Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/AF1F9EB88AA211F1A6F615D0CE1D38B0.roa
File: AF1F9EB88AA211F1A6F615D0CE1D38B0.roa (raw, json)
Hash identifier: Kbztytj392WGdq9WMTQvMW9vcsVoTMuwASAGFgpLIZY=
Subject key identifier: 1C:BA:B4:7E:6D:72:18:C1:FD:85:E6:9B:EB:D0:87:56:AB:68:A3:3C
Certificate issuer: /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial: 0786
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/AF1F9EB88AA211F1A6F615D0CE1D38B0.roa
Signing time: Tue 28 Jul 2026 16:37:55 +0000
ROA not before: Tue 28 Jul 2026 16:37:52 +0000
ROA not after: Thu 19 Aug 2027 16:37:52 +0000
asID: 328808
IP address blocks: 102.217.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Validity
Not Before: Jul 28 16:37:52 2026 GMT
Not After : Aug 19 16:37:52 2027 GMT
Subject: CN=6a68dae3-de43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:c4:ec:cc:5e:1c:c7:88:d5:40:3e:d8:e2:
ec:85:6f:e7:c2:5a:e0:ee:e3:05:c1:94:a9:17:81:
62:14:01:e1:a5:3b:ff:48:ad:a4:d3:35:14:63:2b:
c7:a5:f0:8b:8d:a7:40:de:06:47:b1:7c:b8:73:14:
58:5c:c8:61:74:98:24:4a:0a:58:9b:68:43:d1:08:
80:a7:51:98:c6:fb:eb:d0:3a:57:67:ad:b7:7f:6c:
d0:15:b4:9d:ad:c9:76:b6:a1:77:4e:3b:1d:87:61:
f2:11:35:79:ab:8e:14:08:ae:58:2a:55:f1:e0:43:
56:f3:eb:ab:f6:91:6a:b0:10:c8:a6:45:d5:ba:fb:
2d:fe:cb:4d:e2:0c:72:f7:4f:e0:35:ad:f9:d4:b7:
d3:94:43:4c:f5:d2:ee:5a:3f:3f:45:35:b6:13:9f:
fe:99:fb:26:bc:31:d8:ec:94:71:c6:30:96:ca:ac:
82:29:2d:e5:ff:4a:ac:2d:18:42:73:96:fe:01:00:
f1:6b:55:94:4b:13:94:0f:5b:14:03:3a:f3:49:93:
b0:eb:92:11:8a:59:8c:a8:11:ec:cd:b3:24:b7:28:
c5:df:3e:6d:b4:46:2c:b3:2a:d0:5a:49:29:f0:de:
c2:ab:4f:ac:4e:96:5e:57:40:f7:ea:b7:28:61:09:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:B4:7E:6D:72:18:C1:FD:85:E6:9B:EB:D0:87:56:AB:68:A3:3C
X509v3 Authority Key Identifier:
keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/AF1F9EB88AA211F1A6F615D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.244.0/22
Signature Algorithm: sha256WithRSAEncryption
87:af:94:1e:b6:50:35:8e:2d:db:40:14:2e:f7:24:2b:89:78:
21:86:6d:f6:cc:88:2e:30:1f:a4:75:91:2b:62:62:db:8e:32:
5f:1b:16:5c:51:c8:10:36:0b:f3:a5:52:c1:c2:c6:76:63:b1:
9e:83:bb:bc:f3:28:7f:88:95:8f:51:e4:dd:39:90:82:90:1a:
7c:59:65:22:f8:02:21:e7:42:cf:5d:f7:51:38:df:08:c9:f0:
77:96:3d:0e:58:44:68:21:32:aa:19:0f:aa:57:27:a6:09:21:
b7:54:37:21:84:61:36:ce:27:eb:ac:75:d0:5b:19:8a:42:05:
5f:d6:bc:d0:c6:46:e4:a8:29:67:93:e3:10:6b:95:0c:c8:e5:
5b:da:c9:89:4e:aa:3d:9f:fa:66:83:53:6d:0e:1d:14:79:55:
56:33:49:b8:8f:e7:94:a3:4f:13:09:7d:b8:7d:2a:b8:d7:af:
8a:a9:9c:7e:b2:1e:4b:8b:23:5e:8c:12:8b:94:f2:67:6a:9e:
ae:e9:d4:18:36:e3:30:24:a2:95:14:8f:19:78:4a:15:e6:67:
14:04:8c:95:36:6e:0b:b1:08:35:a2:21:93:71:dc:c3:38:1a:
4e:7c:07:c3:d4:ea:06:b5:8d:14:48:b1:73:a7:d4:56:b7:ca:
6c:e3:7a:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDOEFBRjExMC8GA1UEBRMoRkY4RUQyOTJCQUJCMkY4NjQwRUU0NkYxQjM1OTE2
NEI4MDUzOEY1NTAeFw0yNjA3MjgxNjM3NTJaFw0yNzA4MTkxNjM3NTJaMBgxFjAU
BgNVBAMTDTZhNjhkYWUzLWRlNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC548TszF4cx4jVQD7Y4uyFb+fCWuDu4wXBlKkXgWIUAeGlO/9IraTTNRRj
K8el8IuNp0DeBkexfLhzFFhcyGF0mCRKClibaEPRCICnUZjG++vQOldnrbd/bNAV
tJ2tyXa2oXdOOx2HYfIRNXmrjhQIrlgqVfHgQ1bz66v2kWqwEMimRdW6+y3+y03i
DHL3T+A1rfnUt9OUQ0z10u5aPz9FNbYTn/6Z+ya8MdjslHHGMJbKrIIpLeX/Sqwt
GEJzlv4BAPFrVZRLE5QPWxQDOvNJk7DrkhGKWYyoEezNsyS3KMXfPm20RiyzKtBa
SSnw3sKrT6xOll5XQPfqtyhhCSvZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHLq0
fm1yGMH9heab69CHVqtoozwwHwYDVR0jBBgwFoAU/47Skrq7L4ZA7kbxs1kWS4BT
j1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzhBLzBFNEU2ODM4RDNGMTExRUJCMEYxMkUxOEY4QUVBMjI4L180N1Nr
cnE3TDRaQTdrYnhzMWtXUzRCVGoxVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL180N1NrcnE3TDRaQTdrYnhzMWtXUzRCVGoxVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzhBLzBFNEU2ODM4RDNGMTExRUJCMEYxMkUxOEY4
QUVBMjI4L0FGMUY5RUI4OEFBMjExRjFBNkY2MTVEMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2fQwDQYJKoZIhvcNAQEL
BQADggEBAIevlB62UDWOLdtAFC73JCuJeCGGbfbMiC4wH6R1kStiYtuOMl8bFlxR
yBA2C/OlUsHCxnZjsZ6Du7zzKH+IlY9R5N05kIKQGnxZZSL4AiHnQs9d91E43wjJ
8HeWPQ5YRGghMqoZD6pXJ6YJIbdUNyGEYTbOJ+usddBbGYpCBV/WvNDGRuSoKWeT
4xBrlQzI5VvayYlOqj2f+maDU20OHRR5VVYzSbiP55SjTxMJfbh9KrjXr4qpnH6y
HkuLI16MEouU8mdqnq7p1Bg24zAkopUUjxl4ShXmZxQEjJU2bguxCDWiIZNx3MM4
Gk58B8PU6ga1jRRIsXOn1Fa3ymzjeoU=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:15 2026 by rpki-client