Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/3F6B56B65D0711F1B227D016CF1D38B0.roa
File: 3F6B56B65D0711F1B227D016CF1D38B0.roa (raw, json)
Hash identifier: jUtRcjoVuee0qBhTJVMW1WeuK3DD+4zwQr0sc3H9Qp4=
Subject key identifier: 76:DF:F4:CA:5C:B6:88:8A:05:DA:93:1D:D2:CE:95:14:AC:BD:60:E6
Certificate issuer: /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial: 06DE
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/3F6B56B65D0711F1B227D016CF1D38B0.roa
Signing time: Sun 31 May 2026 15:41:54 +0000
ROA not before: Sun 31 May 2026 15:41:49 +0000
ROA not after: Sun 01 Jun 2031 15:41:49 +0000
asID: 329181
IP address blocks: 102.218.220.0/22 maxlen: 24
2c0f:6500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Validity
Not Before: May 31 15:41:49 2026 GMT
Not After : Jun 1 15:41:49 2031 GMT
Subject: CN=6a1c56c2-78e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:2b:20:cb:c3:e9:77:c1:be:6e:34:db:b7:
68:0f:6b:e1:f9:c0:90:ed:dd:02:83:89:c3:17:f9:
e1:ce:6d:2c:e2:dc:33:91:48:61:e6:28:af:3f:c9:
9f:6e:cd:3d:58:5b:cb:c6:ad:59:21:6e:22:55:54:
f1:60:fd:8a:56:ec:95:c3:f9:d0:af:2e:d9:06:26:
12:56:94:1b:e6:4c:c1:c4:da:f3:6d:73:8a:d9:70:
48:80:f7:52:5f:af:b2:6b:b4:1b:39:a3:d6:28:cf:
80:3e:84:94:db:dc:d2:c4:04:88:f2:c1:58:e7:c2:
3e:cd:11:82:05:67:ba:c1:6a:65:ea:3a:bf:06:ab:
c6:85:67:15:3d:f3:ac:e9:2d:b0:e0:c9:f6:f2:75:
96:50:ec:ad:9d:d9:82:49:b6:f1:a9:b0:b8:ec:3e:
6d:78:bb:24:a6:c9:f4:2c:86:e4:8c:94:a2:58:a7:
20:4c:7d:c8:9c:78:f0:7c:cf:95:5c:c4:28:e1:31:
da:51:67:d2:72:55:89:d4:80:16:d1:5a:94:15:1d:
28:88:2e:fc:d9:29:cf:41:4a:40:4b:6d:2a:a2:b1:
79:82:9a:f5:d2:f0:a8:66:da:9c:2f:53:e7:10:0e:
9e:48:ea:ff:18:27:91:fa:e1:8b:26:b2:35:21:1d:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DF:F4:CA:5C:B6:88:8A:05:DA:93:1D:D2:CE:95:14:AC:BD:60:E6
X509v3 Authority Key Identifier:
keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/3F6B56B65D0711F1B227D016CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.220.0/22
IPv6:
2c0f:6500::/32
Signature Algorithm: sha256WithRSAEncryption
09:09:85:f9:39:3c:38:63:3f:aa:04:57:42:2f:4c:98:c8:45:
42:df:1d:df:b3:cb:1b:c8:0e:86:0b:9b:87:a8:7f:d5:cd:b4:
2e:87:96:bf:46:06:39:dc:14:42:32:4d:a5:ba:eb:67:f7:bc:
39:28:b5:b5:25:d9:3b:d0:a1:4c:a9:d7:3f:f4:f2:c6:94:e1:
b9:ac:3d:6e:25:30:43:d6:67:f4:91:04:a3:8d:a6:c6:cc:96:
ea:8a:4a:83:58:d2:03:32:24:c5:b7:6d:e5:79:69:b4:be:0e:
37:a0:ea:5b:8b:4c:e1:6d:54:e0:ad:3d:49:03:ec:dc:91:d3:
01:a8:5f:a7:4c:53:95:b8:db:24:9b:95:ce:a4:73:2a:a0:f6:
6f:e2:6a:23:84:e1:bb:70:24:8b:ab:08:a2:a6:a5:8a:36:61:
be:48:50:c2:d1:0b:c8:24:20:26:8e:de:04:c0:31:54:8d:e5:
14:f0:04:d4:f9:cb:66:12:75:41:b9:3c:3a:21:02:60:68:33:
98:7c:75:d8:be:72:b0:3b:17:ac:1a:ac:5b:40:ec:08:b0:de:
6e:a3:8e:dc:d6:a6:ab:ad:f0:5a:69:f0:97:8f:34:4b:9e:f5:
09:7a:94:e7:8b:7a:dd:19:4e:6c:11:f1:24:dd:55:ad:ef:22:
0d:1a:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:58 2026 by rpki-client