Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/7AE13C2C63F311F195507DB6CE1D38B0.roa
File: 7AE13C2C63F311F195507DB6CE1D38B0.roa (raw, json)
Hash identifier: 4D0rGp2zfFCRNZAlK+377CPDM7y7kdeaPeJQfc7g1FY=
Subject key identifier: B9:91:9E:50:28:3E:F3:D3:B0:3D:DC:DA:DF:1E:79:EA:AB:19:C9:BF
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 062F
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/7AE13C2C63F311F195507DB6CE1D38B0.roa
Signing time: Tue 09 Jun 2026 11:08:02 +0000
ROA not before: Tue 09 Jun 2026 11:07:57 +0000
ROA not after: Tue 31 Dec 2030 11:07:57 +0000
asID: 25818
IP address blocks: 102.64.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 11:07:57 2026 GMT
Not After : Dec 31 11:07:57 2030 GMT
Subject: CN=6a27f412-0a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:5c:87:4e:6f:41:58:1d:2e:07:96:58:2a:
3a:5f:cb:b9:12:7b:01:1d:dd:38:c7:37:a0:67:ca:
67:c2:20:05:fe:36:12:7a:29:75:4f:2e:bf:ae:e1:
ea:13:eb:4c:c4:06:29:da:dd:4a:10:ef:20:58:77:
bc:21:a8:fe:4d:1c:6c:e1:33:36:2c:e8:69:fc:69:
f6:01:35:b0:ad:6e:49:5a:f2:aa:79:fe:82:e8:a5:
97:68:6d:86:4f:b9:73:82:76:bd:08:27:6d:a2:62:
0f:fb:21:df:8c:75:dc:48:2f:0e:db:4b:ad:8a:3b:
64:ac:08:5d:6a:58:34:8a:49:e6:1d:50:9e:56:9f:
8d:16:d4:5a:43:1e:51:0e:fe:b6:ab:11:cf:15:e9:
a3:07:47:c8:bf:a7:14:a8:e4:a4:1c:9b:00:b1:32:
9b:23:86:ab:ea:7c:f9:da:f0:a2:f8:a0:37:7d:5e:
ca:26:0e:4a:29:a0:90:83:5a:bd:2f:79:04:25:7e:
7a:53:7e:f7:dd:f3:02:2a:5a:6a:99:25:0e:ba:31:
68:8c:63:ce:06:0e:bd:ff:0b:e0:b5:71:3e:da:23:
50:e6:8a:95:a6:2c:70:e2:23:e2:f9:eb:9b:88:7e:
6d:61:e3:8b:fe:93:1f:3e:99:3c:19:10:88:f6:06:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:9E:50:28:3E:F3:D3:B0:3D:DC:DA:DF:1E:79:EA:AB:19:C9:BF
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/7AE13C2C63F311F195507DB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.96.0/20
Signature Algorithm: sha256WithRSAEncryption
31:70:28:e8:82:0a:3b:f6:d3:92:c2:cb:90:55:b6:82:02:c7:
9b:9e:7f:e3:16:63:58:4d:23:8a:1f:19:9e:6a:53:fe:74:db:
a4:1a:09:fa:68:a3:d8:b2:1e:e1:58:35:4d:36:27:de:16:21:
0e:2c:d9:98:dd:bf:b4:b7:c2:53:26:76:5d:3e:5b:aa:68:b1:
f5:b1:e2:de:55:6b:c5:ae:36:00:91:37:17:64:43:e7:15:9a:
37:d7:cc:06:97:6a:d6:6b:d7:aa:97:89:2e:d8:56:67:17:1e:
d1:5c:34:81:8a:bd:c2:b7:e7:0a:b8:6d:7f:b6:89:85:86:93:
6c:cb:73:98:6d:65:fb:d0:5c:16:fe:c3:eb:4c:42:77:74:47:
b8:f1:7c:51:02:bf:33:42:34:21:68:99:b6:ca:3c:52:67:83:
20:a8:1f:72:42:d1:26:38:c6:74:04:9d:d1:89:f3:dc:23:13:
e1:16:69:c8:13:73:4b:96:b0:d1:b6:3f:c3:8a:d1:44:11:dd:
2a:f1:cf:8e:4f:6d:a9:06:fd:13:b1:6e:a5:e5:e2:43:62:4a:
79:b5:31:e6:58:da:84:da:fc:e8:bb:f6:80:e7:d1:6f:ed:20:
7f:86:03:c5:f7:92:4d:28:9a:aa:9f:4b:64:db:1d:ef:ca:9c:
de:ff:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:41 2026 by rpki-client