Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/66B396220A6211F192522FE2DAE4EC9C.roa
File: 66B396220A6211F192522FE2DAE4EC9C.roa (raw, json)
Hash identifier: lJkq355Hl6QyAz0aA6KQRws7nq8iUzZqbNSPzM4AiT8=
Subject key identifier: D6:E4:D4:26:96:9A:97:DD:61:B5:63:4C:02:5E:9B:CE:4F:E3:FB:85
Certificate issuer: /CN=F365BE6BAF/serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
Certificate serial: 02
Authority key identifier: 08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/66B396220A6211F192522FE2DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 11:35:17 +0000
ROA not before: Sun 15 Feb 2026 11:35:13 +0000
ROA not after: Fri 01 Feb 2030 11:35:13 +0000
asID: 328348
IP address blocks: 102.134.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 03:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE6BAF, serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
Validity
Not Before: Feb 15 11:35:13 2026 GMT
Not After : Feb 1 11:35:13 2030 GMT
Subject: CN=6991af75-a713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:f8:5e:d6:12:0b:44:80:0e:38:97:04:79:
86:a8:95:0c:51:e3:45:99:51:7e:96:65:2c:76:9b:
18:71:1c:39:51:8d:6a:6a:d4:82:e4:69:79:87:0a:
5d:6b:96:6f:7c:c3:a0:ea:f5:97:0c:54:90:ce:12:
2f:9d:2c:3e:3f:2f:c8:6d:76:a0:dc:a9:31:3d:50:
c3:6b:c5:33:8a:98:6a:3f:92:ea:26:24:22:ec:6b:
4f:f2:e9:9f:77:16:2f:70:bd:c9:4a:01:6e:a3:8c:
7b:48:cf:2a:82:c6:13:91:a5:6c:ad:24:68:3d:7b:
94:37:4a:0a:59:ca:54:54:7c:87:86:57:e0:6b:b8:
fb:b1:b7:d2:97:01:8b:df:dc:9c:9b:67:61:ce:ff:
89:a7:a1:fc:b8:cd:61:eb:c6:23:a8:17:48:11:8b:
32:4b:bf:81:5d:81:8d:96:96:dc:2a:e9:9d:6c:d4:
a2:d9:1d:8d:29:44:58:29:26:9a:03:d8:81:a8:8a:
b7:73:5e:c0:02:02:bc:dc:72:5f:48:3f:de:6b:80:
95:ce:e1:d8:0c:8e:e3:d3:d1:4d:a1:c1:af:f2:a7:
22:06:c2:27:b8:ad:67:ee:c3:66:59:0c:cb:94:5b:
70:4f:12:31:9a:83:ab:c0:bb:7b:16:9a:48:2c:c6:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:D4:26:96:9A:97:DD:61:B5:63:4C:02:5E:9B:CE:4F:E3:FB:85
X509v3 Authority Key Identifier:
keyid:08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/66B396220A6211F192522FE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.84.0/22
Signature Algorithm: sha256WithRSAEncryption
94:34:db:27:bd:0e:06:e9:e5:c5:aa:c8:18:fc:c3:17:37:82:
02:4f:4d:d2:71:6f:ae:7a:b4:4c:3e:6f:ba:f2:d7:ee:1f:0e:
63:a1:d0:25:47:e8:ab:a8:32:7e:f2:db:ed:5c:9f:79:f6:44:
d0:c9:b5:68:cc:4f:41:a7:40:8f:5d:c8:13:7b:f5:da:ab:4b:
7c:3b:bf:63:ba:4d:5d:63:68:9c:9c:40:9c:32:50:c3:b4:7e:
44:cc:25:8f:34:1e:83:75:28:86:c9:43:f7:82:6e:39:5c:43:
38:9e:a7:fd:0e:48:26:98:18:c7:86:16:0b:a3:9b:dd:2a:80:
c5:88:9d:d8:89:d7:46:55:67:f7:76:69:55:1f:e9:2e:d9:d4:
59:39:41:ce:57:b4:16:b3:af:6e:1d:04:15:20:f0:63:03:15:
2e:6d:77:ac:4e:05:29:89:99:63:a5:5d:56:86:eb:23:cb:1c:
7c:dc:b1:0e:98:f5:7d:eb:c7:5a:7d:4a:b7:d5:d8:d4:cd:48:
62:dd:3a:46:e2:8f:d1:53:a5:18:dc:5b:0a:30:e3:f3:a3:8c:
d6:57:4f:13:05:43:72:20:00:f7:da:c0:bc:7f:3f:bd:1d:76:
48:57:93:97:82:b1:9c:ea:52:07:5a:21:a3:e7:7e:f6:a5:8e:
68:3b:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:00:24 2026 by rpki-client