Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/D57D8BEC63CE11F1B28816DCCE1D38B0.roa
File: D57D8BEC63CE11F1B28816DCCE1D38B0.roa (raw, json)
Hash identifier: uLcJX271d+ip3ZQUo1xfKYciJj55ADVEQBKeAxryfCQ=
Subject key identifier: 5A:95:3E:A1:08:82:E3:3A:40:23:63:DB:AB:A6:F1:FD:1E:C9:3C:9C
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 0611
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/D57D8BEC63CE11F1B28816DCCE1D38B0.roa
Signing time: Tue 09 Jun 2026 06:45:42 +0000
ROA not before: Tue 09 Jun 2026 06:45:38 +0000
ROA not after: Tue 31 Dec 2030 06:45:38 +0000
asID: 25818
IP address blocks: 102.177.113.0/24 maxlen: 24
2001:4210:5100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 06:45:38 2026 GMT
Not After : Dec 31 06:45:38 2030 GMT
Subject: CN=6a27b696-13a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:6d:ea:65:c1:f7:68:63:9b:fa:53:70:c0:
c2:fd:e7:dc:b2:0a:2c:9b:ca:de:12:89:65:a6:5d:
fa:77:b7:b4:ef:d0:23:f3:0e:80:eb:05:d6:8d:75:
87:7d:03:84:25:7d:23:16:7a:f9:ca:62:30:7a:0f:
0c:b9:cc:0e:e3:60:79:c9:2f:e3:98:6e:a1:ae:a0:
56:b7:91:ba:a2:81:e8:9a:b6:44:af:d3:2a:3a:f6:
2d:b1:da:90:df:83:6f:e6:cf:de:2e:fa:e3:7a:a9:
67:17:cb:4d:c4:92:5b:bd:05:41:53:ef:fd:a5:22:
7e:de:f3:77:63:92:8f:a4:87:16:34:b2:63:92:ba:
1f:2f:0e:34:ab:d4:a5:b7:8b:c6:6d:59:c6:5d:e8:
b8:fe:c3:57:f9:9b:96:85:72:a8:67:90:a1:ac:b3:
23:9c:b8:81:2b:98:c4:71:a8:4b:91:c4:dd:00:6c:
e6:17:69:f8:6a:49:90:11:49:55:42:76:f9:04:cf:
b5:fa:53:cd:0d:fa:75:80:5e:2a:80:e8:8d:d9:33:
5b:9f:81:d4:9b:22:07:aa:06:48:ab:5c:e3:aa:7d:
4d:f8:f2:a9:ef:c1:a7:68:24:d0:b4:23:ca:f2:0e:
d5:b2:71:5a:7a:f6:1e:07:8c:20:1c:95:7c:bb:43:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:3E:A1:08:82:E3:3A:40:23:63:DB:AB:A6:F1:FD:1E:C9:3C:9C
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/D57D8BEC63CE11F1B28816DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.113.0/24
IPv6:
2001:4210:5100::/40
Signature Algorithm: sha256WithRSAEncryption
c0:0d:6d:da:5a:0b:aa:48:2a:b8:7f:ea:97:7f:3f:ea:5b:12:
01:04:ac:5e:ea:ca:89:90:d7:1d:5e:0e:f0:8c:6d:9d:eb:bf:
a2:59:dc:2f:f4:81:b8:09:a3:97:58:d1:a0:c9:b9:ba:e2:38:
35:db:a7:ad:be:73:9a:28:be:43:41:8a:a5:5e:ce:d7:18:ea:
95:fc:9f:bf:ec:6c:4c:7e:35:17:36:47:64:5d:2c:13:a2:64:
a3:b1:12:64:b6:9a:85:79:23:b8:d2:79:d3:05:69:0f:b0:cc:
90:92:1e:a7:46:40:6b:13:40:76:f6:27:3a:e5:1c:6a:3d:cc:
8c:fe:e5:02:54:a9:74:5d:89:03:f7:7c:a2:9d:fd:ca:af:cd:
a1:e3:c6:bd:dd:64:cf:ba:ef:35:df:4d:80:2e:e3:6f:62:43:
fd:79:5b:5d:3b:18:c6:c2:be:00:01:88:77:ef:ec:12:f5:f5:
d2:37:59:89:43:18:dd:fe:3d:e5:60:13:3b:4f:7b:35:1b:bc:
c7:b9:51:0d:48:d6:90:bb:a8:31:60:37:99:ef:b1:d4:7d:8b:
4b:f8:e9:1f:ef:e8:33:3b:3e:91:5a:f3:fd:3b:63:cc:d2:7a:
97:46:e1:fc:23:7a:a1:2b:b7:e6:cd:f2:3d:7a:fe:21:fd:fc:
52:b9:e2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:49 2026 by rpki-client