Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/3CC30608340711F1AFB184CFCE1D38B0.roa
File: 3CC30608340711F1AFB184CFCE1D38B0.roa (raw, json)
Hash identifier: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=
Subject key identifier: E7:CE:35:28:9B:25:86:1F:AF:76:F9:FE:2E:4A:35:79:DE:D7:0C:C5
Certificate issuer: /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial: 06
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/3CC30608340711F1AFB184CFCE1D38B0.roa
Signing time: Thu 09 Apr 2026 11:28:32 +0000
ROA not before: Thu 09 Apr 2026 11:28:27 +0000
ROA not after: Wed 30 Apr 2036 11:28:27 +0000
asID: 329184
IP address blocks: 102.209.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 05:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Validity
Not Before: Apr 9 11:28:27 2026 GMT
Not After : Apr 30 11:28:27 2036 GMT
Subject: CN=69d78d60-7ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:1e:ff:fc:7b:38:76:54:9a:b6:3f:47:84:
61:73:02:22:40:d3:64:85:ad:4f:b2:29:77:e4:53:
42:79:0a:04:e0:e2:37:85:6a:a8:39:95:fd:96:b9:
91:a5:c8:17:5a:8b:01:53:ec:76:30:bc:81:fc:74:
79:58:ac:8e:f3:b0:47:b6:73:c9:e5:a2:6c:73:70:
cb:a0:5b:6f:ed:e2:e3:56:6e:d3:c1:cb:a6:84:1d:
e3:80:84:bc:2f:2c:55:34:42:39:6b:30:05:23:11:
ff:1e:ec:bc:18:eb:f4:cc:0f:5d:0c:bb:68:d8:43:
1d:a8:7e:f5:d6:37:f4:1b:05:67:20:56:15:40:00:
cf:be:48:61:9c:6c:b5:f4:e9:1e:d0:e7:09:32:2e:
e7:fa:4e:c2:03:db:21:ba:74:ae:97:1b:63:47:09:
46:9f:7e:13:33:9d:62:e1:f2:b7:48:90:47:20:d9:
3b:92:28:9e:e8:4d:d4:54:03:5c:b5:8d:fd:98:7a:
d5:1b:4b:29:46:da:db:72:7c:46:47:f3:68:d5:a5:
81:9b:b4:9d:ea:81:9f:c1:30:2f:99:b1:15:51:32:
37:33:65:f9:45:1a:55:b6:ab:a7:36:6a:c2:23:e1:
36:f8:e2:91:2d:74:cf:87:f7:3d:66:a2:c8:f2:d5:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:35:28:9B:25:86:1F:AF:76:F9:FE:2E:4A:35:79:DE:D7:0C:C5
X509v3 Authority Key Identifier:
keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/3CC30608340711F1AFB184CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:20:d5:27:96:87:0e:08:8d:9d:8c:b5:85:0a:32:2d:19:22:
da:85:a4:0c:72:c8:50:72:ec:54:86:a2:3e:58:b5:62:bb:c0:
01:0e:b2:c9:7b:86:c0:dd:6e:80:88:4d:2d:1e:81:40:32:96:
ce:be:bd:73:8e:e7:9b:fc:46:3d:f0:4c:fe:d5:c1:9f:62:09:
ea:64:ba:08:35:6d:74:46:d1:16:15:b7:dd:76:df:1a:e8:79:
44:fe:4d:38:b7:38:f9:21:72:64:5e:db:39:66:76:f3:5c:c1:
0a:bc:10:14:13:f7:cf:44:71:89:8c:d0:9c:28:a2:a5:9a:5d:
13:8f:0a:69:a4:03:66:24:2a:83:e8:ed:dd:a2:6e:43:82:f0:
11:9a:63:d2:81:c2:3a:d6:80:eb:8b:60:ec:c0:7a:8b:3a:0e:
eb:59:05:82:bc:e9:c2:a8:b3:ef:de:32:4e:91:86:88:70:04:
dd:61:80:11:a5:06:f9:be:a4:7f:cf:90:e6:5a:2d:6a:e5:b0:
f8:e4:8c:55:0a:41:48:b9:3b:9b:61:01:e8:64:0c:ad:a3:97:
15:4e:bd:84:7e:c5:b1:9e:75:f1:c9:ca:bf:a4:fb:2a:13:59:
0d:80:92:7a:d5:75:f6:c1:a0:2c:e0:56:52:36:1f:4f:cd:e7:
7e:51:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:25 2026 by rpki-client