Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/DA2A3F688A4911F1A419E0BACE1D38B0.roa
File: DA2A3F688A4911F1A419E0BACE1D38B0.roa (raw, json)
Hash identifier: Ae7lcvyzgbbhhsWy4rPPoyYkCHmjQBD2D56BJGDzKcI=
Subject key identifier: 0B:CF:10:F5:1D:21:AA:18:8E:05:35:C9:77:B3:2A:6E:E9:54:87:0B
Certificate issuer: /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial: 0806
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/DA2A3F688A4911F1A419E0BACE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:02:02 +0000
ROA not before: Tue 28 Jul 2026 06:01:58 +0000
ROA not after: Sat 31 Aug 2030 06:01:58 +0000
asID: 328795
IP address blocks: 102.220.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Validity
Not Before: Jul 28 06:01:58 2026 GMT
Not After : Aug 31 06:01:58 2030 GMT
Subject: CN=6a6845da-a4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:1f:f1:89:0c:59:e1:82:0e:2b:8e:9c:ec:
85:97:85:20:b4:cc:5f:21:fa:e5:90:19:72:63:3b:
0f:8d:15:f6:44:1c:46:ba:d1:48:77:56:db:08:ad:
5d:e6:45:bd:00:ae:9c:89:96:c5:c9:dc:f1:31:f6:
7a:30:58:d8:63:f7:0f:88:fd:8b:3c:56:ed:d0:b8:
fe:dd:82:dc:b0:ea:ee:b0:71:3f:e2:b5:e4:f8:f7:
02:b6:f1:a1:bd:a2:37:62:7e:57:dc:99:38:de:bd:
eb:29:9a:f1:18:46:1f:30:91:58:1d:9d:d1:ed:70:
34:a9:b7:ab:27:67:8d:f9:8f:76:12:3b:cf:ac:55:
d1:6c:c8:db:5a:e8:e6:4d:19:e1:9b:b3:f8:b3:99:
ad:6d:09:67:a6:64:b3:da:dc:3e:07:11:a9:d7:98:
6a:83:5a:59:f5:f9:0d:6c:26:c3:08:28:f8:39:e1:
4a:55:22:df:c1:29:56:6e:a3:5b:2b:e3:05:34:95:
3d:dc:38:d1:29:3e:8c:ee:73:b4:a0:88:3b:bd:1b:
1f:7a:fe:f7:d4:27:18:30:8e:96:03:e8:2b:68:53:
89:9f:4a:c3:e1:bd:22:20:da:b2:08:c3:c0:2c:37:
5f:12:f9:ec:73:bc:c3:9b:8e:0e:fb:e2:e2:14:1c:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CF:10:F5:1D:21:AA:18:8E:05:35:C9:77:B3:2A:6E:E9:54:87:0B
X509v3 Authority Key Identifier:
keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/DA2A3F688A4911F1A419E0BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.252.0/24
Signature Algorithm: sha256WithRSAEncryption
86:75:e0:19:85:6f:2b:e4:51:68:6d:e4:e5:67:c4:cc:54:26:
b6:91:40:8c:4a:8e:d1:04:66:e2:83:bc:37:0f:48:97:e6:30:
93:59:03:34:98:e3:fb:f9:6d:9c:8d:09:f6:d2:b3:a9:32:d7:
3c:54:23:9a:ca:1f:b2:64:29:8e:90:d2:90:76:d8:a7:7d:6d:
a4:f4:44:af:db:c1:53:6f:a2:c0:a1:b0:19:8c:11:68:7f:29:
c9:8a:62:73:af:36:03:63:93:ce:c3:43:3a:84:ad:8a:35:f8:
33:94:0b:44:b6:99:79:cd:72:09:ae:b8:cb:e7:ce:b7:44:af:
c3:11:d1:f9:e2:74:cb:c0:27:d6:ea:8c:03:91:75:ab:e4:7c:
81:91:d3:ae:35:a7:4f:ab:93:e5:ac:e4:15:25:c0:5b:0e:0f:
0d:a7:42:f5:3b:11:67:2c:6c:67:51:0e:05:ee:28:50:4d:9a:
52:76:47:53:9c:f4:58:85:e7:d0:ba:3e:e2:5e:7e:81:37:09:
01:32:31:8e:a0:68:7b:a3:88:78:7a:3c:f2:3b:b7:76:bf:0b:
01:bf:ba:88:53:df:bf:9d:71:ba:a3:58:6d:0c:c2:1d:42:a2:
c0:f6:15:d7:7a:d0:04:2b:07:4c:20:92:20:7f:59:62:52:30:
02:00:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:26 2026 by rpki-client