Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/4A1C51D0334C11F198B79CDACE1D38B0.roa
File: 4A1C51D0334C11F198B79CDACE1D38B0.roa (raw, json)
Hash identifier: MiCYmqOMJcOwUww3a0BQZWIqVrker46l5C67Rj9rwqs=
Subject key identifier: 2B:0D:A5:C7:A7:08:F0:4A:9E:84:B5:28:42:41:F6:8F:20:DC:11:12
Certificate issuer: /CN=F365FF1AAF/serialNumber=929ECDA380560CA3EC90854872785814DF62C450
Certificate serial: 02
Authority key identifier: 92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/4A1C51D0334C11F198B79CDACE1D38B0.roa
Signing time: Wed 08 Apr 2026 13:10:18 +0000
ROA not before: Wed 08 Apr 2026 13:10:14 +0000
ROA not after: Fri 30 Apr 2049 13:10:14 +0000
asID: 328746
IP address blocks: 102.222.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365FF1AAF, serialNumber=929ECDA380560CA3EC90854872785814DF62C450
Validity
Not Before: Apr 8 13:10:14 2026 GMT
Not After : Apr 30 13:10:14 2049 GMT
Subject: CN=69d653ba-b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:80:a8:92:67:01:72:65:24:43:e2:49:a8:
46:d1:6d:cc:fb:d3:c0:8e:ba:e7:3c:bf:bf:86:94:
d0:10:3d:50:c9:64:29:47:19:90:1d:b7:45:36:e4:
1f:fc:ce:1e:41:b7:eb:fd:b4:ea:54:89:9a:f3:9b:
36:41:ac:47:c7:9b:c5:a7:fb:5c:9b:b6:a5:a7:64:
f6:d3:65:55:10:92:d0:10:35:45:6b:0b:86:74:b8:
68:1b:b2:6a:74:9d:b7:1f:8a:f9:c2:92:16:fa:5f:
c6:d0:28:ad:c6:42:78:08:e5:38:9f:11:47:bc:91:
2b:02:52:54:6e:df:c3:c1:c4:66:97:a0:aa:64:e9:
76:57:5b:2a:7f:37:31:17:14:56:6d:6a:ca:65:f9:
d6:2b:3d:7b:6c:2d:d2:99:40:82:be:2e:2b:ec:9d:
e9:d9:64:66:b9:bb:40:93:89:67:6e:60:0a:e3:d2:
87:8c:f1:84:37:68:04:84:a2:4a:43:cb:70:7a:34:
ab:6d:dc:34:88:67:88:f2:4e:98:be:ed:05:d2:b0:
7e:96:04:fc:56:07:bc:3a:f7:91:fb:dc:3d:5a:e7:
0c:69:b8:1b:fc:75:2d:6e:18:ec:c3:c7:f9:68:27:
39:9a:a3:91:29:91:d3:4b:f3:f3:d6:cf:fc:2f:ea:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0D:A5:C7:A7:08:F0:4A:9E:84:B5:28:42:41:F6:8F:20:DC:11:12
X509v3 Authority Key Identifier:
keyid:92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/4A1C51D0334C11F198B79CDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.72.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b6:25:3a:6d:fa:1b:5e:fb:a6:75:11:34:1d:99:69:13:30:
ab:fa:c2:f0:82:2f:db:6f:81:36:f6:c8:de:f6:6a:7f:cd:1d:
d3:d8:50:6f:d9:c6:10:94:f2:95:73:60:b0:cd:0f:81:45:0e:
cc:a7:53:04:2a:bf:14:93:1f:db:8a:0c:ee:de:0c:ca:4a:f8:
2f:77:b1:55:d4:e8:d4:66:a7:9a:22:b9:cf:f2:c4:bf:01:15:
e4:c9:52:1a:3b:a1:9a:ff:07:bc:23:ca:1d:77:d2:94:76:70:
7a:ec:16:bd:ea:eb:84:43:20:1b:a0:7e:1d:c1:aa:95:04:06:
dc:5e:92:13:28:5e:bb:32:32:4e:45:2d:89:3f:85:d2:16:5e:
f6:5f:aa:73:6b:ab:53:b6:59:22:9a:60:d2:b4:e3:8e:7d:18:
53:5d:80:95:fd:4b:0d:22:96:ec:f1:b0:53:9f:d2:a3:56:52:
a9:22:be:a5:2d:09:c3:a8:8f:53:08:58:51:fe:75:d6:6c:ff:
8c:57:38:c9:03:79:c5:55:4d:35:af:8a:ea:61:f8:0a:2f:ea:
c3:80:87:d0:f0:5c:d4:cb:32:0f:bc:3c:0c:6d:9a:2e:e3:98:
78:b4:5c:65:89:8c:e4:03:85:0c:f6:ee:d0:7c:e2:94:ee:9c:
98:ae:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:37 2026 by rpki-client