Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/0FE932948A5411F1B0F1C1F8CE1D38B0.roa
File: 0FE932948A5411F1B0F1C1F8CE1D38B0.roa (raw, json)
Hash identifier: UV4fI+ELmdndwcNe0ccR8EQbX1usYYEiLqx5vzIKh6o=
Subject key identifier: 04:6C:71:06:2E:63:BD:D3:8A:1F:84:FD:DF:98:D1:A0:78:2F:1C:9C
Certificate issuer: /CN=F3630683AF/serialNumber=055DB1BF9AD058383C628E393200D6B6CE5F7090
Certificate serial: 05D3
Authority key identifier: 05:5D:B1:BF:9A:D0:58:38:3C:62:8E:39:32:00:D6:B6:CE:5F:70:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/0FE932948A5411F1B0F1C1F8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:15:08 +0000
ROA not before: Tue 28 Jul 2026 07:15:04 +0000
ROA not after: Tue 31 Aug 2032 07:15:04 +0000
asID: 329075
IP address blocks: 102.216.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft
rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491 (0x5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3630683AF, serialNumber=055DB1BF9AD058383C628E393200D6B6CE5F7090
Validity
Not Before: Jul 28 07:15:04 2026 GMT
Not After : Aug 31 07:15:04 2032 GMT
Subject: CN=6a6856fc-5893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:b0:c5:57:6e:47:c7:4b:47:53:ef:50:26:
80:f2:97:b8:3a:b4:1b:4d:e9:91:a2:e1:2d:5d:99:
1f:fe:7f:cd:40:6b:61:8b:3f:06:f7:86:08:ae:75:
9f:2d:d9:5e:55:89:94:c5:9b:a2:1a:90:4e:81:da:
7e:8b:9a:2f:9d:47:1d:d1:33:14:36:fc:cb:d1:b5:
e4:66:87:11:88:e8:8d:d3:25:15:e7:56:f2:b4:df:
3e:cf:ba:e8:2e:e4:25:a5:c7:bc:e8:af:15:ce:4d:
34:7b:4d:0b:7b:b0:69:fa:fc:58:09:90:0e:d2:30:
54:6a:de:8d:44:13:98:6a:68:f9:14:dd:0d:bb:06:
b1:63:cf:b0:42:bd:b5:f5:93:0b:58:f1:54:ed:76:
2a:94:81:e8:f5:6d:d9:9e:af:d0:1d:ae:1d:63:ee:
4d:03:35:47:30:9d:ad:48:d4:ff:12:8c:3a:45:61:
dd:bc:2c:9a:98:9c:e9:31:60:2d:73:93:ef:71:55:
39:79:aa:d5:d6:ed:dc:a0:88:5e:d4:1a:12:02:63:
37:fa:d4:ec:fc:95:48:a8:c2:5d:8b:3b:5e:41:2a:
c8:f0:75:ec:f9:04:33:52:91:ee:11:2f:90:67:7a:
e4:f0:6b:79:25:bd:f4:29:95:33:e3:05:d1:2f:37:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:71:06:2E:63:BD:D3:8A:1F:84:FD:DF:98:D1:A0:78:2F:1C:9C
X509v3 Authority Key Identifier:
keyid:05:5D:B1:BF:9A:D0:58:38:3C:62:8E:39:32:00:D6:B6:CE:5F:70:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/0FE932948A5411F1B0F1C1F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:6d:df:c0:59:27:a8:40:17:6e:a2:19:5b:64:c4:3b:ec:b8:
68:4d:50:b8:53:a3:23:c0:2e:b7:72:f4:6c:e4:eb:62:f6:5c:
3d:d1:e3:ae:cc:c9:77:5a:01:f7:b6:d6:cc:e6:3b:ff:12:51:
f4:20:93:69:9d:06:f4:75:d4:dc:7e:a0:d1:35:c4:cf:90:27:
45:50:cb:d1:11:13:cd:59:fa:ea:61:4d:cf:85:5f:cb:28:c6:
47:13:d1:8f:10:fe:70:ab:9e:33:79:82:98:5c:20:16:43:77:
b5:04:2b:99:31:cb:23:d0:94:cb:5a:05:14:cb:9b:c8:3c:24:
68:e6:2f:77:85:98:a1:ca:7c:6d:53:49:c0:fa:f8:49:51:06:
6d:4b:35:f4:eb:90:91:44:6e:f9:cc:a9:85:8e:0d:dc:86:36:
88:4f:37:c3:1b:f0:82:23:31:2c:a4:40:b9:7f:82:6c:16:63:
c6:a0:66:f3:84:be:5c:5e:94:44:52:dd:8a:85:e4:ed:83:05:
98:1d:5c:68:ae:50:5c:09:05:98:7c:a2:f0:cd:ef:16:67:13:
0b:a3:dd:c6:40:a1:d5:3d:b8:9f:81:26:ff:63:4f:d1:53:f9:
59:15:b1:d6:b8:c9:dc:5b:54:eb:ed:f7:79:9a:82:1a:71:63:
c8:bf:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:25:54 2026 by rpki-client