Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/BD0C7DBC380D11F18A57DDC6CE1D38B0.roa
File: BD0C7DBC380D11F18A57DDC6CE1D38B0.roa (raw, json)
Hash identifier: rNqr6ePtKQX1J3H/I2YyE9KJzZOp2y7GxGrWjPkr6Co=
Subject key identifier: EB:FE:41:52:76:0E:2A:68:27:64:DB:79:EB:DF:20:8C:D4:A6:3D:B6
Certificate issuer: /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial: 06A6
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/BD0C7DBC380D11F18A57DDC6CE1D38B0.roa
Signing time: Tue 14 Apr 2026 14:25:08 +0000
ROA not before: Tue 14 Apr 2026 14:25:03 +0000
ROA not after: Sun 13 Apr 2036 14:25:03 +0000
asID: 328935
IP address blocks: 102.219.56.0/22 maxlen: 24
2c0f:7900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 02:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669277AF, serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Validity
Not Before: Apr 14 14:25:03 2026 GMT
Not After : Apr 13 14:25:03 2036 GMT
Subject: CN=69de4e44-7cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:00:24:a1:ed:ba:f5:25:7a:cb:fd:0a:2d:
cf:20:63:6c:08:50:d0:7b:b2:48:00:d1:8e:75:b0:
cf:8e:78:06:fc:91:40:bf:da:c0:54:89:fc:88:38:
fd:f5:21:c4:62:ab:89:16:59:eb:6b:5d:c7:f2:81:
64:9f:9c:9f:4b:16:2f:62:7f:29:b0:c1:d9:9c:c8:
d3:19:48:af:01:50:1d:3e:f8:10:f9:9c:59:27:1a:
b1:1a:16:1b:20:92:31:33:b8:d4:da:4b:82:c6:1e:
42:ea:c9:46:92:46:f1:b3:9f:9d:e7:99:69:1e:05:
1c:98:fa:e3:37:06:63:e4:b9:bf:3a:78:9c:53:92:
f4:ea:49:19:52:4a:21:e0:df:d3:4b:46:3f:ad:be:
76:9a:0e:2a:7b:9c:93:63:be:31:77:a8:cd:0c:e3:
59:37:82:a0:82:f5:6f:ef:d8:06:d7:10:9e:b9:3a:
ab:4e:d7:87:64:0f:95:94:de:4e:20:69:64:00:87:
e1:95:f1:30:e4:21:a4:44:43:33:c6:06:88:61:40:
0a:fa:c7:dd:de:0e:81:39:41:07:99:a6:64:ed:8b:
a1:d5:ea:66:65:c6:b5:e0:36:6b:52:2d:a2:7f:f1:
54:fb:a9:0c:f0:4d:53:c0:64:7d:80:05:a8:8b:9d:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:41:52:76:0E:2A:68:27:64:DB:79:EB:DF:20:8C:D4:A6:3D:B6
X509v3 Authority Key Identifier:
keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/BD0C7DBC380D11F18A57DDC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.56.0/22
IPv6:
2c0f:7900::/32
Signature Algorithm: sha256WithRSAEncryption
25:e5:00:1c:96:78:22:96:30:fc:04:80:55:45:d9:2d:93:38:
9f:42:15:c4:b8:b1:fa:19:7d:d9:81:a3:98:b5:a6:82:4e:7c:
17:d5:c8:f7:6c:81:98:f5:63:5f:a3:d4:22:78:b3:12:c6:09:
8d:c2:1e:5a:b8:e9:f8:66:67:34:2b:77:a0:1a:1f:f2:41:a1:
3a:73:c1:dc:e1:c0:50:35:d2:e9:ea:ae:38:66:be:ab:a9:a5:
90:0e:4e:61:7f:73:23:d3:f9:35:be:d4:3d:a1:b3:d4:16:7d:
33:f7:76:24:29:17:1f:ea:e7:4c:1e:76:64:ff:ce:f8:a4:2d:
fe:bf:44:21:34:c2:64:bd:70:04:4f:4f:e4:69:c7:af:dc:e3:
13:7a:95:77:73:08:ef:d4:f5:46:ff:99:5b:cf:ca:cb:8e:70:
75:dd:8e:a8:2a:23:e4:dd:0a:d5:93:47:e4:8d:86:e2:ea:ca:
a0:32:5c:59:28:f2:d8:2c:a4:46:02:0c:d6:ff:23:7c:17:b9:
dc:1b:17:11:4d:b0:5e:51:08:50:6f:70:43:11:a0:8b:fb:87:
6b:d1:6f:e4:e7:05:6f:d4:aa:45:f8:10:ec:79:1b:73:81:50:
8c:0e:99:0a:99:39:35:42:9b:0e:b2:ce:8f:07:21:97:66:62:
dd:24:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:19 2026 by rpki-client