Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/C831B8A6568511F1975CE414CF1D38B0.roa
File: C831B8A6568511F1975CE414CF1D38B0.roa (raw, json)
Hash identifier: LZaxmQElUIK8uX2QSAti4xAiDPOSvSMl5rA5kzrCuuw=
Subject key identifier: 30:C0:BC:49:7F:88:D3:8C:B1:DC:87:C6:7F:4B:5F:C0:21:50:59:19
Certificate issuer: /CN=F365F086AF/serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Certificate serial: 03D6
Authority key identifier: 02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/C831B8A6568511F1975CE414CF1D38B0.roa
Signing time: Sat 23 May 2026 09:00:02 +0000
ROA not before: Sat 23 May 2026 08:59:57 +0000
ROA not after: Sat 31 May 2036 08:59:57 +0000
asID: 329731
IP address blocks: 102.202.190.0/24 maxlen: 24
2001:43ff:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F086AF, serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Validity
Not Before: May 23 08:59:57 2026 GMT
Not After : May 31 08:59:57 2036 GMT
Subject: CN=6a116c92-2800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:72:de:4d:d9:79:52:3b:76:a8:33:3e:39:
84:0d:ed:25:b1:b6:6a:eb:28:cf:b8:5e:3f:cb:7a:
ec:db:23:25:fc:9a:92:2a:d2:f9:74:c9:f8:ff:45:
b0:c4:15:00:aa:74:dd:de:59:b7:01:b8:23:58:f6:
09:5c:e3:b6:17:72:78:e0:56:ab:a1:1c:eb:41:eb:
9f:d6:f0:3b:cf:04:f1:57:2b:7d:36:55:17:ba:d8:
34:a8:30:8d:32:30:0e:a9:5d:e0:1d:d6:54:24:e0:
0b:9a:c2:ed:a9:64:1e:33:4a:a2:54:5f:36:91:68:
31:60:db:0c:8c:fe:26:18:e6:cf:cf:4e:d9:8f:1f:
bd:8c:0a:ce:d9:38:50:0d:fe:f4:65:a0:8e:08:2b:
f7:6d:a6:db:65:25:91:b0:cb:37:97:85:15:91:2a:
6a:87:9f:fb:40:79:bd:4b:15:00:ee:04:39:0f:74:
5b:62:51:02:db:3e:c9:01:51:68:12:c2:9d:90:33:
7e:42:78:d8:df:08:f1:3b:15:e1:f9:ba:91:fa:67:
1b:97:03:7c:e9:f9:e9:84:43:24:cf:c3:fb:60:c7:
50:9f:9c:15:b2:6f:4e:67:e3:8d:2d:73:98:25:1b:
19:ac:c8:9b:93:34:6c:28:3b:70:bc:83:4c:36:6b:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:BC:49:7F:88:D3:8C:B1:DC:87:C6:7F:4B:5F:C0:21:50:59:19
X509v3 Authority Key Identifier:
keyid:02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/C831B8A6568511F1975CE414CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.190.0/24
IPv6:
2001:43ff:6800::/48
Signature Algorithm: sha256WithRSAEncryption
02:26:2d:26:3d:c0:81:ef:14:4e:c8:2c:a1:29:ba:91:d2:19:
c7:65:85:a0:7d:01:00:68:f6:cf:3b:51:9d:99:72:d4:2d:d7:
