Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/901FE13E898B11F1AAC9AAAFCE1D38B0.roa
File: 901FE13E898B11F1AAC9AAAFCE1D38B0.roa (raw, json)
Hash identifier: uWhuNuHaUJY3NQlHsMC9E6dmoj2aQb7rOfWxrMfLF8I=
Subject key identifier: 1D:E9:D5:89:6A:2E:95:72:48:9B:19:34:F5:55:0A:12:9A:0E:EA:79
Certificate issuer: /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial: 0561
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/901FE13E898B11F1AAC9AAAFCE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:19:54 +0000
ROA not before: Mon 27 Jul 2026 07:19:50 +0000
ROA not after: Wed 31 Jul 2030 07:19:50 +0000
asID: 329174
IP address blocks: 102.213.241.0/24 maxlen: 24
2c0f:2d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Validity
Not Before: Jul 27 07:19:50 2026 GMT
Not After : Jul 31 07:19:50 2030 GMT
Subject: CN=6a67069a-5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:61:85:8b:24:25:e7:17:72:6d:a3:8d:4a:
fd:92:bb:15:21:f5:94:05:d4:f8:44:11:c8:b6:6a:
84:83:ca:88:f5:bc:f4:25:d2:ed:16:d5:cf:db:b7:
5a:11:ac:6a:cb:15:79:b2:24:b5:5c:7b:5e:3b:49:
05:47:1e:9c:bf:03:1b:7e:88:44:c7:b3:3e:84:2c:
55:1f:46:a4:3c:0f:db:08:ba:3f:7b:8f:82:10:90:
8d:55:33:f9:fe:df:94:7d:d7:e7:0f:33:4c:dc:ed:
00:d3:7b:03:2b:46:39:ee:0f:09:cb:9f:1a:41:d1:
1e:05:6d:ba:9b:a2:6e:d8:63:da:69:99:7c:6f:68:
cc:19:46:28:1c:ce:90:26:62:f6:cc:59:a6:f2:5c:
63:4e:56:81:28:34:fd:7e:d8:5c:51:cd:c7:ed:d4:
dc:7f:c3:a6:dd:1a:ad:59:0c:91:5d:5d:da:8c:d1:
89:3d:d5:3a:63:75:49:83:e7:28:bb:eb:7d:86:57:
6c:f7:b1:8a:48:4e:87:58:45:4e:52:38:2f:ae:cc:
13:7b:56:2c:56:1f:ad:b8:18:38:7b:cb:e4:a2:b6:
53:4f:08:73:64:cf:90:84:cb:49:3b:11:f1:cb:e9:
54:2b:e1:17:ca:3b:9b:0d:58:55:51:5c:ed:bb:43:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:D5:89:6A:2E:95:72:48:9B:19:34:F5:55:0A:12:9A:0E:EA:79
X509v3 Authority Key Identifier:
keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/901FE13E898B11F1AAC9AAAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.241.0/24
IPv6:
2c0f:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
1b:69:69:1d:98:c8:9c:e2:14:20:3a:56:56:22:a8:84:54:39:
51:54:36:76:e4:6a:5f:24:cf:f9:44:12:d4:ff:57:c1:83:c3:
c5:3b:72:be:a4:2b:46:15:b3:90:1c:fe:f4:a1:c4:f5:64:95:
22:2c:7a:38:56:87:ba:e7:23:c7:ea:08:62:f3:86:1c:64:96:
24:00:0f:ca:a4:66:c6:c5:20:45:13:c1:bb:92:0a:89:cc:9e:
ec:b8:a4:cf:c5:fc:43:85:27:f2:24:20:78:f7:54:cd:25:a4:
2c:b6:6b:3b:02:4b:57:d6:7c:63:80:62:73:58:af:72:48:ea:
6e:86:60:37:ba:a6:82:1f:fc:89:37:99:99:7b:76:d3:da:f3:
dd:6f:71:52:4f:70:59:32:f5:64:f3:2c:4d:44:e0:34:8b:ce:
ca:8e:c9:06:06:8a:ba:2e:5c:d9:6b:ac:a1:8b:e9:b2:4d:d5:
b9:c7:b8:fd:2d:c6:7d:b4:dc:44:92:2e:3b:91:4c:1c:45:e2:
0e:60:18:bd:d9:70:61:73:f6:c4:44:b5:fe:f0:fc:78:b6:44:
25:0f:d9:a1:02:6c:ef:c8:32:ba:8b:33:f8:49:8f:36:a2:1b:
2d:19:a2:29:c3:0d:2d:22:62:76:6a:69:3f:62:91:ab:4f:32:
dd:cc:2e:98
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUU0QzhBRjExMC8GA1UEBRMoQzc2OTAxN0M0QUY3N0M1RUI5RjhCQzg0Njg4RDg4
NkIwMTUwMzIzQTAeFw0yNjA3MjcwNzE5NTBaFw0zMDA3MzEwNzE5NTBaMBgxFjAU
BgNVBAMTDTZhNjcwNjlhLTU5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr+mGFiyQl5xdybaONSv2SuxUh9ZQF1PhEEci2aoSDyoj1vPQl0u0W1c/b
t1oRrGrLFXmyJLVce147SQVHHpy/Axt+iETHsz6ELFUfRqQ8D9sIuj97j4IQkI1V
M/n+35R91+cPM0zc7QDTewMrRjnuDwnLnxpB0R4Fbbqbom7YY9ppmXxvaMwZRigc
zpAmYvbMWabyXGNOVoEoNP1+2FxRzcft1Nx/w6bdGq1ZDJFdXdqM0Yk91TpjdUmD
5yi7632GV2z3sYpITodYRU5SOC+uzBN7VixWH624GDh7y+SitlNPCHNkz5CEy0k7
EfHL6VQr4RfKO5sNWFVRXO27QzcrAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUHenV
iWoulXJImxk09VUKEpoO6nkwHwYDVR0jBBgwFoAUx2kBfEr3fF65+LyEaI2IawFQ
MjowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFNEM4L0JERjA1RDdDN0QzODExRUQ4QzlEMDZDN0YxMjIyNDY4L3gya0Jm
RXIzZkY2NS1MeUVhSTJJYXdGUU1qby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3gya0JmRXIzZkY2NS1MeUVhSTJJYXdGUU1qby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlFNEM4L0JERjA1RDdDN0QzODExRUQ4QzlEMDZDN0Yx
MjIyNDY4LzkwMUZFMTNFODk4QjExRjFBQUM5QUFBRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABm1fEwDQQCAAIwBwMFACwP
LYAwDQYJKoZIhvcNAQELBQADggEBABtpaR2YyJziFCA6VlYiqIRUOVFUNnbkal8k
z/lEEtT/V8GDw8U7cr6kK0YVs5Ac/vShxPVklSIsejhWh7rnI8fqCGLzhhxkliQA
D8qkZsbFIEUTwbuSConMnuy4pM/F/EOFJ/IkIHj3VM0lpCy2azsCS1fWfGOAYnNY
r3JI6m6GYDe6poIf/Ik3mZl7dtPa891vcVJPcFky9WTzLE1E4DSLzsqOyQYGirou
XNlrrKGL6bJN1bnHuP0txn203ESSLjuRTBxF4g5gGL3ZcGFz9sREtf7w/Hi2RCUP
2aECbO/IMrqLM/hJjzaiGy0ZoinDDS0iYnZqaT9ikatPMt3MLpg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:45 2026 by rpki-client