Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/16CB630E537511F180D8AAD7CE1D38B0.roa
File: 16CB630E537511F180D8AAD7CE1D38B0.roa (raw, json)
Hash identifier: JKBLviW+yQWqYEf8gUdXTrj2d3ebFwRg37GifKHB/Ok=
Subject key identifier: C2:4F:EF:13:03:7E:97:A8:A6:70:E4:A9:2F:15:2A:D7:94:1C:C5:D9
Certificate issuer: /CN=F3692D54AF/serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
Certificate serial: 02
Authority key identifier: 98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/16CB630E537511F180D8AAD7CE1D38B0.roa
Signing time: Tue 19 May 2026 11:22:59 +0000
ROA not before: Tue 19 May 2026 11:22:53 +0000
ROA not after: Wed 31 Dec 2036 11:22:53 +0000
asID: 329741
IP address blocks: 102.202.148.0/22 maxlen: 24
2c0f:4ba0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3692D54AF, serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
Validity
Not Before: May 19 11:22:53 2026 GMT
Not After : Dec 31 11:22:53 2036 GMT
Subject: CN=6a0c4813-9774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:6a:54:a8:24:d6:23:6f:f9:b2:e6:a0:ce:
08:0f:cb:f2:c0:98:23:76:41:03:01:56:c7:be:05:
04:df:23:46:89:2c:2b:ac:ed:c7:bb:a0:dc:99:24:
cc:2b:79:00:88:6b:68:31:42:90:71:eb:4c:81:8c:
c2:3c:f1:fd:25:72:be:aa:13:b3:bb:31:a5:3b:f5:
0e:8e:76:ab:b6:aa:68:ac:d6:0a:a5:85:e1:17:98:
cb:9c:ef:29:c5:b4:ba:3b:e2:30:45:fb:23:58:a2:
93:8e:76:f4:24:e6:59:20:8a:6a:16:4f:b3:eb:5e:
22:31:d0:4f:8a:1a:93:17:3f:44:d6:f3:9d:47:c4:
82:55:b7:8f:16:14:67:8c:2c:b8:84:3c:81:bb:c2:
0f:84:70:54:61:09:6c:b3:a1:e3:a2:ff:33:75:b1:
f4:46:14:30:15:a9:1c:1a:a1:0d:7d:1b:15:1d:1e:
52:75:c6:42:a5:cb:a9:0b:51:da:e3:a3:8d:9b:5d:
08:08:e8:6b:a4:aa:e8:0f:e7:d6:61:61:e0:e9:5e:
23:57:f4:14:0f:b2:47:0e:a2:0d:f8:7b:20:c4:3f:
f7:36:43:7c:9c:5f:93:43:3b:61:26:c3:21:5b:17:
db:a1:c6:d1:95:b1:9e:ca:8d:d3:8b:04:a2:f0:5a:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:EF:13:03:7E:97:A8:A6:70:E4:A9:2F:15:2A:D7:94:1C:C5:D9
X509v3 Authority Key Identifier:
keyid:98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/16CB630E537511F180D8AAD7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.148.0/22
IPv6:
2c0f:4ba0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:f8:ce:8a:ad:e3:ad:0f:42:2f:17:16:73:d6:ba:5f:bc:9e:
cb:74:72:bb:a7:1f:9c:13:01:5f:55:60:6f:16:15:d2:6a:ff:
