Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/404E071063F411F1A98E55BCCE1D38B0.roa
File: 404E071063F411F1A98E55BCCE1D38B0.roa (raw, json)
Hash identifier: x/az9RVi7JNu/6hWg7qRpq/QSG0Fq0eC4gzic2/aptY=
Subject key identifier: F1:DF:A6:E1:1A:91:37:76:5C:A6:38:E6:C0:C7:FA:40:BC:BF:39:09
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 0632
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/404E071063F411F1A98E55BCCE1D38B0.roa
Signing time: Tue 09 Jun 2026 11:13:33 +0000
ROA not before: Tue 09 Jun 2026 11:13:28 +0000
ROA not after: Tue 31 Dec 2030 11:13:28 +0000
asID: 25818
IP address blocks: 102.177.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1586 (0x632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 11:13:28 2026 GMT
Not After : Dec 31 11:13:28 2030 GMT
Subject: CN=6a27f55d-5eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:d9:c0:c6:52:12:fc:17:f6:14:7a:13:85:
a7:33:dd:b5:03:54:d6:2a:07:21:45:df:e1:30:fe:
b8:fb:f8:3d:9f:2a:9e:4e:ad:3f:94:84:ba:04:e2:
7a:9d:95:ed:5f:4d:3e:f1:23:69:7b:21:da:44:14:
e3:3f:58:98:82:38:b3:d0:93:a3:b5:80:04:e7:44:
77:3c:27:7b:a3:e4:9f:a1:e2:7c:e4:cc:93:23:cd:
c1:84:75:8d:29:5d:a6:73:ef:e3:a9:61:43:70:36:
cb:3b:cd:0a:d4:7e:c7:6d:4b:01:e7:5f:d5:48:b2:
2f:62:93:7d:a4:42:98:b6:43:44:8e:5b:2c:33:85:
fd:09:16:f2:7c:57:d5:33:c7:e7:b4:3c:7a:6e:ac:
a1:9c:94:20:e6:05:f1:44:f0:1d:2a:57:7b:3e:27:
82:63:87:9c:ab:58:50:57:4a:a8:4f:b3:ab:a1:b4:
ab:36:0a:b9:8f:df:96:cb:2a:97:08:2a:25:b1:a7:
93:2d:f3:8d:bf:17:85:a4:f1:5d:ff:8f:75:ef:cb:
6b:29:3b:90:5f:cc:3c:a7:ea:1d:3a:77:90:f2:e8:
0c:24:ad:f1:00:8e:af:f9:9b:60:a7:ab:93:94:c3:
89:09:5e:58:17:79:d7:cc:fb:ab:15:87:16:5e:cf:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:A6:E1:1A:91:37:76:5C:A6:38:E6:C0:C7:FA:40:BC:BF:39:09
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/404E071063F411F1A98E55BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.116.0/24
Signature Algorithm: sha256WithRSAEncryption
59:24:9b:d4:1a:95:f0:6a:97:d8:b0:5a:75:fc:d7:5f:eb:d4:
b4:a4:2d:c3:1d:ea:43:3a:c6:10:92:21:26:81:43:ed:32:ee:
f8:84:60:f6:41:5d:7b:fd:b5:71:06:45:c1:20:c5:7c:a0:d8:
ba:b9:bd:85:92:77:dd:e3:84:ef:5b:a9:3d:b4:63:64:ed:54:
1e:42:c0:5a:41:48:13:a8:0b:b8:bb:70:08:e1:de:0a:31:be:
05:ea:cc:d9:d9:8c:7d:59:43:de:f6:f5:3e:df:cc:7b:48:5c:
d6:61:e5:64:e2:7a:16:b5:a5:6d:46:a8:31:4d:a9:cc:e0:f9:
a4:3c:88:da:e9:d3:24:f3:86:00:39:58:b3:c6:ce:b5:f6:1f:
ac:c5:16:b5:56:53:09:14:a1:84:0d:91:fd:5d:25:94:c0:cb:
25:5d:eb:c3:b4:6f:18:65:74:7e:06:f1:e1:c3:e5:59:18:a9:
e2:c8:b9:e3:31:aa:74:ae:3a:e4:2b:90:aa:b1:56:76:8a:a6:
54:1b:f8:2d:99:b7:73:30:81:da:e8:24:63:6c:bf:4a:38:95:
44:83:5c:6d:ce:b4:02:aa:64:07:48:e4:6d:4a:61:2f:aa:eb:
2c:93:32:5d:04:bb:4f:90:c6:eb:da:04:e7:05:a4:88:e9:1c:
f8:62:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:39 2026 by rpki-client