Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/DD41A65C8AA111F1BCA8F8CBCE1D38B0.roa
File: DD41A65C8AA111F1BCA8F8CBCE1D38B0.roa (raw, json)
Hash identifier: Qm98hzHXsXZ9Nj80aHw72/kljCZGjn/Y5lt9OaYsxK4=
Subject key identifier: F2:75:D7:82:36:B6:42:26:5D:C4:24:EF:AA:FB:4F:1E:F8:68:16:E0
Certificate issuer: /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial: 0782
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/DD41A65C8AA111F1BCA8F8CBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 16:32:03 +0000
ROA not before: Tue 28 Jul 2026 16:31:59 +0000
ROA not after: Tue 17 Nov 2026 16:31:59 +0000
asID: 328808
IP address blocks: 102.217.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Validity
Not Before: Jul 28 16:31:59 2026 GMT
Not After : Nov 17 16:31:59 2026 GMT
Subject: CN=6a68d983-ba2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:a0:22:cd:41:4a:19:3b:c6:e2:03:f1:00:
9f:bb:98:95:99:49:7a:04:9a:f6:b5:0e:7d:ef:33:
53:0b:43:22:7f:d0:5f:82:95:8d:9b:06:1b:ec:5b:
b4:d8:a7:26:ca:76:df:d3:54:fd:c1:de:25:ea:8f:
e9:38:e6:95:b1:9e:4d:87:ee:7a:fb:30:5e:92:1f:
a8:ae:a4:87:dc:07:0c:cd:fc:07:c8:3f:df:d8:ad:
d0:2b:85:a3:b4:e4:c2:59:99:4e:b6:00:4e:c2:25:
86:fb:ae:e6:ea:37:1c:1d:89:5b:0e:a7:0a:83:01:
bc:cb:38:16:80:29:e8:4f:59:49:c5:7a:23:34:40:
42:5a:ec:39:28:c0:59:b2:f4:e6:ea:8c:45:23:1a:
07:67:99:95:2e:04:65:06:3a:a4:64:fd:b2:18:57:
74:b4:97:2f:9b:7b:c2:46:a3:0d:40:44:f5:71:b5:
bb:72:48:48:49:d2:c0:aa:f2:12:9a:c4:d7:8a:92:
dc:08:bf:da:72:4b:2c:16:37:5a:df:40:28:a0:44:
d0:c6:9c:db:d1:f5:a6:6c:46:38:7c:73:3e:2f:e5:
75:42:2f:30:db:56:1c:14:4b:50:32:df:c9:41:9d:
57:bf:56:c7:83:3e:9e:27:75:10:e7:8a:75:53:45:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:D7:82:36:B6:42:26:5D:C4:24:EF:AA:FB:4F:1E:F8:68:16:E0
X509v3 Authority Key Identifier:
keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/DD41A65C8AA111F1BCA8F8CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:e1:ed:bc:8f:d5:ee:9b:8e:0f:a2:62:36:b4:52:5d:01:0f:
55:36:4f:43:3d:f9:76:44:55:db:31:86:a2:3b:d8:a0:e5:e0:
5a:90:65:1a:07:11:e1:13:bb:c3:9c:16:8b:be:5f:a1:a1:6d:
29:64:57:67:62:c5:4d:81:43:89:1b:5c:e9:4a:f9:bb:35:e4:
06:67:ed:52:e9:20:1b:81:e6:89:4e:1d:be:e4:f6:5c:0a:5d:
4e:2f:a4:67:1d:c5:e0:52:3d:8f:ae:98:e1:1d:02:74:40:37:
e7:83:33:8e:59:43:e6:f8:6e:7c:c3:92:49:7b:d7:2d:50:01:
21:f6:b9:6f:df:a3:e7:7c:d2:d1:68:53:50:43:f6:7c:ea:09:
36:09:47:90:b8:3d:ab:81:5a:98:9c:f4:93:f5:43:17:de:dd:
41:ee:d2:59:a3:f1:ad:b1:7a:4a:97:15:11:40:c4:8a:5f:48:
6d:35:55:70:f6:a7:75:85:7f:18:4b:d4:27:25:3a:7b:43:16:
1c:6e:0b:83:3c:7a:82:c2:75:17:65:59:e2:cf:2c:37:3e:b7:
21:f8:47:3b:8c:1e:f9:cf:60:f6:d0:57:0f:08:2c:c2:30:d1:
41:a0:a0:dc:53:83:eb:a0:00:f4:9d:07:41:32:45:03:92:13:
c7:5e:46:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDOEFBRjExMC8GA1UEBRMoRkY4RUQyOTJCQUJCMkY4NjQwRUU0NkYxQjM1OTE2
NEI4MDUzOEY1NTAeFw0yNjA3MjgxNjMxNTlaFw0yNjExMTcxNjMxNTlaMBgxFjAU
BgNVBAMTDTZhNjhkOTgzLWJhMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM3aAizUFKGTvG4gPxAJ+7mJWZSXoEmva1Dn3vM1MLQyJ/0F+ClY2bBhvs
W7TYpybKdt/TVP3B3iXqj+k45pWxnk2H7nr7MF6SH6iupIfcBwzN/AfIP9/YrdAr
haO05MJZmU62AE7CJYb7rubqNxwdiVsOpwqDAbzLOBaAKehPWUnFeiM0QEJa7Dko
wFmy9ObqjEUjGgdnmZUuBGUGOqRk/bIYV3S0ly+be8JGow1ARPVxtbtySEhJ0sCq
8hKaxNeKktwIv9pySywWN1rfQCigRNDGnNvR9aZsRjh8cz4v5XVCLzDbVhwUS1Ay
38lBnVe/VseDPp4ndRDninVTRam1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8nXX
gja2QiZdxCTvqvtPHvhoFuAwHwYDVR0jBBgwFoAU/47Skrq7L4ZA7kbxs1kWS4BT
j1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzhBLzBFNEU2ODM4RDNGMTExRUJCMEYxMkUxOEY4QUVBMjI4L180N1Nr
cnE3TDRaQTdrYnhzMWtXUzRCVGoxVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL180N1NrcnE3TDRaQTdrYnhzMWtXUzRCVGoxVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzhBLzBFNEU2ODM4RDNGMTExRUJCMEYxMkUxOEY4
QUVBMjI4L0RENDFBNjVDOEFBMTExRjFCQ0E4RjhDQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2fQwDQYJKoZIhvcNAQEL
BQADggEBAArh7byP1e6bjg+iYja0Ul0BD1U2T0M9+XZEVdsxhqI72KDl4FqQZRoH
EeETu8OcFou+X6GhbSlkV2dixU2BQ4kbXOlK+bs15AZn7VLpIBuB5olOHb7k9lwK
XU4vpGcdxeBSPY+umOEdAnRAN+eDM45ZQ+b4bnzDkkl71y1QASH2uW/fo+d80tFo
U1BD9nzqCTYJR5C4PauBWpic9JP1Qxfe3UHu0lmj8a2xekqXFRFAxIpfSG01VXD2
p3WFfxhL1CclOntDFhxuC4M8eoLCdRdlWeLPLDc+tyH4RzuMHvnPYPbQVw8ILMIw
0UGgoNxTg+ugAPSdB0EyRQOSE8deRsM=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:25:02 2026 by rpki-client