Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/91B9A1AE5B3911F1BC67CFA9CE1D38B0.roa
File: 91B9A1AE5B3911F1BC67CFA9CE1D38B0.roa (raw, json)
Hash identifier: NE0BNN+6YauOQh4d8YGr79gCcioMJe/c9Md1hyxaS7k=
Subject key identifier: 62:8E:B2:BC:23:EE:47:3E:7E:9F:73:77:9D:7D:0F:F7:65:02:86:BF
Certificate issuer: /CN=F369974AAF/serialNumber=3C25E424E3C98588A9141957151FD198B8E2301A
Certificate serial: 07
Authority key identifier: 3C:25:E4:24:E3:C9:85:88:A9:14:19:57:15:1F:D1:98:B8:E2:30:1A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/91B9A1AE5B3911F1BC67CFA9CE1D38B0.roa
Signing time: Fri 29 May 2026 08:37:04 +0000
ROA not before: Fri 29 May 2026 08:36:59 +0000
ROA not after: Thu 29 May 2036 08:36:59 +0000
asID: 327791
IP address blocks: 102.69.184.0/21 maxlen: 24
102.207.124.0/22 maxlen: 24
102.211.48.0/22 maxlen: 24
102.219.156.0/22 maxlen: 24
196.43.231.0/24 maxlen: 24
196.216.215.0/24 maxlen: 24
2c0f:7f40::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.crl
rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369974AAF, serialNumber=3C25E424E3C98588A9141957151FD198B8E2301A
Validity
Not Before: May 29 08:36:59 2026 GMT
Not After : May 29 08:36:59 2036 GMT
Subject: CN=6a195030-c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:0d:96:f9:09:45:3e:a6:69:25:47:e9:fa:
3b:04:a2:18:1f:6a:b0:50:14:2d:8f:52:c2:84:19:
10:c5:57:1c:80:65:b7:06:11:7b:56:80:59:cf:a9:
2f:51:11:17:ea:9a:96:b2:8d:23:17:bb:7a:f6:bd:
b7:07:a1:6f:75:19:79:5b:a5:a7:51:e0:2c:6f:4b:
6d:b1:8b:fa:a4:bc:b3:8a:2a:90:0c:d7:90:af:b2:
a4:57:7e:09:35:e7:4f:d4:a2:0d:ff:19:5f:84:b8:
07:7d:66:45:20:dc:5d:13:84:7c:d6:bb:1a:b2:b9:
26:93:8b:b8:4b:69:8a:37:d0:f8:36:6b:29:3d:b3:
88:de:55:15:98:6b:d7:9c:19:4b:39:8d:30:df:46:
3c:18:18:da:c8:4d:ae:6c:08:12:05:32:0b:7d:4a:
55:79:93:89:38:3f:88:20:74:46:a3:56:f9:be:5f:
2f:d8:f7:2a:d0:c4:03:32:17:9d:6b:dc:b2:39:f6:
3a:e7:92:4c:ca:62:de:bd:0d:48:d2:a3:06:22:c6:
14:50:3c:66:46:75:f3:30:35:b3:5d:ba:f1:08:a6:
66:57:2c:66:a6:e2:83:a1:22:fc:8c:4f:88:0f:22:
38:7c:71:53:12:9d:9a:ad:57:97:aa:9e:42:4b:f3:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:B2:BC:23:EE:47:3E:7E:9F:73:77:9D:7D:0F:F7:65:02:86:BF
X509v3 Authority Key Identifier:
keyid:3C:25:E4:24:E3:C9:85:88:A9:14:19:57:15:1F:D1:98:B8:E2:30:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/91B9A1AE5B3911F1BC67CFA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.184.0/21
102.207.124.0/22
102.211.48.0/22
102.219.156.0/22
196.43.231.0/24
196.216.215.0/24
IPv6:
2c0f:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
11:44:c7:53:23:12:b0:d8:c8:f2:b9:0b:4e:bb:47:82:36:dc:
b3:93:82:a7:d5:42:fb:d3:bd:b6:5a:ed:16:19:61:03:9c:19:
ae:28:cf:8b:96:c0:fb:43:c0:61:f8:47:be:c0:03:07:80:13:
18:26:ad:2b:1f:25:fa:74:0d:8b:db:1d:86:d0:0c:53:d8:2e:
04:0e:04:31:af:ad:17:c4:c1:e7:bb:38:4e:70:bb:b6:ae:f8:
c8:ce:15:ab:42:b0:05:e8:84:6a:73:3c:7b:21:9b:e8:8d:9b:
5e:8a:7c:e2:d1:06:8d:1e:c6:6d:4c:25:89:72:f5:71:97:08:
fb:0b:49:0b:d0:dd:bc:6b:e2:4b:76:74:92:5a:81:99:6e:7a:
cd:09:2e:eb:40:79:41:f8:fb:21:61:3b:9f:ab:85:55:98:00:
b4:9a:09:98:5e:f7:5c:e0:0e:32:af:37:a7:da:83:0c:63:53:
44:72:91:ab:18:42:6f:81:f7:c9:9b:f7:b4:73:04:a5:58:dd:
3c:c2:3b:61:e1:68:59:b8:a6:4f:02:94:ed:9f:04:42:8f:a8:
f2:49:35:2a:a0:36:76:dc:a6:b9:db:41:8a:9f:25:40:a9:46:
9e:c3:64:17:4c:56:08:ef:4f:d4:69:68:13:4a:07:ed:1a:f9:
78:33:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:56 2026 by rpki-client