Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/7CFC778030A711F1B0BA49A6DAE4EC9C.roa
File: 7CFC778030A711F1B0BA49A6DAE4EC9C.roa (raw, json)
Hash identifier: fiJLFf12hDBUqyflOu4g0dOWaAU/DEhS6uOIRtIo2kc=
Subject key identifier: A0:43:E8:05:1F:16:DC:81:00:2A:B0:12:C5:DA:80:F3:25:52:28:98
Certificate issuer: /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial: 0398
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/7CFC778030A711F1B0BA49A6DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 04:25:34 +0000
ROA not before: Sun 05 Apr 2026 04:25:30 +0000
ROA not after: Wed 31 Dec 2036 04:25:30 +0000
asID: 37738
IP address blocks: 102.210.212.0/24 maxlen: 24
102.210.213.0/24 maxlen: 24
102.210.214.0/24 maxlen: 24
102.210.215.0/24 maxlen: 24
2c0f:5f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Validity
Not Before: Apr 5 04:25:30 2026 GMT
Not After : Dec 31 04:25:30 2036 GMT
Subject: CN=69d1e43e-1882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:5e:ff:0a:f0:d3:4b:5c:54:bc:89:da:98:
ec:9c:44:74:b2:af:b5:04:47:a6:6e:d4:b3:9a:b5:
3d:93:07:a1:99:fc:a5:fb:e8:82:4d:62:a4:fd:ed:
64:fb:1f:f9:ac:45:0f:00:7d:e2:93:02:2d:fb:78:
5c:2c:9d:4e:6a:54:62:07:75:44:e8:4c:32:2d:a8:
68:38:14:ed:83:54:98:d9:7d:8b:d3:fd:09:53:29:
c6:00:39:aa:5e:ac:06:dc:b7:17:b4:fa:f6:b6:b8:
71:cd:a7:42:6e:eb:38:eb:24:67:5c:c2:dc:17:7b:
61:10:d6:68:d1:c9:62:ff:c7:38:8f:a6:bd:7d:e1:
d2:c8:6a:74:a1:8a:b4:73:96:97:69:4c:3f:29:29:
df:c1:84:ba:b4:2f:dd:99:ba:ff:f9:59:f6:b5:a6:
f0:f1:c4:79:f1:71:9e:db:1e:85:e8:dc:45:c4:7a:
81:bf:85:1e:8d:1b:0f:5c:f7:3f:79:ec:34:b7:64:
8e:cf:38:35:64:32:e5:d6:a8:f2:48:d7:8f:82:5e:
c4:a7:ee:18:8e:9f:84:76:b8:e2:96:6b:62:92:7f:
7a:ad:23:0b:69:f3:81:a8:9c:72:d7:d9:f0:40:cb:
49:92:77:64:bd:e8:49:f3:fc:dd:e4:bc:26:a5:08:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:E8:05:1F:16:DC:81:00:2A:B0:12:C5:DA:80:F3:25:52:28:98
X509v3 Authority Key Identifier:
keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/7CFC778030A711F1B0BA49A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.212.0/22
IPv6:
2c0f:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
99:70:20:28:e7:78:3c:be:b5:0b:1f:7c:b4:16:63:d5:e0:4c:
b4:55:2b:18:08:96:d8:de:97:49:9f:c8:4e:d2:6c:1d:5f:86:
88:fc:18:37:ad:b7:10:9d:54:a0:21:19:56:76:c2:cd:4d:64:
e2:33:00:d6:7e:39:1b:6c:a0:0e:25:33:c9:dc:7c:23:29:8e:
61:60:6c:4d:58:17:18:48:ad:d3:a9:8e:d0:6b:71:8f:a9:a4:
25:00:9b:28:6c:86:ea:ad:df:51:5a:7b:cd:8d:ff:cc:04:a2:
7d:2d:29:80:e2:4a:2f:4a:c6:39:a1:b1:62:ae:de:ef:39:e6:
8c:f8:7d:84:9f:ae:76:c5:7e:a9:7c:c8:dd:ce:3c:a1:c4:89:
c1:70:14:1e:a9:bd:5c:a6:ff:52:b0:04:37:73:87:7d:64:6b:
b5:3b:80:fa:f4:c2:2a:4a:c1:93:da:dc:4c:44:1c:dc:e0:b4:
be:58:90:13:ec:09:e0:80:05:8c:46:65:10:05:2f:93:35:9d:
1a:0a:0a:78:6d:6a:ba:0e:bb:3b:c1:8e:fd:0a:11:84:a6:2a:
d7:04:c4:4f:04:d0:48:f4:ca:e6:05:f2:c7:e2:98:84:57:d5:
79:f8:2f:3b:8c:10:1f:d5:19:94:3d:1d:de:cf:aa:1a:06:16:
34:fc:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:07 2026 by rpki-client