Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/88A6E87619A111F1BAA7658CDAE4EC9C.roa
File: 88A6E87619A111F1BAA7658CDAE4EC9C.roa (raw, json)
Hash identifier: 9YLikwxkfFShoQrO4pI0tCW+sBd3ZJ1Cvlm4Sjm9/4o=
Subject key identifier: 29:D7:F3:58:13:29:33:05:0D:41:8B:B0:C5:78:07:A9:C4:0C:0D:C1
Certificate issuer: /CN=F369A2CEAF/serialNumber=D5545FE79A5510318C981666F0C6281644AAF30C
Certificate serial: C0
Authority key identifier: D5:54:5F:E7:9A:55:10:31:8C:98:16:66:F0:C6:28:16:44:AA:F3:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1VRf55pVEDGMmBZm8MYoFkSq8ww.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/88A6E87619A111F1BAA7658CDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 21:15:00 +0000
ROA not before: Fri 06 Mar 2026 21:14:55 +0000
ROA not after: Thu 06 Mar 2036 21:14:55 +0000
asID: 329608
IP address blocks: 102.204.244.0/22 maxlen: 24
2c0f:70c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.crl
rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.mft
rsync://rpki.afrinic.net/repository/afrinic/1VRf55pVEDGMmBZm8MYoFkSq8ww.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369A2CEAF, serialNumber=D5545FE79A5510318C981666F0C6281644AAF30C
Validity
Not Before: Mar 6 21:14:55 2026 GMT
Not After : Mar 6 21:14:55 2036 GMT
Subject: CN=69ab43d4-9342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:a1:8d:cc:40:be:eb:24:9e:c0:46:b9:f4:
66:0c:c6:01:f4:50:02:4b:d6:e5:83:75:14:85:b5:
b4:8f:9f:35:51:6a:df:37:53:2b:bd:b0:4a:fc:64:
cc:87:6f:0b:9b:ca:aa:fe:1a:74:68:ba:f1:ee:49:
30:d8:b3:ec:2d:cf:0e:57:82:6a:69:30:90:e9:66:
46:ac:4f:dc:de:a6:d3:fb:a0:56:7f:59:c5:61:41:
c7:ee:c6:09:58:30:36:3b:21:31:bb:c0:f5:5e:fb:
bb:5a:a9:79:51:ab:ad:13:08:05:3a:06:08:be:be:
bd:6d:ae:e3:39:3d:29:65:9d:d5:81:86:77:7e:42:
64:d9:6a:2d:11:10:59:34:7b:b9:b1:51:47:fe:f1:
ce:50:63:52:70:0e:99:5a:e2:3d:5e:bd:f7:63:de:
4b:85:32:0e:bc:da:78:aa:46:96:9a:e1:7c:49:a6:
a8:78:cf:7a:80:ac:b4:1b:cd:d2:3a:c2:79:fd:0f:
dd:e3:75:2b:f0:ad:5c:f8:67:65:f9:45:71:10:aa:
25:44:03:1f:08:f9:58:fb:fb:49:a1:41:af:75:1b:
57:61:70:0d:52:8f:bf:1e:07:1e:5f:bb:8f:7d:16:
e4:cd:f7:89:dd:71:98:df:d3:77:f7:50:f2:29:a4:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:F3:58:13:29:33:05:0D:41:8B:B0:C5:78:07:A9:C4:0C:0D:C1
X509v3 Authority Key Identifier:
keyid:D5:54:5F:E7:9A:55:10:31:8C:98:16:66:F0:C6:28:16:44:AA:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1VRf55pVEDGMmBZm8MYoFkSq8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/88A6E87619A111F1BAA7658CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.244.0/22
IPv6:
2c0f:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:47:e7:0b:be:50:1b:d1:ed:9b:ea:17:3d:2e:ba:a3:fe:6b:
79:51:c5:ca:0f:01:8f:08:b5:dc:ad:b1:74:c0:ae:41:c3:2d:
ef:f0:cd:cb:3b:82:0c:b2:f3:38:08:0b:a9:72:9c:b2:19:a3:
64:0b:8a:86:34:1a:32:9e:66:9a:72:20:0c:4c:15:ad:1e:23:
db:c3:b2:9b:5d:2e:58:3a:31:dc:ed:a1:c7:5e:a0:32:eb:cc:
9b:79:7b:3b:9a:8c:fe:66:2a:6a:d5:a1:ff:cf:4a:54:5b:d1:
79:be:ea:9e:10:c1:61:f5:27:a8:39:a3:8b:5b:47:62:19:32:
50:19:12:75:18:53:10:be:35:5b:7a:3b:86:ee:c1:1e:f6:8e:
ff:aa:26:07:66:5f:12:f0:5b:ba:43:19:21:b3:c4:61:f2:1b:
b7:63:7a:d0:14:75:e1:f4:9b:8c:45:ba:0d:d3:1b:bc:74:95:
9c:cd:fe:60:a5:69:05:aa:5f:e9:f8:75:85:6d:af:3c:4b:4f:
5e:0a:a4:13:b0:0b:19:2a:57:8f:5d:69:89:9b:fa:96:5d:ff:
32:a6:94:7b:ca:48:51:65:35:70:13:9a:20:49:cc:13:d7:02:
72:70:1e:e2:67:1f:13:6c:ae:f8:7f:86:92:02:8f:c3:b0:eb:
73:78:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:36 2026 by rpki-client