Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/2186DE04568611F1A2AD1617CF1D38B0.roa
File: 2186DE04568611F1A2AD1617CF1D38B0.roa (raw, json)
Hash identifier: jncwXMCFbXN3M1ApRoH5qYoE6Oyeb0Gw7SPDapNHdwc=
Subject key identifier: 34:09:B8:8F:C6:9E:0E:E8:C2:E5:6B:30:48:41:EC:14:BE:0E:C2:D7
Certificate issuer: /CN=F365F086AF/serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Certificate serial: 03D8
Authority key identifier: 02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/2186DE04568611F1A2AD1617CF1D38B0.roa
Signing time: Sat 23 May 2026 09:02:32 +0000
ROA not before: Sat 23 May 2026 09:02:27 +0000
ROA not after: Sat 31 May 2036 09:02:27 +0000
asID: 329732
IP address blocks: 102.202.191.0/24 maxlen: 24
2001:43fd:8800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F086AF, serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Validity
Not Before: May 23 09:02:27 2026 GMT
Not After : May 31 09:02:27 2036 GMT
Subject: CN=6a116d27-ff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:12:ed:84:40:2f:61:65:48:1a:9f:ae:d3:
6e:0c:9c:c5:ea:df:c7:06:8c:30:43:c4:e4:0d:64:
94:11:b9:b1:94:23:75:cd:16:60:5a:c4:a6:92:92:
b7:95:71:a6:92:fc:5a:c7:bf:b6:40:d3:1c:83:41:
67:d5:92:db:11:59:79:83:61:bd:c2:d1:31:21:b9:
6e:86:82:e1:a1:03:46:fd:7b:c0:36:c3:1a:11:00:
fb:ad:51:07:dd:b9:6a:ea:9c:4c:58:fd:08:f4:8d:
b2:e4:d0:bc:03:57:ed:a8:87:3e:e8:2c:ab:4a:45:
67:67:96:a0:89:f3:31:76:dd:84:2c:fc:77:bb:b6:
16:6f:0c:a4:2a:c4:19:cd:14:4d:25:e9:8d:4e:37:
41:c7:43:c5:fa:52:37:2f:83:db:0f:6a:9d:a1:75:
3d:46:a2:79:19:3b:40:67:c4:dc:bf:4e:00:b0:60:
67:c8:6e:8a:87:48:72:78:ca:fc:41:56:7a:02:da:
42:9e:9f:29:30:b6:03:54:47:05:c0:12:5b:10:ad:
75:e0:e2:4f:8b:37:dc:73:68:2e:08:d3:a6:a5:7e:
77:e2:68:c0:9b:58:1c:d8:f8:e3:c6:a3:2c:f7:c8:
af:29:08:4f:86:6a:7e:de:5b:45:00:8d:c9:bb:7b:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:B8:8F:C6:9E:0E:E8:C2:E5:6B:30:48:41:EC:14:BE:0E:C2:D7
X509v3 Authority Key Identifier:
keyid:02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/2186DE04568611F1A2AD1617CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.191.0/24
IPv6:
2001:43fd:8800::/48
Signature Algorithm: sha256WithRSAEncryption
0e:44:0a:c4:bf:f3:39:57:10:2f:f6:7a:b8:d2:c3:1b:86:4a:
8b:f0:42:10:b1:84:d6:3d:a9:8e:29:6c:c5:5b:e4:cd:01:12:
