b:0e:30:2c:de:1c:ba:d2:4f:0f:63:13:2b:29:
6f:54:9f:9a:53:9b:28:ac:49:cd:09:9f:9f:3d:9d:
27:6c:14:bc:fe:c6:c0:63:2c:2d:64:0a:15:46:74:
a7:77:fa:28:55:51:96:a2:45:02:c7:b1:91:2e:41:
e0:dc:c2:76:a0:73:f6:68:1f:97:59:76:ce:03:56:
3c:42:3f:ad:30:2c:01:ba:bc:65:64:27:72:15:c4:
87:ea:ec:56:4b:3b:6a:01:f3:ba:e2:e5:d0:73:77:
ae:7b:da:fe:2c:06:40:dd:bc:ca:90:2e:d7:d7:b9:
56:ec:0e:05:8e:c2:c3:94:5c:2d:1d:3c:2c:ac:57:
47:a2:e7:b8:39:ed:d4:84:7d:0e:54:30:38:3f:21:
5a:41:98:dd:69:93:1a:72:04:ed:fd:c7:2f:da:e5:
86:24:0d:da:94:99:83:f6:19:cf:c5:c8:88:05:24:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:05:37:A8:A6:6E:0D:3E:17:18:87:47:B1:6C:8C:8C:EA:28:48
X509v3 Authority Key Identifier:
keyid:79:3C:59:BA:DF:0C:80:88:98:56:60:5D:A3:5B:6E:68:D3:A2:1C:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eTxZut8MgIiYVmBdo1tuaNOiHCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/CD629ACC283911F19459E1D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.20.0/22
IPv6:
2c0f:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
c0:41:bd:5f:c1:e7:89:a5:5b:6b:00:0f:32:33:d8:74:8d:bf:
18:e4:2c:0e:b0:98:b0:69:9c:de:0d:63:10:c1:55:96:b2:9e:
ea:7c:6e:54:03:e3:30:97:cd:73:38:7b:d7:5e:04:26:09:3a:
ea:6e:2e:90:b4:78:6c:3a:7b:9e:d7:7c:89:f6:79:56:fa:97:
9f:20:f6:8a:89:eb:15:dc:80:95:4a:c3:a2:22:57:a4:5f:33:
27:e6:1b:45:af:a1:fc:88:52:0b:b7:26:ae:8d:7a:2c:6f:3e:
3c:a1:9a:2f:64:a5:cc:cd:9b:31:b6:7a:eb:85:e4:2b:af:4b:
34:07:79:47:6a:a3:bc:0f:93:17:e2:80:f1:c4:79:b5:fb:e3:
6d:3c:54:b0:00:4d:10:96:3e:8c:c6:c6:50:54:7e:6c:3b:8e:
42:bb:99:cb:40:54:78:f2:5e:bf:66:be:28:6f:67:75:ac:e0:
e5:98:bc:8e:0e:c5:e9:fd:b4:2a:33:29:6d:56:4c:cf:8c:1a:
70:db:96:20:ea:2e:2b:5d:f1:09:b6:fc:6f:ae:6c:a4:c6:17:
cd:2b:44:1e:04:43:2f:56:32:00:04:3d:13:23:8a:08:f1:0d:
0c:34:fa:fc:a8:6c:aa:61:d9:98:9e:e2:e8:94:e4:8e:1c:52:
9d:6e:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:39:56 2026 by rpki-client