Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/F82C96028A4711F19641A3AECE1D38B0.roa
File: F82C96028A4711F19641A3AECE1D38B0.roa (raw, json)
Hash identifier: XHS/PlTbJJf38vr8Lm2UbPHtd7t1vmvBVAYeHGDnxMk=
Subject key identifier: B1:0D:1B:94:6D:F4:E9:F6:E0:84:D2:E1:3A:F2:FF:DF:56:B6:87:9C
Certificate issuer: /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial: 0802
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/F82C96028A4711F19641A3AECE1D38B0.roa
Signing time: Tue 28 Jul 2026 05:48:34 +0000
ROA not before: Tue 28 Jul 2026 05:48:29 +0000
ROA not after: Wed 31 Oct 2029 05:48:29 +0000
asID: 328795
IP address blocks: 102.220.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Validity
Not Before: Jul 28 05:48:29 2026 GMT
Not After : Oct 31 05:48:29 2029 GMT
Subject: CN=6a6842b2-a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:b4:32:45:55:54:1b:80:74:27:3f:b8:f4:
2d:d9:38:f6:3b:78:76:7a:04:85:23:47:0b:2e:aa:
8f:40:c8:ac:e5:a3:d9:9f:be:17:5c:2e:07:03:e0:
a3:ae:95:c2:59:b7:fb:ee:87:b9:b2:cb:99:7d:57:
15:3e:f1:9b:58:0f:fa:02:c8:64:ed:ad:21:f7:ac:
86:49:9d:10:e5:ef:0d:33:31:f3:c8:c2:3e:d5:25:
82:5f:aa:64:95:9c:fd:c2:50:65:f1:48:40:49:30:
29:f7:14:6e:a5:01:f2:ad:71:0e:c5:19:c4:ab:39:
4e:bc:7a:ab:c2:f7:58:08:b7:a8:7f:7b:57:0c:e7:
f3:1c:fc:85:f6:6b:7c:04:60:39:0b:a8:e0:76:7e:
9d:64:b2:b6:ae:91:04:ad:a6:66:52:c4:fb:03:9c:
55:34:79:2e:8a:05:56:5a:6f:f1:78:ef:0c:9e:25:
19:1c:8e:93:2a:7e:29:e1:1f:04:df:9e:f5:e5:31:
8f:68:a1:78:db:e2:5c:46:e0:da:b1:14:4a:04:da:
42:c5:06:00:d8:a3:3a:d4:5c:c1:43:13:ab:a5:00:
99:02:92:a4:d9:30:b1:d9:04:fe:30:ba:af:8d:87:
4c:44:28:55:85:e3:93:68:6f:e2:d1:13:c2:7c:5c:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:1B:94:6D:F4:E9:F6:E0:84:D2:E1:3A:F2:FF:DF:56:B6:87:9C
X509v3 Authority Key Identifier:
keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/F82C96028A4711F19641A3AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e6:cc:74:d7:66:10:5e:1e:09:a2:f3:6c:b4:90:d8:3d:62:
21:3f:36:71:e7:1b:83:03:7d:dc:90:d3:60:a5:eb:b9:d1:28:
a7:3e:16:57:bc:da:22:ea:3a:b3:24:0d:af:35:fd:7c:f5:a0:
0d:89:0b:cd:0b:4e:ae:fc:71:89:66:45:e0:ef:d6:57:b9:e7:
c7:6e:ea:a5:54:41:16:f2:8d:ee:7b:f6:c4:09:2b:77:80:9d:
05:cf:34:15:19:19:dd:fb:3b:c8:7c:e5:24:a1:c8:b4:3b:92:
da:4f:c6:6d:87:04:b6:42:53:00:df:2c:92:37:44:3c:fc:10:
49:04:ef:0e:58:94:67:90:7d:32:2d:f4:a9:1f:64:2a:2e:39:
4e:15:8a:ae:e8:ef:97:8d:ee:27:7f:4d:8a:90:d8:a5:3e:69:
a7:8d:20:df:24:b4:dd:6e:ba:ac:26:de:17:af:a6:80:22:7a:
d5:79:e5:4c:76:34:c4:f0:49:90:0a:3a:07:71:65:b9:16:26:
7c:22:5a:85:d2:3a:32:b1:a9:4d:6e:a2:62:4f:eb:d5:9d:3f:
de:5a:71:e1:26:28:ac:22:96:ba:82:25:88:b8:f4:fa:8b:6d:
c1:cc:6b:c6:69:ff:1b:d8:bd:3b:7c:28:7d:f4:4c:73:a3:07:
4c:de:1b:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEEzRDFBRjExMC8GA1UEBRMoQUU1MUQyNTcxNkREQjRDQ0EzMUIyRTk4NUUwQTc1
MjVGN0Y0QjlDNjAeFw0yNjA3MjgwNTQ4MjlaFw0yOTEwMzEwNTQ4MjlaMBgxFjAU
BgNVBAMTDTZhNjg0MmIyLWE0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1e7QyRVVUG4B0Jz+49C3ZOPY7eHZ6BIUjRwsuqo9AyKzlo9mfvhdcLgcD
4KOulcJZt/vuh7myy5l9VxU+8ZtYD/oCyGTtrSH3rIZJnRDl7w0zMfPIwj7VJYJf
qmSVnP3CUGXxSEBJMCn3FG6lAfKtcQ7FGcSrOU68eqvC91gIt6h/e1cM5/Mc/IX2
a3wEYDkLqOB2fp1ksraukQStpmZSxPsDnFU0eS6KBVZab/F47wyeJRkcjpMqfinh
HwTfnvXlMY9ooXjb4lxG4NqxFEoE2kLFBgDYozrUXMFDE6ulAJkCkqTZMLHZBP4w
uq+Nh0xEKFWF45Nob+LRE8J8XO+pAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsQ0b
lG306fbghNLhOvL/31a2h5wwHwYDVR0jBBgwFoAUrlHSVxbdtMyjGy6YXgp1Jff0
ucYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhBM0QxLzczNzMyRTU2NzAyODExRUJCMkY5NjgyNUY4QUVBMjI4L3JsSFNW
eGJkdE15akd5NllYZ3AxSmZmMHVjWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JsSFNWeGJkdE15akd5NllYZ3AxSmZmMHVjWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhBM0QxLzczNzMyRTU2NzAyODExRUJCMkY5NjgyNUY4
QUVBMjI4L0Y4MkM5NjAyOEE0NzExRjE5NjQxQTNBRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3P4wDQYJKoZIhvcNAQEL
BQADggEBAH/mzHTXZhBeHgmi82y0kNg9YiE/NnHnG4MDfdyQ02Cl67nRKKc+Fle8
2iLqOrMkDa81/Xz1oA2JC80LTq78cYlmReDv1le558du6qVUQRbyje579sQJK3eA
nQXPNBUZGd37O8h85SShyLQ7ktpPxm2HBLZCUwDfLJI3RDz8EEkE7w5YlGeQfTIt
9KkfZCouOU4Viq7o75eN7id/TYqQ2KU+aaeNIN8ktN1uuqwm3hevpoAietV55Ux2
NMTwSZAKOgdxZbkWJnwiWoXSOjKxqU1uomJP69WdP95aceEmKKwilrqCJYi49PqL
bcHMa8Zp/xvYvTt8KH30THOjB0zeG8c=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:23 2026 by rpki-client