Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/128AAC508A8411F195DD3F18CF1D38B0.roa
File: 128AAC508A8411F195DD3F18CF1D38B0.roa (raw, json)
Hash identifier: I5ngoMtUqqiA/2cRiHgoX7EXQ1nDwLrxP5YhvCneuj4=
Subject key identifier: 01:08:5B:59:1B:48:39:09:59:6D:62:94:3D:1D:8D:4B:18:8E:B1:7D
Certificate issuer: /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial: 0615
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/128AAC508A8411F195DD3F18CF1D38B0.roa
Signing time: Tue 28 Jul 2026 12:58:48 +0000
ROA not before: Tue 28 Jul 2026 12:58:44 +0000
ROA not after: Sun 27 Jun 2032 12:58:44 +0000
asID: 328915
IP address blocks: 102.218.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Validity
Not Before: Jul 28 12:58:44 2026 GMT
Not After : Jun 27 12:58:44 2032 GMT
Subject: CN=6a68a788-398a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:c3:b9:15:85:a0:fa:5d:ec:ac:fe:aa:a5:
40:b8:67:9c:ad:e9:fa:d8:d1:92:de:f5:ec:97:70:
3a:e7:b3:1f:10:85:0e:cb:f9:68:43:89:19:1b:26:
1d:5d:44:7a:3b:45:a6:94:b5:ea:f3:f8:b4:5a:3c:
e0:ca:2d:ba:3a:ca:ff:56:41:55:7b:49:b7:0e:25:
36:a7:d3:ba:33:b1:b3:0a:77:92:61:7e:86:d1:59:
20:fd:75:45:f9:64:03:1c:00:03:c1:69:af:c7:d9:
ce:60:29:8b:aa:5e:54:4d:1f:73:7c:66:50:0d:ff:
98:fd:34:4e:c1:f2:8e:29:ba:c8:73:2f:b1:7a:c9:
37:b9:82:8b:5d:d7:38:fe:a6:b7:7b:2f:b7:62:8c:
07:c7:e0:ca:03:1a:5d:a5:3e:7c:66:be:9e:34:ef:
ee:a2:64:bf:28:f0:ee:c6:a2:df:3f:84:40:71:60:
18:83:a7:6f:38:e0:7b:97:18:51:0e:36:90:34:51:
94:c3:86:47:b7:e2:64:1e:1c:df:da:e3:73:e0:d4:
40:f9:3e:02:87:5e:47:fc:63:d5:91:9d:9c:39:a9:
3b:b6:7b:ac:bb:19:f0:ee:66:ba:be:f6:67:98:82:
d0:84:06:9b:d5:94:15:4d:cb:f6:bf:b0:7d:40:9a:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:08:5B:59:1B:48:39:09:59:6D:62:94:3D:1D:8D:4B:18:8E:B1:7D
X509v3 Authority Key Identifier:
keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/128AAC508A8411F195DD3F18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.207.0/24
Signature Algorithm: sha256WithRSAEncryption
91:13:c4:79:c4:a1:e5:44:6a:27:91:ae:c9:82:f1:b1:8a:5c:
be:8b:c9:da:11:80:94:41:fb:fb:d8:b4:94:b5:6a:85:0c:b5:
75:97:c9:7f:0d:e0:32:68:f3:40:13:ba:37:7d:6d:46:6f:75:
eb:21:12:cf:7e:25:49:fb:1f:28:be:8f:1b:c6:90:7f:81:f5:
76:dd:7b:a1:c7:d7:12:e9:94:07:65:49:78:d1:1e:31:2e:c8:
f0:5d:f7:5c:55:45:db:24:84:0e:ec:5c:a0:6e:7b:c8:41:c0:
50:ad:82:54:5c:b7:5b:41:b2:9d:c3:ea:17:9d:4b:5d:ea:db:
ec:7e:02:41:95:46:8b:8a:81:3f:36:01:e7:25:2f:4c:41:7b:
65:ab:6d:99:0a:89:3f:a9:d5:24:fd:8d:79:de:eb:2b:59:02:
97:33:4f:90:05:87:75:c9:7d:f0:fb:b5:2a:d6:ef:18:ef:5d:
bd:b0:92:55:e6:1f:4c:c9:64:b6:f9:83:bf:4b:0a:f0:42:69:
57:cf:df:0c:0c:3b:93:55:bb:c7:bf:08:91:b3:e1:f3:ba:d6:
2d:68:5f:3c:63:a2:d9:3e:97:10:62:8a:65:5c:12:cb:6c:30:
49:f0:32:a1:57:ce:0f:ec:3d:97:5c:f8:54:3a:34:22:18:28:
a9:0f:39:a7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJDNDRBRjExMC8GA1UEBRMoMkQwMDE1NEU2MDBBNjQwQUMzMkEzMjg1RDlDRTlG
QzUwQTk0MUFCMzAeFw0yNjA3MjgxMjU4NDRaFw0zMjA2MjcxMjU4NDRaMBgxFjAU
BgNVBAMTDTZhNjhhNzg4LTM5OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1VcO5FYWg+l3srP6qpUC4Z5yt6frY0ZLe9eyXcDrnsx8QhQ7L+WhDiRkb
Jh1dRHo7RaaUterz+LRaPODKLbo6yv9WQVV7SbcOJTan07ozsbMKd5JhfobRWSD9
dUX5ZAMcAAPBaa/H2c5gKYuqXlRNH3N8ZlAN/5j9NE7B8o4pushzL7F6yTe5gotd
1zj+prd7L7dijAfH4MoDGl2lPnxmvp407+6iZL8o8O7Got8/hEBxYBiDp2844HuX
GFEONpA0UZTDhke34mQeHN/a43Pg1ED5PgKHXkf8Y9WRnZw5qTu2e6y7GfDuZrq+
9meYgtCEBpvVlBVNy/a/sH1AmmeVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAQhb
WRtIOQlZbWKUPR2NSxiOsX0wHwYDVR0jBBgwFoAULQAVTmAKZArDKjKF2c6fxQqU
GrMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCQzQ0Lzg5MkQ0OUM2RjYxODExRUNCRTFCMzhBRkYxMjIyNDY4L0xRQVZU
bUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xRQVZUbUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjVCQzQ0Lzg5MkQ0OUM2RjYxODExRUNCRTFCMzhBRkYx
MjIyNDY4LzEyOEFBQzUwOEE4NDExRjE5NUREM0YxOENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2s8wDQYJKoZIhvcNAQEL
BQADggEBAJETxHnEoeVEaieRrsmC8bGKXL6LydoRgJRB+/vYtJS1aoUMtXWXyX8N
4DJo80ATujd9bUZvdeshEs9+JUn7Hyi+jxvGkH+B9Xbde6HH1xLplAdlSXjRHjEu
yPBd91xVRdskhA7sXKBue8hBwFCtglRct1tBsp3D6hedS13q2+x+AkGVRouKgT82
AeclL0xBe2WrbZkKiT+p1ST9jXne6ytZApczT5AFh3XJffD7tSrW7xjvXb2wklXm
H0zJZLb5g79LCvBCaVfP3wwMO5NVu8e/CJGz4fO61i1oXzxjotk+lxBiimVcEsts
MEnwMqFXzg/sPZdc+FQ6NCIYKKkPOac=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:25 2026 by rpki-client