Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/C00EBB487EC011F1A02B611BCF1D38B0.roa
File: C00EBB487EC011F1A02B611BCF1D38B0.roa (raw, json)
Hash identifier: gCmNtUdXuEUu53fztVj0ryayk/YMUurBf8PkCG1BN38=
Subject key identifier: 76:82:90:0B:12:B7:D0:7D:1B:11:94:C1:91:E4:CF:0A:49:47:76:E0
Certificate issuer: /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial: 02B9
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/C00EBB487EC011F1A02B611BCF1D38B0.roa
Signing time: Mon 13 Jul 2026 13:42:55 +0000
ROA not before: Mon 13 Jul 2026 13:42:50 +0000
ROA not after: Tue 31 Dec 2030 13:42:50 +0000
asID: 328310
IP address blocks: 102.164.244.0/24 maxlen: 24
102.164.245.0/24 maxlen: 24
102.164.246.0/24 maxlen: 24
102.164.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Validity
Not Before: Jul 13 13:42:50 2026 GMT
Not After : Dec 31 13:42:50 2030 GMT
Subject: CN=6a54eb5f-add0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:d5:5d:be:b1:e3:2c:68:e2:4c:81:75:5a:
45:fd:57:82:80:95:a9:4c:69:43:2b:88:d1:08:e4:
e6:4e:2e:f4:47:36:b8:32:f4:aa:7f:37:91:0a:c9:
8a:dd:f7:39:a5:fe:7a:4b:7b:3b:7b:ba:a1:a3:2b:
63:59:02:39:83:18:a2:d8:d2:f1:80:63:bb:21:39:
27:42:02:4f:fd:d2:de:dd:dd:d5:1d:05:34:5a:48:
99:38:bf:69:ad:47:a4:45:2c:dd:ba:57:d8:69:fb:
c5:b6:ae:24:af:80:8a:77:b8:08:e9:14:74:63:99:
06:94:18:7a:65:f2:2b:13:29:34:52:8a:ec:7b:fe:
45:8d:73:0c:7b:c3:36:4e:b4:84:da:25:d6:f1:b4:
6b:a6:7a:bc:af:a7:ba:d2:ba:f1:09:66:00:5f:2f:
2c:3c:e6:fd:ce:37:b2:f7:b8:28:f0:b8:e1:2c:55:
83:ab:9f:84:ff:26:76:1c:13:fe:b7:48:0e:6d:a9:
11:ab:18:d2:9a:60:bf:57:4d:ca:64:35:22:54:41:
74:6f:f8:7c:ae:1b:b8:55:8c:58:1a:60:49:77:89:
ec:f9:f4:24:da:99:0a:53:ea:1b:39:99:0b:b4:e8:
7e:01:f2:98:ee:d8:c1:15:da:10:3c:09:73:e1:c3:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:90:0B:12:B7:D0:7D:1B:11:94:C1:91:E4:CF:0A:49:47:76:E0
X509v3 Authority Key Identifier:
keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/C00EBB487EC011F1A02B611BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:16:94:dc:39:92:00:50:73:83:fc:a6:70:26:d8:a4:d9:88:
06:ce:33:4a:56:cd:69:8c:6e:7f:12:db:da:05:ea:92:e9:33:
4b:d4:a8:b7:35:91:a9:6b:46:7b:9c:72:05:b3:d2:dd:aa:c3:
4b:cd:b3:eb:c4:46:11:a3:d2:2b:e2:ac:b2:ce:3f:73:b9:eb:
58:07:2a:fb:e8:46:92:03:c2:bb:d7:16:9a:40:13:56:65:eb:
ca:82:b0:76:c6:62:e2:56:1a:b8:95:1f:da:d6:ad:f7:80:74:
1d:bb:7d:b0:8c:5e:65:07:8b:fd:93:75:e4:e7:04:12:2e:18:
6b:0e:06:c6:1a:dd:46:c8:c0:f4:92:c5:40:c4:8f:ea:94:5f:
05:1d:15:c1:a4:6a:38:0d:40:eb:60:8e:c1:c9:de:9b:a7:c0:
e7:14:0f:8d:c0:bc:67:50:e9:1b:ef:e2:f6:da:26:dd:d8:2d:
d3:f8:cd:bd:38:cf:b9:8a:85:51:1a:0d:f0:f5:46:90:da:f9:
1a:6d:fe:09:7d:2f:c6:30:0d:50:fb:13:4d:e7:73:0f:bc:c9:
10:3b:ae:fe:45:c0:55:7d:e1:15:5c:87:c7:51:15:5c:03:7d:
87:b6:ed:89:4d:f1:07:f6:a3:e8:ac:0a:6b:59:99:8d:28:38:
dc:1e:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:01:23 2026 by rpki-client