Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/6707E92063FE11F18E4F77F5CE1D38B0.roa
File: 6707E92063FE11F18E4F77F5CE1D38B0.roa (raw, json)
Hash identifier: Mbiya0jc46golC3r0vHLc0oTgvNsMn+R43Ns9ZWPs90=
Subject key identifier: 79:6C:B5:16:F1:C0:57:78:93:35:98:0B:8A:85:59:5B:E4:F7:EF:1C
Certificate issuer: /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial: 09EF
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/6707E92063FE11F18E4F77F5CE1D38B0.roa
Signing time: Tue 09 Jun 2026 12:26:13 +0000
ROA not before: Tue 09 Jun 2026 12:26:08 +0000
ROA not after: Wed 11 Jun 2036 12:26:08 +0000
asID: 328512
IP address blocks: 102.64.16.0/20 maxlen: 24
102.202.172.0/22 maxlen: 24
102.205.116.0/22 maxlen: 24
2c0f:edf8::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Validity
Not Before: Jun 9 12:26:08 2026 GMT
Not After : Jun 11 12:26:08 2036 GMT
Subject: CN=6a280665-615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:ef:b0:cb:06:3f:3f:b6:6d:57:b8:a3:41:
12:8b:67:15:e6:89:40:7d:db:72:f3:f7:66:34:1d:
72:4a:9b:83:37:a4:be:06:14:bd:10:34:6c:f7:1e:
87:d5:e7:25:21:43:35:0f:c0:33:13:4b:ae:98:94:
70:66:ab:1a:15:c8:ac:64:ec:48:6e:b6:d5:ff:6a:
85:2f:9b:0d:6e:ff:41:6d:f7:a2:10:fc:7e:f0:e1:
2e:73:6c:16:80:96:92:0a:cb:b4:4f:43:80:f5:98:
3c:d4:2a:64:5c:4a:09:fe:a8:68:93:a6:56:ee:70:
26:53:08:cb:b6:e0:09:68:25:a2:43:e1:da:e4:a8:
2c:ff:e5:4c:7c:77:7d:33:2e:a9:0a:a5:72:bd:d8:
72:08:16:d8:b9:3b:74:3d:a8:d9:37:56:0a:59:34:
34:c7:ac:f5:be:57:a2:d5:96:d4:23:5f:7b:d1:17:
2c:d1:1e:6f:66:9d:11:11:c5:24:1a:5b:7e:d6:43:
eb:73:37:2c:2a:df:2a:d5:05:3a:06:f5:05:40:76:
25:2c:9f:95:ac:a9:0a:16:97:ab:5b:cb:19:c3:b7:
6a:2e:ca:eb:5f:62:9c:34:8d:7e:cc:36:2c:47:af:
58:73:f3:c2:f9:5f:c8:93:88:ba:62:94:52:b8:c4:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6C:B5:16:F1:C0:57:78:93:35:98:0B:8A:85:59:5B:E4:F7:EF:1C
X509v3 Authority Key Identifier:
keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/6707E92063FE11F18E4F77F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.16.0/20
102.202.172.0/22
102.205.116.0/22
IPv6:
2c0f:edf8::/32
Signature Algorithm: sha256WithRSAEncryption
10:a5:27:d4:b8:82:1e:8d:9a:df:59:b6:0c:31:86:44:0d:70:
f4:39:e8:23:79:5d:11:a5:c8:f9:2a:ae:49:00:05:c4:77:0e:
9a:54:dc:3d:16:7c:6a:d3:bb:68:58:5c:3f:a4:38:1b:6a:56:
c4:0a:12:e7:d1:fa:2b:dc:53:cf:ed:88:2b:be:d4:14:55:ee:
9d:5f:6d:e6:a6:64:f9:ed:75:4e:ce:2c:5c:04:15:4f:c0:2f:
0e:e9:6e:b3:72:78:c2:25:4d:f9:b5:78:17:b4:ba:fe:0e:7e:
8e:b4:2e:7c:a8:69:05:c9:ba:3e:18:aa:9d:84:59:f3:c1:01:
d2:45:51:d2:a0:6d:0c:56:b4:60:50:3f:8c:be:c9:66:a6:8e:
78:64:d4:12:8b:6b:d4:a4:d8:85:34:c7:9b:7d:53:f9:1a:64:
23:4a:df:3f:87:0a:34:21:f0:ae:3c:6d:ef:40:d0:c0:37:25:
d7:f6:9f:05:59:20:d9:11:27:86:ac:37:35:98:91:45:2e:b5:
6a:bf:a1:22:0f:27:01:b5:a3:58:30:3e:50:63:0c:23:e2:7b:
a9:ce:3a:34:9a:34:2c:35:4e:e0:07:ce:79:fd:3b:3b:3d:30:
a3:1a:22:d9:2d:a8:7e:dd:30:a2:fa:58:05:69:dc:fd:01:cf:
bc:6a:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:45 2026 by rpki-client