Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/FF757B4E2CDD11F19B6540A8DAE4EC9C.roa
File: FF757B4E2CDD11F19B6540A8DAE4EC9C.roa (raw, json)
Hash identifier: 5UlL0ZRX7x5wQWu7za/SUcPB92F6HJ1BFe+lS7nnTtc=
Subject key identifier: E4:48:CE:81:A6:B5:E4:F4:07:4A:A4:B8:F6:A7:BC:0C:C6:A5:07:E8
Certificate issuer: /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial: 06E3
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/FF757B4E2CDD11F19B6540A8DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 08:45:41 +0000
ROA not before: Tue 31 Mar 2026 08:45:37 +0000
ROA not after: Mon 31 Mar 2036 08:45:37 +0000
asID: 328210
IP address blocks: 102.128.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 02:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Validity
Not Before: Mar 31 08:45:37 2026 GMT
Not After : Mar 31 08:45:37 2036 GMT
Subject: CN=69cb89b5-0e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:38:3e:0e:74:0a:8d:8a:d0:ae:a1:3f:93:
9a:0f:dd:fc:0e:73:3c:76:45:b1:b4:64:fb:5d:2d:
92:57:5b:d9:bf:7e:50:be:99:93:48:9a:08:46:93:
86:ce:8b:b6:5b:30:43:7c:a7:e7:db:56:47:1f:56:
dd:8a:01:97:26:74:15:0f:85:35:05:ed:f1:19:42:
4d:b7:eb:e6:0d:aa:86:4e:85:ee:4e:52:8c:65:ad:
1a:23:97:b7:23:cf:a1:85:75:6e:b1:3f:87:d1:68:
c7:f4:67:a7:55:f2:ae:36:80:6e:0e:5f:d8:02:89:
6b:07:3b:fe:84:a9:48:93:6b:cf:68:7f:57:31:99:
d7:d5:96:43:5e:92:bc:f3:94:25:b2:33:cb:1b:0c:
65:73:a4:3b:42:5e:a5:59:db:5f:d7:1f:06:c2:84:
37:2b:1b:80:36:c8:10:f6:f6:61:a1:27:39:be:67:
a6:dd:46:ed:4b:ff:7f:51:98:23:70:cf:37:f4:d7:
ed:95:fb:fc:21:75:33:a2:a6:f8:d8:65:c3:98:52:
50:f2:c1:e4:e8:ff:88:21:40:22:68:91:8f:42:2f:
e7:f5:d6:41:13:5f:21:a6:d7:5f:cc:5b:49:ab:46:
71:3d:05:e1:c2:81:b6:46:b3:17:e2:e1:9b:99:56:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:CE:81:A6:B5:E4:F4:07:4A:A4:B8:F6:A7:BC:0C:C6:A5:07:E8
X509v3 Authority Key Identifier:
keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/FF757B4E2CDD11F19B6540A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.144.0/20
Signature Algorithm: sha256WithRSAEncryption
19:ac:ad:eb:70:15:0e:82:b8:4f:84:72:bf:df:a8:ec:fe:7b:
c9:1e:05:8d:58:b5:03:d5:f6:1e:4d:d7:7b:35:9a:56:ee:ac:
35:cc:77:55:30:54:ea:1d:91:03:e2:c8:63:4f:56:57:07:99:
ca:1f:5e:10:61:d8:a3:4e:9e:be:80:8f:2c:69:09:8f:e3:6f:
af:57:87:af:45:a9:f6:f7:e2:69:5c:0f:e7:59:6f:e4:b7:5b:
b7:80:2c:e9:44:df:09:38:71:cd:49:f7:4a:1d:39:5e:97:74:
a3:7f:a5:f1:36:be:6b:d1:9b:f7:1a:44:a5:fd:91:b9:1a:72:
35:2a:79:43:e4:e4:5b:01:df:fc:0b:a7:48:8f:83:7f:6c:a8:
a4:3b:13:e1:0d:f0:e4:4b:fc:db:46:f8:d6:18:e0:a6:b6:ec:
7c:1e:d1:c6:cc:47:41:55:e6:38:a3:55:7c:d6:37:03:98:3d:
b4:83:bf:22:73:68:e6:43:99:d1:31:a4:d4:12:d4:1a:dc:4b:
e3:54:43:8b:e4:a3:9e:5c:a4:a0:df:8c:48:b5:a9:66:60:e7:
24:f9:0e:0b:94:03:26:38:ec:48:b0:2a:60:1e:27:19:f3:18:
97:4e:1a:16:89:40:6d:35:0a:0e:df:a3:38:30:22:ad:0f:1c:
b8:f0:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:06 2026 by rpki-client