Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/A391BCB02D8D11F19C3681ADDAE4EC9C.roa
File: A391BCB02D8D11F19C3681ADDAE4EC9C.roa (raw, json)
Hash identifier: DPnWs+vJmIj0yEbGRTTLoEo+9Fc22evcKS2+aBsRa4g=
Subject key identifier: 09:7A:D6:B4:62:BE:16:E8:B9:87:25:9C:FE:51:2A:0F:CF:71:37:7C
Certificate issuer: /CN=F3682B3AAF/serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Certificate serial: 0416
Authority key identifier: 87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/A391BCB02D8D11F19C3681ADDAE4EC9C.roa
Signing time: Wed 01 Apr 2026 05:42:59 +0000
ROA not before: Wed 01 Apr 2026 05:42:54 +0000
ROA not after: Sun 01 Apr 2029 05:42:54 +0000
asID: 329276
IP address blocks: 102.202.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1046 (0x416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B3AAF, serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Validity
Not Before: Apr 1 05:42:54 2026 GMT
Not After : Apr 1 05:42:54 2029 GMT
Subject: CN=69ccb062-a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:75:e8:eb:5f:b9:3f:60:c6:3c:ea:4a:6e:
10:47:c7:ee:53:3a:e8:7e:c6:eb:b8:b4:c0:8c:c6:
ed:38:a1:78:39:03:68:30:0b:87:46:31:15:46:f4:
f8:95:cd:9a:8f:4d:7d:81:bc:87:79:22:dc:d6:41:
53:a4:b3:e4:b9:b9:57:e3:8a:0a:1f:bb:5b:a8:d2:
ec:80:15:05:40:4f:6f:0e:66:74:9c:b6:8e:0f:b6:
da:54:3c:01:f1:5b:48:65:9e:3e:69:98:ba:36:d1:
03:51:a2:8a:b6:f3:21:b1:8d:5f:f1:57:46:14:13:
3b:84:38:ae:d5:b9:c5:03:67:46:1a:22:0d:98:c4:
ce:15:02:d2:fd:6b:a1:2b:68:6a:b6:f7:69:6f:2e:
81:69:ab:95:d3:c9:d5:49:08:e7:ac:b0:88:15:b2:
7a:e6:4b:e6:5e:ae:ec:82:63:33:67:28:ff:6c:42:
89:1e:e5:84:46:5a:41:86:30:74:b8:ae:db:d9:3b:
98:91:8d:4a:19:e7:29:1c:36:9a:d8:a8:0a:fd:58:
39:e2:05:5c:14:33:28:18:bd:57:93:63:13:3e:cd:
d4:9b:c4:e4:e8:a8:49:f0:1c:95:80:9e:90:2e:9f:
d7:1d:66:4e:74:68:7d:94:2e:92:71:18:91:18:2e:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7A:D6:B4:62:BE:16:E8:B9:87:25:9C:FE:51:2A:0F:CF:71:37:7C
X509v3 Authority Key Identifier:
keyid:87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/A391BCB02D8D11F19C3681ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.224.0/22
Signature Algorithm: sha256WithRSAEncryption
61:e5:88:fb:1d:ab:6b:5f:2b:d0:7f:3c:ba:b7:a8:65:f4:e7:
f8:83:ce:c8:5c:48:f4:f2:64:05:74:87:71:aa:b7:9a:cf:3b:
da:8c:b8:e6:ef:1e:0d:40:4d:5b:48:12:cc:55:3e:3f:ec:5f:
15:ee:0d:fe:0b:51:92:a4:6e:b3:a2:44:40:ed:c3:6f:73:39:
c7:fb:5e:34:61:d8:7b:83:b8:13:e0:d4:fb:5e:f2:dc:a6:67:
19:6b:16:ed:d8:4c:7f:36:37:59:14:96:0c:31:b7:10:48:97:
98:81:35:e4:44:0c:1b:cb:06:65:7c:e3:58:0d:d3:2d:f4:47:
08:ef:cb:4d:27:18:22:68:b4:2c:3c:08:91:0b:3e:ce:2d:63:
ae:c9:77:c2:14:67:41:94:da:c3:35:00:2d:e0:86:cb:02:91:
6d:cb:20:1c:cf:bc:71:3e:ca:b4:a0:e2:69:eb:ac:c6:e7:05:
79:8d:ce:05:6a:e0:d7:a2:33:62:44:73:64:1d:63:90:00:c5:
c6:92:4b:a9:18:5b:db:eb:e9:ea:80:14:a2:8f:c5:db:03:1f:
f7:df:7f:e5:97:64:63:00:9f:c4:38:a7:be:a5:17:3f:2e:9f:
59:ca:90:7a:49:0d:f6:fa:7f:fc:5b:48:7f:60:7f:f8:7f:42:
fc:19:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:34 2026 by rpki-client