Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/BEA919C4656B11F1A8C307A6CE1D38B0.roa
File: BEA919C4656B11F1A8C307A6CE1D38B0.roa (raw, json)
Hash identifier: uyFvxrrHoUVF5pFRmc1EEEH7IhJZrM0RVpCUzrF7KEY=
Subject key identifier: D6:76:6F:56:ED:B2:35:39:5C:84:6D:75:16:81:60:8B:AC:99:73:22
Certificate issuer: /CN=F3695C0AAF/serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Certificate serial: 04EA
Authority key identifier: E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/BEA919C4656B11F1A8C307A6CE1D38B0.roa
Signing time: Thu 11 Jun 2026 08:01:26 +0000
ROA not before: Thu 11 Jun 2026 08:01:21 +0000
ROA not after: Wed 11 Jun 2036 08:01:21 +0000
asID: 328631
IP address blocks: 102.212.148.0/22 maxlen: 24
102.219.20.0/24 maxlen: 24
2c0f:5880::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695C0AAF, serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Validity
Not Before: Jun 11 08:01:21 2026 GMT
Not After : Jun 11 08:01:21 2036 GMT
Subject: CN=6a2a6b56-8093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:78:6c:2e:f4:e8:13:cb:b1:d8:15:1f:01:
87:01:25:fc:cb:2a:60:a1:5d:6e:95:12:f9:4b:d6:
eb:85:2b:c7:37:33:0e:34:fe:db:01:d2:13:14:27:
4c:a6:44:5d:a3:e7:e0:1c:8a:11:c8:b6:e4:ca:12:
39:ec:5d:82:c3:f6:7e:22:fc:d0:53:88:f8:f3:6c:
d9:78:ef:4f:ad:c3:50:19:9f:80:ac:0d:a8:78:50:
9b:e4:73:aa:87:b0:77:39:eb:19:bf:e5:60:d3:36:
12:ad:84:13:8e:8e:87:4f:32:62:57:9a:f7:86:cf:
5d:b8:db:5b:f8:a6:7c:d9:8d:7f:a5:4b:00:f3:a9:
54:94:71:b1:20:a9:25:ae:fc:a2:86:98:91:64:17:
a4:b9:87:79:49:56:5e:9d:3b:0e:9b:26:de:3c:8e:
df:82:30:30:97:20:85:31:8b:53:bc:4c:b3:a9:64:
e3:86:e8:5e:6f:58:12:da:e3:c2:c8:15:ea:6c:a5:
ab:2b:36:71:14:56:e1:e4:ca:f0:a0:98:e0:c1:b7:
20:b6:d9:b3:a4:96:23:38:91:e2:2e:e9:4c:96:68:
1c:e7:5c:a7:8e:3d:63:ff:24:f5:f9:cf:f3:47:9a:
f0:9b:56:a9:4e:2f:11:f2:6f:51:ae:36:aa:f9:ba:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:6F:56:ED:B2:35:39:5C:84:6D:75:16:81:60:8B:AC:99:73:22
X509v3 Authority Key Identifier:
keyid:E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/BEA919C4656B11F1A8C307A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.148.0/22
102.219.20.0/24
IPv6:
2c0f:5880::/32
Signature Algorithm: sha256WithRSAEncryption
a0:50:68:81:c1:3b:0b:be:7e:48:99:02:e5:29:d9:e7:60:5e:
4c:b1:a9:35:1f:52:ca:e3:39:79:7b:a5:d5:04:6a:1e:a6:cd:
4e:0b:df:3d:c1:5b:2a:10:ae:40:5d:fa:df:c8:36:8d:4f:b9:
65:1c:6a:b5:09:cf:2e:6b:c4:71:a6:2b:39:98:b2:8b:7a:b9:
ca:72:75:47:e7:db:66:13:a7:c1:74:ed:53:fd:b1:63:47:fd:
6e:02:eb:e5:46:32:33:b5:5e:a7:39:88:3e:a6:03:ee:48:88:
f6:29:e4:27:39:b6:12:8b:04:e2:9d:00:d3:c5:74:99:e2:59:
e5:8f:93:af:7e:ce:04:e8:7e:4c:84:76:a7:de:18:cb:8b:63:
2d:42:42:a7:ed:a2:52:54:14:93:1d:b2:92:eb:0c:3e:9b:cb:
d8:37:1a:b4:0e:49:24:73:1c:21:e1:cf:97:ac:19:92:2b:ab:
de:12:ce:55:b9:33:f9:a0:5c:33:16:83:53:d7:77:dc:0c:d6:
11:ca:4a:4d:77:ef:c8:f7:68:6c:9e:33:f1:19:75:7a:14:6c:
33:02:a9:d2:43:5e:87:0b:26:d0:61:ea:6d:38:98:eb:ae:c4:
06:e5:48:96:46:12:fe:59:c1:35:82:e9:e6:ec:69:f8:37:a7:
e1:7e:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:56 2026 by rpki-client