Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/5A133218333B11F1A1E8E8F4CE1D38B0.roa
File: 5A133218333B11F1A1E8E8F4CE1D38B0.roa (raw, json)
Hash identifier: Q/9dZssjg1U2Ocya8n+B8JYDCrPkeHbBp8S8ICYVXQI=
Subject key identifier: A2:C0:DC:A6:22:8B:1F:6C:45:80:E1:95:A0:F9:C7:F5:44:9E:74:03
Certificate issuer: /CN=F365B85AAF/serialNumber=6D5F7C1441AC4ECDF7866E415E56386423BC5CA7
Certificate serial: 0C
Authority key identifier: 6D:5F:7C:14:41:AC:4E:CD:F7:86:6E:41:5E:56:38:64:23:BC:5C:A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bV98FEGsTs33hm5BXlY4ZCO8XKc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/5A133218333B11F1A1E8E8F4CE1D38B0.roa
Signing time: Wed 08 Apr 2026 11:09:04 +0000
ROA not before: Wed 08 Apr 2026 11:08:59 +0000
ROA not after: Sat 08 Apr 2028 11:08:59 +0000
asID: 37329
IP address blocks: 102.218.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/bV98FEGsTs33hm5BXlY4ZCO8XKc.crl
rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/bV98FEGsTs33hm5BXlY4ZCO8XKc.mft
rsync://rpki.afrinic.net/repository/afrinic/bV98FEGsTs33hm5BXlY4ZCO8XKc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365B85AAF, serialNumber=6D5F7C1441AC4ECDF7866E415E56386423BC5CA7
Validity
Not Before: Apr 8 11:08:59 2026 GMT
Not After : Apr 8 11:08:59 2028 GMT
Subject: CN=69d6374f-d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:70:4b:f7:84:0d:56:98:08:36:bb:3d:c2:
26:04:30:a9:fb:aa:f0:07:b3:89:b8:bf:a6:98:95:
db:44:0b:7c:e7:5a:8d:1f:b5:4d:c4:61:b3:60:74:
93:e3:54:6d:27:e5:37:0c:98:86:ae:a7:0b:66:c1:
ce:af:1d:f1:71:a8:5a:dc:db:81:b5:ed:14:00:9b:
8b:10:a0:ab:b4:e0:d9:f4:59:91:7d:e1:d2:15:fe:
47:96:75:d8:fe:0e:17:bb:2f:65:0d:72:d8:fa:1a:
d9:6d:7c:64:60:39:5f:ff:3e:94:68:86:6c:bb:63:
c2:5b:f0:15:47:90:b1:d3:7f:d3:ac:42:ea:0e:1f:
e2:26:16:82:a5:ad:45:8f:87:c2:0f:aa:ab:bf:42:
fe:df:c8:56:ac:b0:57:13:57:4d:9e:fe:6d:fa:cb:
01:de:d5:a4:76:71:fc:5c:a1:16:a6:f9:af:9a:8e:
a1:2f:86:a8:5d:42:db:79:39:00:f9:ca:34:61:1f:
4c:44:78:a2:0b:e5:01:51:0b:bf:b1:6a:d5:49:76:
f6:19:4e:e4:36:50:3b:15:14:56:7b:22:00:28:61:
f1:ed:f9:9f:3c:89:5d:ae:d4:9a:9b:b6:7b:14:1d:
a3:8f:e6:bd:43:a2:69:71:82:d5:4f:dd:b0:d7:5b:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:DC:A6:22:8B:1F:6C:45:80:E1:95:A0:F9:C7:F5:44:9E:74:03
X509v3 Authority Key Identifier:
keyid:6D:5F:7C:14:41:AC:4E:CD:F7:86:6E:41:5E:56:38:64:23:BC:5C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/bV98FEGsTs33hm5BXlY4ZCO8XKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bV98FEGsTs33hm5BXlY4ZCO8XKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/5A133218333B11F1A1E8E8F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.12.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ba:ee:32:8b:3d:50:1d:b1:52:23:22:70:fc:ec:e3:23:59:
90:a0:45:02:3d:b0:98:24:7b:d3:25:f2:80:2c:f0:a4:dc:20:
9c:cb:65:05:40:db:1e:30:7f:66:b7:3e:8f:51:88:5a:b9:ed:
0b:54:3b:cd:60:43:c9:4f:13:38:b2:e4:f2:bd:b6:0e:03:35:
ce:4a:0d:d8:99:03:31:4c:15:c7:67:b5:95:8b:b0:82:2c:1e:
e6:8d:79:c4:9b:c2:ea:ed:e2:eb:64:d4:6e:2d:f1:13:5d:81:
81:c6:99:37:e9:57:88:c2:1f:96:4d:83:cc:c8:48:65:fb:d3:
64:c3:8e:ad:68:0b:84:77:28:5a:c2:83:7b:ce:8e:87:45:8a:
40:8e:7f:50:55:34:d3:f2:04:8e:bb:92:17:a8:12:0d:ce:7b:
ca:e1:74:f8:d5:d3:b9:d4:4b:65:10:69:05:7e:22:f8:e7:f2:
87:02:de:cd:cf:90:0d:f1:80:54:6e:86:14:49:a5:a1:c4:63:
7e:5a:11:06:59:98:9c:9d:6a:e9:a1:8a:7d:1f:db:45:dd:93:
c5:98:39:55:e7:c4:a9:aa:14:99:48:f9:a0:45:49:61:96:1f:
0d:7c:da:3b:7c:15:c5:94:8a:6e:59:2b:bb:4a:f5:11:a6:6a:
c0:c4:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:53 2026 by rpki-client