Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/DC444B408A8011F19C054705CF1D38B0.roa
File: DC444B408A8011F19C054705CF1D38B0.roa (raw, json)
Hash identifier: k4FYTjH5NXMnSmrVz2ArtKhEE11Kq9H0SJzWwEr/K0c=
Subject key identifier: 33:E6:00:BB:B6:73:1D:15:AA:68:14:C3:7E:F7:87:16:53:99:69:55
Certificate issuer: /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial: 0609
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/DC444B408A8011F19C054705CF1D38B0.roa
Signing time: Tue 28 Jul 2026 12:35:48 +0000
ROA not before: Tue 28 Jul 2026 12:35:44 +0000
ROA not after: Sun 27 Jun 2032 12:35:44 +0000
asID: 328915
IP address blocks: 102.218.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Validity
Not Before: Jul 28 12:35:44 2026 GMT
Not After : Jun 27 12:35:44 2032 GMT
Subject: CN=6a68a224-472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d6:51:67:3e:11:cc:43:99:7f:6a:0c:34:52:
e1:e2:31:f0:c5:ff:5e:10:0e:81:c0:f2:e9:42:f6:
f9:56:ac:89:7c:83:28:2b:f1:bc:88:13:37:7d:ef:
4a:a9:6f:17:58:ab:18:b5:06:73:67:dc:9c:81:bf:
68:d5:68:03:0e:c0:28:72:71:1d:35:b0:b1:33:64:
a0:a0:e5:51:e3:58:5e:c1:a8:23:d0:62:51:bc:fd:
42:52:99:dd:c6:bd:37:01:b9:b5:bc:5f:bd:eb:9f:
78:4a:11:20:5f:9f:54:31:5d:3c:15:9f:1a:c0:bb:
f5:4d:57:08:e6:7c:a7:b2:92:48:6d:18:52:61:b7:
95:82:14:f8:a9:b5:df:26:c7:80:8b:57:99:9f:ab:
0f:88:b3:01:f6:0a:32:fc:c9:f0:34:2c:22:a8:cc:
00:3e:e4:17:b7:5f:91:78:25:3c:50:a1:a1:00:73:
d0:2f:ae:9b:c7:59:8b:43:51:fd:28:e0:9b:73:33:
d6:7d:7a:10:fd:90:86:f4:c1:8b:db:13:a3:65:51:
d9:e2:88:ce:46:a9:d4:d9:72:ec:22:28:ef:47:50:
af:db:41:bb:1b:3f:d8:9b:4c:84:78:5b:7c:d2:0a:
a5:2e:eb:31:b4:5b:bd:e4:f7:7a:94:6b:98:4b:2a:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:00:BB:B6:73:1D:15:AA:68:14:C3:7E:F7:87:16:53:99:69:55
X509v3 Authority Key Identifier:
keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/DC444B408A8011F19C054705CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.204.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c7:49:82:df:76:2a:5b:ff:e2:61:de:70:9b:2d:05:bc:66:
e0:dd:a4:5b:15:fd:bf:7d:f5:34:69:6c:dd:8a:ef:51:8b:40:
ed:72:8f:2f:7a:c6:e1:02:57:75:b8:7e:ed:08:56:bc:28:59:
a9:2b:c6:6f:28:db:7e:69:c6:62:6b:32:36:06:f5:e6:4f:1f:
a0:67:45:2e:75:a1:b7:47:2d:92:af:8c:e8:bb:a2:f6:cd:16:
56:b6:ca:78:6b:1e:85:db:87:16:04:0f:21:34:2d:64:61:4d:
5f:a8:56:d4:6e:83:cb:d6:0e:71:a7:9b:0e:bb:c6:5e:ed:aa:
aa:b2:49:47:b1:5c:64:4b:4f:7e:c5:68:aa:fb:51:00:86:4a:
12:67:eb:88:8d:05:dd:bf:99:1a:3f:5a:0f:06:5b:39:85:ca:
76:71:c4:37:e8:06:03:29:e5:70:1c:45:be:be:16:2a:fa:13:
f0:15:2b:03:cd:88:c7:6e:7c:ad:28:7d:d4:39:42:71:0d:40:
30:b0:ce:ff:b8:7e:56:02:67:d9:09:50:6a:16:61:e8:dd:69:
96:5a:94:00:15:cc:ee:de:af:0e:8c:48:92:e4:9e:3f:ab:c5:
8e:e4:75:42:bd:a2:11:38:7d:51:90:76:8e:74:e4:29:ab:a5:
4c:80:71:6a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJDNDRBRjExMC8GA1UEBRMoMkQwMDE1NEU2MDBBNjQwQUMzMkEzMjg1RDlDRTlG
QzUwQTk0MUFCMzAeFw0yNjA3MjgxMjM1NDRaFw0zMjA2MjcxMjM1NDRaMBgxFjAU
BgNVBAMTDTZhNjhhMjI0LTQ3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD11lFnPhHMQ5l/agw0UuHiMfDF/14QDoHA8ulC9vlWrIl8gygr8byIEzd9
70qpbxdYqxi1BnNn3JyBv2jVaAMOwChycR01sLEzZKCg5VHjWF7BqCPQYlG8/UJS
md3GvTcBubW8X73rn3hKESBfn1QxXTwVnxrAu/VNVwjmfKeykkhtGFJht5WCFPip
td8mx4CLV5mfqw+IswH2CjL8yfA0LCKozAA+5Be3X5F4JTxQoaEAc9AvrpvHWYtD
Uf0o4JtzM9Z9ehD9kIb0wYvbE6NlUdniiM5GqdTZcuwiKO9HUK/bQbsbP9ibTIR4
W3zSCqUu6zG0W73k93qUa5hLKlo1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUM+YA
u7ZzHRWqaBTDfveHFlOZaVUwHwYDVR0jBBgwFoAULQAVTmAKZArDKjKF2c6fxQqU
GrMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCQzQ0Lzg5MkQ0OUM2RjYxODExRUNCRTFCMzhBRkYxMjIyNDY4L0xRQVZU
bUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xRQVZUbUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjVCQzQ0Lzg5MkQ0OUM2RjYxODExRUNCRTFCMzhBRkYx
MjIyNDY4L0RDNDQ0QjQwOEE4MDExRjE5QzA1NDcwNUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2swwDQYJKoZIhvcNAQEL
BQADggEBABHHSYLfdipb/+Jh3nCbLQW8ZuDdpFsV/b999TRpbN2K71GLQO1yjy96
xuECV3W4fu0IVrwoWakrxm8o235pxmJrMjYG9eZPH6BnRS51obdHLZKvjOi7ovbN
Fla2ynhrHoXbhxYEDyE0LWRhTV+oVtRug8vWDnGnmw67xl7tqqqySUexXGRLT37F
aKr7UQCGShJn64iNBd2/mRo/Wg8GWzmFynZxxDfoBgMp5XAcRb6+Fir6E/AVKwPN
iMdufK0ofdQ5QnENQDCwzv+4flYCZ9kJUGoWYejdaZZalAAVzO7erw6MSJLknj+r
xY7kdUK9ohE4fVGQdo505CmrpUyAcWo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:23 2026 by rpki-client