b5:92:95:38:f9:38:e5:ec:23:6f:97:29:25:3c:ba:ac:7d:69:
de:5a:dd:49:e6:a9:dd:f1:fe:b9:e4:d4:e8:38:f7:83:4d:3e:
fe:a2:67:65:b6:ad:54:0f:dc:b1:f2:b7:e4:f6:ce:e6:a6:e1:
d5:d1:cf:81:a2:47:0c:a0:93:5f:13:ae:8c:99:38:3b:2e:8a:
a2:c9:62:33:4d:de:7d:c5:0e:9b:dc:68:65:e8:b4:30:3c:85:
82:2c:58:79:bb:35:c6:e9:64:d1:e4:55:37:39:10:eb:95:81:
c0:77:22:86:fb:e3:4e:10:63:ad:f8:2c:eb:38:46:ce:6f:71:
7f:c9:69:fc:38:ee:76:7d:44:78:22:de:58:25:b8:ff:a3:45:
88:34:fe:6e:72:1c:26:19:3a:ef:c0:47:d8:6a:b3:99:a3:4c:
fb:74:38:ee:a1:a7:01:0a:6e:f6:aa:77:bd:98:42:29:9f:db:
fe:fd:5f:1f:9b:f5:b3:7b:d3:58:7c:bf:7e:f0:8b:30:cc:f1:
ef:13:74:81:27:20:6d:1e:dc:7a:13:5b:19:59:15:62:6b:f3:
c7:7f:5b:09
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
MkQ1NEFGMTEwLwYDVQQFEyg5ODcwRTVDQjA5MjQwRUM1OURDQzc0N0ZDMDAzNjdF
OUFGM0EwQ0NEMB4XDTI2MDUxOTExMjI1M1oXDTM2MTIzMTExMjI1M1owGDEWMBQG
A1UEAxMNNmEwYzQ4MTMtOTc3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4WalSoJNYjb/my5qDOCA/L8sCYI3ZBAwFWx74FBN8jRoksK6ztx7ug3Jkk
zCt5AIhraDFCkHHrTIGMwjzx/SVyvqoTs7sxpTv1Do52q7aqaKzWCqWF4ReYy5zv
KcW0ujviMEX7I1iik4529CTmWSCKahZPs+teIjHQT4oakxc/RNbznUfEglW3jxYU
Z4wsuIQ8gbvCD4RwVGEJbLOh46L/M3Wx9EYUMBWpHBqhDX0bFR0eUnXGQqXLqQtR
2uOjjZtdCAjoa6Sq6A/n1mFh4OleI1f0FA+yRw6iDfh7IMQ/9zZDfJxfk0M7YSbD
IVsX26HG0ZWxnsqN04sEovBaF8kCAwEAAaOCArQwggKwMB0GA1UdDgQWBBTCT+8T
A36XqKZw5KkvFSrXlBzF2TAfBgNVHSMEGDAWgBSYcOXLCSQOxZ3MdH/AA2fprzoM
zTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTJENTQvMjlDN0JBRTY1MzcyMTFGMTk5NjZCOEM1Q0UxRDM4QjAvbUhEbHl3
a2tEc1dkekhSX3dBTm42YTg2RE0wLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbUhEbHl3a2tEc1dkekhSX3dBTm42YTg2RE0wLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTJENTQvMjlDN0JBRTY1MzcyMTFGMTk5NjZCOEM1Q0Ux
RDM4QjAvMTZDQjYzMEU1Mzc1MTFGMTgwRDhBQUQ3Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbKlDANBAIAAjAHAwUALA9L
oDANBgkqhkiG9w0BAQsFAAOCAQEAtPjOiq3jrQ9CLxcWc9a6X7yey3Ryu6cfnBMB
X1VgbxYV0mr/tZKVOPk45ewjb5cpJTy6rH1p3lrdSeap3fH+ueTU6Dj3g00+/qJn
ZbatVA/csfK35PbO5qbh1dHPgaJHDKCTXxOujJk4Oy6KosliM03efcUOm9xoZei0
MDyFgixYebs1xulk0eRVNzkQ65WBwHcihvvjThBjrfgs6zhGzm9xf8lp/Djudn1E
eCLeWCW4/6NFiDT+bnIcJhk678BH2GqzmaNM+3Q47qGnAQpu9qp3vZhCKZ/b/v1f
H5v1s3vTWHy/fvCLMMzx7xN0gScgbR7cehNbGVkVYmvzx39bCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:54 2026 by rpki-client