Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/434A25D28AA211F182DEACCFCE1D38B0.roa
File: 434A25D28AA211F182DEACCFCE1D38B0.roa (raw, json)
Hash identifier: V652dbkdXSSqgsPyuMZdO+f/uQbanChKyQ/u1JVtFkE=
Subject key identifier: EF:84:9E:28:28:8B:5D:47:F0:93:46:AC:4A:83:86:5C:34:A8:EC:BF
Certificate issuer: /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial: 0784
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/434A25D28AA211F182DEACCFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 16:34:55 +0000
ROA not before: Tue 28 Jul 2026 16:34:51 +0000
ROA not after: Thu 19 Aug 2027 16:34:51 +0000
asID: 328808
IP address blocks: 102.220.228.0/22 maxlen: 24
2c0f:4500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Validity
Not Before: Jul 28 16:34:51 2026 GMT
Not After : Aug 19 16:34:51 2027 GMT
Subject: CN=6a68da2e-ab39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:3e:b6:5c:f0:f7:89:5f:12:8c:d9:e0:8e:
b5:c8:43:21:39:05:3c:55:9f:9b:8d:18:55:9f:37:
8f:47:13:55:b2:56:a4:39:7c:77:77:d5:a6:c3:e3:
88:2e:b4:5c:1c:b5:39:96:6e:b6:4e:0c:18:2c:b1:
b1:8f:be:12:b0:a9:c1:27:e8:32:7a:dc:01:79:06:
9e:07:4d:4b:0a:da:86:62:f9:c7:5b:c9:e0:ac:31:
6e:a6:58:04:50:d9:6c:5f:4e:57:d7:98:39:99:84:
d2:da:83:e8:70:83:3e:fd:66:a6:d8:82:df:02:c9:
ff:55:11:83:f6:d2:2e:17:c8:da:4a:c5:8a:f8:71:
28:f3:30:fb:d3:63:0c:f0:2d:ef:90:95:6b:9c:ad:
bc:fd:fd:3c:40:af:68:eb:e8:b9:e6:a2:0f:ea:90:
0e:94:ac:df:0d:fc:b7:23:ee:2c:fa:ba:04:a0:2e:
fd:6d:10:30:7d:3d:db:a0:d2:5d:a6:25:64:d6:9d:
3b:71:4b:67:c6:78:cc:06:e3:62:d5:25:04:d7:a7:
52:2d:4f:5e:67:cb:02:17:05:1f:46:f3:87:88:bc:
cd:67:5b:2e:8b:67:3c:3d:45:70:46:b3:23:36:cc:
ed:0f:4e:c7:3d:3e:74:24:92:d8:bf:ff:59:9d:f6:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:84:9E:28:28:8B:5D:47:F0:93:46:AC:4A:83:86:5C:34:A8:EC:BF
X509v3 Authority Key Identifier:
keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/434A25D28AA211F182DEACCFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.228.0/22
IPv6:
2c0f:4500::/32
Signature Algorithm: sha256WithRSAEncryption
c9:0d:36:ed:f3:1c:0f:d6:3f:47:8e:8b:83:c1:56:4f:49:1b:
2f:6e:97:18:65:0b:7e:ba:db:ae:74:45:77:56:33:d1:dc:6a:
38:f7:f0:e9:5a:d2:48:b3:81:d6:8e:9d:af:85:77:d4:38:e3:
34:99:fc:6c:28:7f:c0:b1:26:fd:f0:11:c3:8c:03:41:73:9b:
74:d6:c8:8d:61:f2:92:bc:f8:5c:76:ae:33:0c:1e:7a:ba:89:
78:a7:3e:7d:15:5d:86:c7:28:01:0b:96:c7:72:d1:d7:d0:f7:
44:82:0d:8c:77:01:25:b2:29:54:9f:1d:5f:1c:11:1f:a0:a7:
4e:ad:10:3b:0b:fe:38:c0:02:72:6e:ba:9d:72:aa:2a:74:61:
33:6e:e7:e0:38:2e:18:07:a9:95:8d:7c:63:0c:19:ee:91:7c:
76:1c:ee:96:8c:db:dc:bd:64:db:b0:80:50:c8:dd:c3:7c:03:
93:c3:c7:83:31:6b:0c:66:33:12:fa:9e:19:78:e6:9f:49:8d:
23:65:d5:b9:ac:2a:58:71:37:53:33:88:fa:ff:1b:27:16:45:
b1:d4:ad:0b:22:6d:37:7e:37:41:dd:f8:a4:7f:6c:79:9a:8b:
fa:4c:5a:31:a5:6b:df:d2:3c:19:70:05:88:93:df:44:fd:8d:
21:fe:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:16 2026 by rpki-client