Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/838F3E1689EE11F1981437F9CE1D38B0.roa
File: 838F3E1689EE11F1981437F9CE1D38B0.roa (raw, json)
Hash identifier: QtrXuFqWctTcL7EHXDUn/ep8FBOd86ZSMVV8IHJ9VvE=
Subject key identifier: 6F:EE:94:3F:81:7F:F6:93:98:31:D4:BA:E5:68:23:D7:DD:07:44:88
Certificate issuer: /CN=F361CA27AF/serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Certificate serial: B6
Authority key identifier: 90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/838F3E1689EE11F1981437F9CE1D38B0.roa
Signing time: Mon 27 Jul 2026 19:08:13 +0000
ROA not before: Mon 27 Jul 2026 19:08:09 +0000
ROA not after: Thu 26 Jul 2029 19:08:09 +0000
asID: 329615
IP address blocks: 102.204.208.0/24 maxlen: 24
102.204.209.0/24 maxlen: 24
102.204.210.0/24 maxlen: 24
102.204.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361CA27AF, serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Validity
Not Before: Jul 27 19:08:09 2026 GMT
Not After : Jul 26 19:08:09 2029 GMT
Subject: CN=6a67ac9d-f539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0c:ed:e4:16:de:3d:5f:a4:1e:53:ea:97:b1:
dc:47:a6:ff:07:e3:3a:7e:0b:80:cc:92:e4:4d:69:
09:16:ed:3f:3c:c6:9b:2d:1b:d6:3d:bf:4c:05:04:
4d:91:75:38:11:bd:8d:a0:fb:b8:91:51:d0:eb:38:
9a:14:70:93:fb:fa:ac:56:f9:37:36:83:06:26:1b:
1d:7e:15:fd:b0:ad:f9:5a:a1:ad:cf:ed:4f:41:a6:
ca:cf:a0:51:92:76:b0:0e:65:0e:4b:61:2e:c5:8f:
55:94:2a:06:af:fb:e7:ac:45:d4:6c:57:09:b4:7b:
31:00:69:0b:89:87:0f:b1:49:09:d2:ac:7a:cc:b5:
66:4c:75:30:bf:1b:66:6d:e6:3d:1a:ed:1a:10:92:
46:4e:9c:b3:21:3c:68:e0:97:ad:15:ef:4c:40:1c:
56:96:b6:65:bd:c8:08:70:34:a4:54:42:3a:06:cf:
15:95:b8:59:46:5f:b9:24:68:39:6c:e1:da:06:40:
d3:4d:37:67:dc:93:1d:66:6d:6b:d7:79:bc:d9:4a:
9b:91:7b:a8:8d:35:82:ea:b3:b4:74:a7:a6:7f:fe:
f5:53:ce:f7:2f:c4:4f:cc:14:03:de:95:0f:ce:64:
ed:e7:4a:c2:5a:ab:b7:b7:1f:c6:bc:92:d2:3a:f9:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EE:94:3F:81:7F:F6:93:98:31:D4:BA:E5:68:23:D7:DD:07:44:88
X509v3 Authority Key Identifier:
keyid:90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/838F3E1689EE11F1981437F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.208.0/22
Signature Algorithm: sha256WithRSAEncryption
23:dc:75:6a:47:8a:e9:5c:1f:57:01:9a:b4:18:02:03:5b:3c:
ea:24:83:40:58:b1:a3:29:60:52:3e:af:2d:17:3b:1c:12:0f:
b8:be:4d:b1:d6:3a:8e:20:fd:be:d7:aa:ea:9f:6f:b6:19:29:
a5:a8:17:f6:7c:2e:25:ff:d3:67:a2:32:0d:2a:5c:90:c6:29:
21:3b:a2:e9:73:1b:e0:85:ec:91:83:59:6d:4c:d6:17:ec:60:
ab:ca:b8:bc:92:87:9d:30:41:4e:e8:b4:5d:e1:77:61:a3:da:
52:cc:23:7e:bb:03:d1:87:1e:e8:78:90:a6:88:dc:86:f3:fc:
3b:e3:9e:26:74:2f:ef:e5:f9:c7:c8:8c:29:bc:fc:7f:42:4f:
c3:7e:d0:e4:26:dd:0d:df:e0:3c:92:90:3a:bb:78:69:97:66:
e5:12:dd:65:3d:c1:06:30:30:c1:06:de:fb:85:c9:12:ed:05:
1e:cd:31:31:bc:dc:10:ba:c8:a3:30:14:62:d0:a9:82:42:8a:
fb:76:65:15:fc:cf:0f:40:9f:45:3d:8b:35:d6:61:a9:42:d5:
3c:ba:9f:4f:ab:32:83:f9:e8:3a:cd:26:4e:77:8e:5a:b4:10:
c2:0a:f7:2b:35:18:62:90:23:a6:c8:fa:0e:73:8a:28:c4:31:
6d:ae:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:54:11 2026 by rpki-client