59:2a:4c:b6:6c:e3:4f:de:9c:9a:55:39:45:cf:0c:cd:af:17:
73:d5:80:e0:4e:d3:ea:c5:1c:94:25:30:d9:30:da:86:59:d9:
35:de:05:19:da:43:1d:46:bb:1b:9a:d1:3d:e5:83:6a:4d:96:
7a:3e:b3:5e:b1:84:c8:b6:70:52:38:ec:6e:99:02:c9:b9:20:
21:3d:0a:b7:91:c0:2e:3b:7f:9e:0b:08:f1:25:ff:a1:7e:bb:
23:cc:47:4e:a7:3c:96:93:26:e6:7c:fd:9b:0e:5d:e9:a2:94:
20:1e:e4:fa:f9:f8:9c:f0:e0:bb:de:15:87:a5:84:54:32:1e:
bf:61:ee:f1:53:c6:3f:f1:59:2b:01:b5:f5:ed:72:db:42:3e:
00:01:90:85:9e:75:ce:89:26:2c:7b:1f:bc:a6:0e:8b:3c:df:
8c:3a:51:27:93:dc:42:e9:dc:aa:f8:fd:c5:1b:c1:6e:06:2d:
43:2d:d6:d6:74:cb:c3:71:b3:eb:d3:19:d8:15:0d:b8:a1:96:
3c:87:b7:d0:cf:12:d5:24:11:33:1a:49:c5:17:d4:2a:d4:31:
67:da:5c:03
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUYwODZBRjExMC8GA1UEBRMoMDJDNDRDRUQ2QjYxOUFCMUE0MDRGQ0VEMzUwMkIx
RDk2ODQ4MzI5RTAeFw0yNjA1MjMwODU5NTdaFw0zNjA1MzEwODU5NTdaMBgxFjAU
BgNVBAMTDTZhMTE2YzkyLTI4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyZ3LeTdl5Ujt2qDM+OYQN7SWxtmrrKM+4Xj/LeuzbIyX8mpIq0vl0yfj/
RbDEFQCqdN3eWbcBuCNY9glc47YXcnjgVquhHOtB65/W8DvPBPFXK302VRe62DSo
MI0yMA6pXeAd1lQk4Auawu2pZB4zSqJUXzaRaDFg2wyM/iYY5s/PTtmPH72MCs7Z
OFAN/vRloI4IK/dtpttlJZGwyzeXhRWRKmqHn/tAeb1LFQDuBDkPdFtiUQLbPskB
UWgSwp2QM35CeNjfCPE7FeH5upH6ZxuXA3zp+emEQyTPw/tgx1CfnBWyb05n440t
c5glGxmsyJuTNGwoO3C8g0w2a3sNAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUMMC8
SX+I04yx3IfGf0tfwCFQWRkwHwYDVR0jBBgwFoAUAsRM7WthmrGkBPztNQKx2WhI
Mp4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGMDg2L0RFN0IxNkVFNkNCQzExRUU5QTU5RUU2MzRBRDlFNkZDL0FzUk03
V3RobXJHa0JQenROUUt4MldoSU1wNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FzUk03V3RobXJHa0JQenROUUt4MldoSU1wNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjVGMDg2L0RFN0IxNkVFNkNCQzExRUU5QTU5RUU2MzRB
RDlFNkZDL0M4MzFCOEE2NTY4NTExRjE5NzVDRTQxNENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABmyr4wDwQCAAIwCQMHACAB
Q/9oADANBgkqhkiG9w0BAQsFAAOCAQEAAiYtJj3Age8UTsgsoSm6kdIZx2WFoH0B
AGj2zztRnZly1C3XWSpMtmzjT96cmlU5Rc8Mza8Xc9WA4E7T6sUclCUw2TDahlnZ
Nd4FGdpDHUa7G5rRPeWDak2Wej6zXrGEyLZwUjjsbpkCybkgIT0Kt5HALjt/ngsI
8SX/oX67I8xHTqc8lpMm5nz9mw5d6aKUIB7k+vn4nPDgu94Vh6WEVDIev2Hu8VPG
P/FZKwG19e1y20I+AAGQhZ51zokmLHsfvKYOizzfjDpRJ5PcQuncqvj9xRvBbgYt
Qy3W1nTLw3Gz69MZ2BUNuKGWPIe30M8S1SQRMxpJxRfUKtQxZ9pcAw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:30:05 2026 by rpki-client