79:1d:39:27:e2:15:23:eb:2b:e8:63:46:85:a9:69:bf:97:90:
d9:0e:81:ab:21:48:85:b7:f0:2d:20:89:9b:07:88:2b:2c:9f:
30:af:8b:10:72:b4:c9:42:02:2c:d9:ae:cf:d7:ad:01:45:92:
95:e8:72:95:25:3f:09:19:71:60:a5:96:fc:5b:f1:97:1a:a3:
90:19:82:be:86:58:c9:4b:32:74:49:07:ec:22:01:d7:a1:6a:
96:bf:f8:5b:12:c6:31:80:f9:89:c0:98:b5:c2:54:8d:aa:ba:
3e:ab:17:78:ff:62:a0:3f:25:e7:c6:a6:c2:9d:cd:f5:a5:f8:
ce:77:33:37:3e:8d:4f:db:47:7c:7d:eb:6e:86:d8:e8:34:d2:
7b:25:b8:84:55:33:2c:82:1e:dc:7b:43:bd:07:9f:9c:30:97:
d4:d0:7d:29:bd:27:18:c4:39:27:f3:06:b5:f3:6e:2c:0e:63:
fa:fa:d9:e5:fe:b0:6e:06:1d:4d:9c:c9:7b:32:bc:2e:f2:f0:
5d:ed:3e:79:56:a0:42:c4:f1:a8:63:06:5f:d6:e3:e7:04:75:
ce:b3:01:6e
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUYwODZBRjExMC8GA1UEBRMoMDJDNDRDRUQ2QjYxOUFCMUE0MDRGQ0VEMzUwMkIx
RDk2ODQ4MzI5RTAeFw0yNjA1MjMwOTAyMjdaFw0zNjA1MzEwOTAyMjdaMBgxFjAU
BgNVBAMTDTZhMTE2ZDI3LWZmOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTwRLthEAvYWVIGp+u024MnMXq38cGjDBDxOQNZJQRubGUI3XNFmBaxKaS
kreVcaaS/FrHv7ZA0xyDQWfVktsRWXmDYb3C0TEhuW6GguGhA0b9e8A2wxoRAPut
UQfduWrqnExY/Qj0jbLk0LwDV+2ohz7oLKtKRWdnlqCJ8zF23YQs/He7thZvDKQq
xBnNFE0l6Y1ON0HHQ8X6Ujcvg9sPap2hdT1GonkZO0BnxNy/TgCwYGfIboqHSHJ4
yvxBVnoC2kKenykwtgNURwXAElsQrXXg4k+LN9xzaC4I06alfnfiaMCbWBzY+OPG
oyz3yK8pCE+Gan7eW0UAjcm7eyeFAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUNAm4
j8aeDujC5WswSEHsFL4OwtcwHwYDVR0jBBgwFoAUAsRM7WthmrGkBPztNQKx2WhI
Mp4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGMDg2L0RFN0IxNkVFNkNCQzExRUU5QTU5RUU2MzRBRDlFNkZDL0FzUk03
V3RobXJHa0JQenROUUt4MldoSU1wNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FzUk03V3RobXJHa0JQenROUUt4MldoSU1wNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjVGMDg2L0RFN0IxNkVFNkNCQzExRUU5QTU5RUU2MzRB
RDlFNkZDLzIxODZERTA0NTY4NjExRjFBMkFEMTYxN0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABmyr8wDwQCAAIwCQMHACAB
Q/2IADANBgkqhkiG9w0BAQsFAAOCAQEADkQKxL/zOVcQL/Z6uNLDG4ZKi/BCELGE
1j2pjilsxVvkzQESeR05J+IVI+sr6GNGhalpv5eQ2Q6BqyFIhbfwLSCJmweIKyyf
MK+LEHK0yUICLNmuz9etAUWSlehylSU/CRlxYKWW/FvxlxqjkBmCvoZYyUsydEkH
7CIB16Fqlr/4WxLGMYD5icCYtcJUjaq6PqsXeP9ioD8l58amwp3N9aX4znczNz6N
T9tHfH3rbobY6DTSeyW4hFUzLIIe3HtDvQefnDCX1NB9Kb0nGMQ5J/MGtfNuLA5j
+vrZ5f6wbgYdTZzJezK8LvLwXe0+eVagQsTxqGMGX9bj5wR1zrMBbg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:14 2026 by rpki-client