Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/2E85E16E8A5111F1A46308E6CE1D38B0.roa
File: 2E85E16E8A5111F1A46308E6CE1D38B0.roa (raw, json)
Hash identifier: aLMN39Ly3jZqRnr/vt0hJ6kpZnAn/edsopHoifZ14/c=
Subject key identifier: 4C:97:67:FF:A2:02:8A:78:ED:4D:72:50:2A:E5:73:72:4A:F3:6C:63
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 0617
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/2E85E16E8A5111F1A46308E6CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:54:31 +0000
ROA not before: Tue 28 Jul 2026 06:54:26 +0000
ROA not after: Tue 08 Jun 2032 06:54:26 +0000
asID: 329069
IP address blocks: 102.215.96.0/24 maxlen: 24
2001:43fe:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1559 (0x617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Jul 28 06:54:26 2026 GMT
Not After : Jun 8 06:54:26 2032 GMT
Subject: CN=6a685226-181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:fd:6a:9b:fb:4e:69:5d:22:2f:8c:69:fb:
e0:08:e4:2f:fd:d1:65:a8:c8:3e:30:39:cd:ad:aa:
75:2c:8e:14:05:3e:b6:9f:9b:5a:bd:da:26:62:1c:
50:e0:69:18:cd:19:a5:70:72:fd:3d:ef:1e:fb:f4:
1f:be:4a:3c:48:23:f8:18:35:51:50:2f:a3:93:8e:
34:dc:3d:fd:87:28:ac:c0:58:ea:61:17:af:fa:62:
9f:0f:4f:c7:cf:d8:4d:4a:80:46:7f:10:3e:6b:c0:
49:3c:cd:23:a3:fc:b2:36:01:6f:f3:ac:80:dd:2a:
66:7b:9a:c8:ca:16:52:2c:03:43:53:b0:f0:6b:6c:
52:d9:f3:86:0e:f1:4e:c7:3c:fb:a5:6e:38:62:9b:
4c:3e:95:44:b7:23:02:43:71:24:e2:2e:ab:14:84:
ac:24:4c:c4:03:c6:75:82:9b:35:23:54:27:5f:28:
32:bb:93:1c:3b:7a:ae:4d:ab:82:b2:67:d6:8f:d1:
71:f6:4d:da:46:f8:c6:61:51:82:d3:9a:ed:bf:25:
51:a3:2b:3b:ec:4f:02:3a:99:c3:ce:84:4c:fb:23:
71:fd:01:33:1e:4e:a3:4f:b4:7d:94:0e:23:fa:c9:
5f:7a:a0:d9:73:fb:84:ee:7c:0a:1a:74:77:00:ae:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:67:FF:A2:02:8A:78:ED:4D:72:50:2A:E5:73:72:4A:F3:6C:63
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/2E85E16E8A5111F1A46308E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.96.0/24
IPv6:
2001:43fe:6000::/48
Signature Algorithm: sha256WithRSAEncryption
c6:cc:8e:d7:f7:4f:52:7d:85:c9:7d:dc:0f:61:90:57:b3:e1:
90:a6:f5:77:ab:87:ee:5b:b7:79:17:d9:36:09:02:7e:a9:c6:
e5:9e:3d:4b:e7:22:0c:e7:14:3c:9d:fd:b6:f4:cb:d8:0c:19:
d0:0d:b3:05:4b:2f:bd:cb:85:9d:89:c1:d8:c1:e2:2f:bc:26:
17:b0:c0:b9:18:25:ac:21:13:42:80:af:1b:fe:0e:9a:df:96:
9b:7c:0b:ab:fe:07:fd:70:5a:71:9a:ea:86:bf:9e:ee:81:67:
a8:ba:d8:4c:c4:ee:af:2e:c5:44:f0:40:c3:1f:34:2b:0e:69:
e7:09:cd:d6:69:1c:0b:05:84:72:73:03:83:06:1e:90:fb:ca:
cd:bb:e3:40:8b:8a:1b:ad:99:f6:29:d5:e7:fe:cf:14:fd:1c:
b7:4f:f5:fb:d1:e4:0a:88:9c:5a:fb:0c:88:fc:20:3e:5b:07:
af:e5:d9:af:f9:94:c0:be:2c:39:2c:45:36:de:0e:82:0d:1c:
f7:7d:95:e0:9c:18:b9:1d:bb:6d:4a:f6:41:4c:16:dd:71:e0:
0e:34:3d:3b:a8:e9:b0:74:17:74:68:91:43:81:6f:38:33:b5:
c5:ed:9d:41:a9:94:0c:0a:3b:79:4b:ef:9e:b9:1b:7e:4c:bc:
22:24:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:13 2026 by rpki-client