Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/1A98D0D863F211F19D5A45AECE1D38B0.roa
File: 1A98D0D863F211F19D5A45AECE1D38B0.roa (raw, json)
Hash identifier: 5ns/OJLF4Ryu80Az4/iqFq/JpB9dRCmpDmrVUq8LPKo=
Subject key identifier: F1:34:D0:C3:70:AB:01:72:A4:58:85:46:AF:8C:17:65:94:99:AE:83
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 0629
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/1A98D0D863F211F19D5A45AECE1D38B0.roa
Signing time: Tue 09 Jun 2026 10:58:11 +0000
ROA not before: Tue 09 Jun 2026 10:58:06 +0000
ROA not after: Tue 31 Dec 2030 10:58:06 +0000
asID: 25818
IP address blocks: 102.177.124.0/24 maxlen: 24
2001:4210:a300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 10:58:06 2026 GMT
Not After : Dec 31 10:58:06 2030 GMT
Subject: CN=6a27f1c3-ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:94:8d:64:62:a6:c3:d4:ea:35:06:f2:4a:
1e:ae:23:ca:98:84:10:7b:e4:e7:40:53:61:9c:3a:
ec:1a:ed:57:59:90:e5:f1:25:5b:7f:30:be:39:53:
2e:3c:e7:26:84:dd:0e:8a:94:d8:01:68:77:05:b9:
b9:71:96:1f:69:e1:c9:80:93:6e:b6:04:81:01:f3:
a0:3f:d5:4b:60:20:c1:66:e1:bc:25:77:33:81:62:
30:c7:d1:2c:13:90:47:94:78:3a:c7:46:78:c2:71:
32:00:da:ec:61:6d:b8:b5:c7:68:ac:28:c6:54:2c:
23:f4:b2:c6:f5:18:b0:48:a0:68:a6:6f:c1:41:6a:
88:41:d5:c6:bd:8b:74:f1:f5:3a:61:05:78:01:8b:
eb:69:70:e8:2e:2f:ff:83:ad:4b:4e:63:e5:92:27:
c4:bd:97:24:d9:5b:97:0f:54:f0:c4:9f:af:1e:d9:
36:62:eb:dc:2d:25:94:37:33:10:8e:e8:fb:f7:b1:
38:28:39:c4:04:58:8c:bc:39:c2:29:2c:e9:0a:9a:
f4:16:8c:48:71:04:4c:cb:48:60:30:74:53:5e:58:
73:45:55:de:f1:b6:fc:d7:c6:00:d7:bb:09:eb:4b:
ae:cb:3e:45:6b:dd:43:c1:29:6f:dd:2d:47:50:ce:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:D0:C3:70:AB:01:72:A4:58:85:46:AF:8C:17:65:94:99:AE:83
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/1A98D0D863F211F19D5A45AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.124.0/24
IPv6:
2001:4210:a300::/40
Signature Algorithm: sha256WithRSAEncryption
7e:60:d7:66:34:97:dc:fb:fc:30:9f:06:03:9d:de:94:c6:42:
73:82:99:16:58:07:db:d7:c2:0e:ce:8a:ec:61:5f:26:4f:cc:
13:cc:11:9b:25:80:3c:d9:92:72:8c:a0:cf:73:69:4b:cd:1f:
c7:d4:1f:9c:63:76:0c:6b:55:d5:f7:26:34:39:92:3a:9f:d1:
88:4e:c9:8f:06:db:33:01:62:f9:f2:9b:ea:9c:93:df:74:fe:
d0:32:ca:12:d2:63:1b:72:3d:c6:9a:c4:42:91:49:7f:1f:cb:
d7:4c:45:ff:58:90:ec:7e:3d:62:53:b2:98:d6:ec:c3:d5:a7:
99:3a:02:47:5e:58:df:30:0e:bc:d1:4b:5c:b3:6f:af:ee:25:
5f:86:ce:9c:24:8f:17:0d:46:aa:96:bb:97:63:a9:35:36:a5:
96:f7:a9:8b:02:9f:c0:26:48:41:36:f9:e5:2e:aa:13:84:3f:
b8:1c:a1:c3:60:21:1c:ac:5c:a8:70:6e:7e:ae:6a:ed:27:27:
02:1d:ae:75:18:d4:fb:68:04:1a:53:55:8c:38:db:29:dc:cf:
80:ac:5a:e2:6b:35:cf:92:24:a8:73:44:ea:2c:06:ad:72:03:
1b:2c:b6:04:24:cb:e4:0a:f5:28:58:50:9f:11:fe:32:61:a8:
7a:47:9f:2b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBikwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBRjExMC8GA1UEBRMoNTM3NUNGNENBMTY0M0IwOEMzNDFCREE3OUQ4QkUx
MDVCREMzQzQ4QjAeFw0yNjA2MDkxMDU4MDZaFw0zMDEyMzExMDU4MDZaMBgxFjAU
BgNVBAMTDTZhMjdmMWMzLWViYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzqJSNZGKmw9TqNQbySh6uI8qYhBB75OdAU2GcOuwa7VdZkOXxJVt/ML45
Uy485yaE3Q6KlNgBaHcFublxlh9p4cmAk262BIEB86A/1UtgIMFm4bwldzOBYjDH
0SwTkEeUeDrHRnjCcTIA2uxhbbi1x2isKMZULCP0ssb1GLBIoGimb8FBaohB1ca9
i3Tx9TphBXgBi+tpcOguL/+DrUtOY+WSJ8S9lyTZW5cPVPDEn68e2TZi69wtJZQ3
MxCO6Pv3sTgoOcQEWIy8OcIpLOkKmvQWjEhxBEzLSGAwdFNeWHNFVd7xtvzXxgDX
uwnrS67LPkVr3UPBKW/dLUdQzkUVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU8TTQ
w3CrAXKkWIVGr4wXZZSZroMwHwYDVR0jBBgwFoAUU3XPTKFkOwjDQb2nnYvhBb3D
xIswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYxMjIyNDY4L1UzWFBU
S0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzWFBUS0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYx
MjIyNDY4LzFBOThEMEQ4NjNGMjExRjE5RDVBNDVBRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBABmsXwwDgQCAAIwCAMGACAB
QhCjMA0GCSqGSIb3DQEBCwUAA4IBAQB+YNdmNJfc+/wwnwYDnd6UxkJzgpkWWAfb
18IOzorsYV8mT8wTzBGbJYA82ZJyjKDPc2lLzR/H1B+cY3YMa1XV9yY0OZI6n9GI
TsmPBtszAWL58pvqnJPfdP7QMsoS0mMbcj3GmsRCkUl/H8vXTEX/WJDsfj1iU7KY
1uzD1aeZOgJHXljfMA680Utcs2+v7iVfhs6cJI8XDUaqlruXY6k1NqWW96mLAp/A
JkhBNvnlLqoThD+4HKHDYCEcrFyocG5+rmrtJycCHa51GNT7aAQaU1WMONsp3M+A
rFriazXPkiSoc0TqLAatcgMbLLYEJMvkCvUoWFCfEf4yYah6R58r
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:17 2026 by rpki-client