Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/BC030D72390311F18A96EAA2CE1D38B0.roa
File: BC030D72390311F18A96EAA2CE1D38B0.roa (raw, json)
Hash identifier: WYyd6Ed/wv8PPQDjgs5+xHAluyEuiQjLMAh/g0BWSQo=
Subject key identifier: E2:A1:BE:25:28:DB:AE:4E:24:83:5D:8E:28:32:88:D7:C5:41:91:D9
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 077A
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/BC030D72390311F18A96EAA2CE1D38B0.roa
Signing time: Wed 15 Apr 2026 19:46:03 +0000
ROA not before: Wed 15 Apr 2026 19:45:58 +0000
ROA not after: Thu 15 Apr 2027 19:45:58 +0000
asID: 208185
IP address blocks: 102.220.212.0/24 maxlen: 24
102.220.213.0/24 maxlen: 24
102.220.214.0/24 maxlen: 24
102.220.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 02:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Apr 15 19:45:58 2026 GMT
Not After : Apr 15 19:45:58 2027 GMT
Subject: CN=69dfeafb-763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:d3:4d:45:a2:31:4b:69:df:77:d1:c6:86:
8f:4d:9e:40:60:dc:34:23:29:67:39:12:b0:29:9f:
92:bf:87:b2:88:d9:b6:2b:23:ab:92:86:79:c3:7f:
b2:2f:27:d0:1d:0e:fc:ee:c9:71:ce:d2:f8:c5:f1:
d4:51:0d:52:42:71:b4:a5:a6:f0:67:b4:91:ad:75:
05:fc:63:41:65:9f:06:45:25:98:3a:09:de:8e:1b:
67:69:c9:9c:60:fb:53:1b:ba:4c:d9:f4:f1:ff:2b:
23:9b:2b:57:c7:1b:f5:0e:27:a9:eb:cb:b3:8b:ca:
38:2a:10:0d:56:39:00:ea:68:3f:15:c0:92:b2:bb:
b3:7c:8b:95:7d:56:4a:79:3d:00:47:16:ae:4f:e1:
8b:ba:8a:33:0e:99:e0:2c:92:4a:9e:1b:ca:c6:3b:
9e:78:36:13:f1:67:7b:32:76:0d:ae:e6:77:cb:50:
dc:ad:eb:06:c6:3e:77:8a:69:ef:c4:91:5c:40:07:
16:8f:f1:56:e0:9a:e2:50:b0:28:1d:7c:48:6d:47:
ba:ce:01:71:ee:0d:35:92:d2:2d:92:78:c5:91:ee:
cb:c0:4f:71:83:82:5c:2c:38:cd:d6:3b:fc:6e:a8:
25:da:47:40:e2:04:6d:54:d8:18:96:8e:65:06:f3:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:BE:25:28:DB:AE:4E:24:83:5D:8E:28:32:88:D7:C5:41:91:D9
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/BC030D72390311F18A96EAA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:3c:04:17:2c:cd:7e:14:69:d0:f0:68:09:9f:a9:76:79:c0:
58:8b:76:5d:a1:b4:4a:45:ac:96:17:0e:4b:f2:3a:55:4c:40:
a4:da:23:02:75:19:94:6f:e1:80:ee:3d:0f:7c:61:76:bc:5d:
ee:85:3d:c8:33:ab:06:9e:37:8f:2c:c8:91:a6:47:70:3a:a6:
4d:46:2a:61:6c:97:99:02:b2:28:49:41:22:7e:10:a5:4b:16:
de:d4:b4:11:a3:bb:19:10:aa:93:e2:b7:b3:3d:97:e1:86:df:
ff:e8:04:de:e4:26:87:87:44:5c:86:6e:23:f6:05:43:d3:76:
1f:aa:4c:1d:78:70:31:25:87:d5:bd:38:58:ba:76:7d:a8:97:
7d:f8:b0:92:b4:69:d0:ad:8b:ca:6d:f6:e3:21:a6:00:35:ad:
68:ed:84:bc:fb:52:8d:46:2a:ed:77:c5:ef:ce:08:f3:fb:ce:
d4:ea:d3:59:40:2f:2f:a7:d2:b5:d9:27:b4:ea:63:a8:19:84:
1f:5a:12:58:a9:b3:fb:ef:9e:60:a1:fb:61:7f:44:16:1e:7b:
f3:32:ec:01:15:25:79:f1:60:3c:f8:b2:94:83:3a:1c:99:f0:
17:27:ca:bf:c8:c9:e9:c1:d3:f6:0f:21:93:51:f0:10:b2:79:
7b:61:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:50 2026 by rpki-client