Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/1C467B5A8B6C11F1A58384A2CE1D38B0.roa
File: 1C467B5A8B6C11F1A58384A2CE1D38B0.roa (raw, json)
Hash identifier: 2c1rafmJ8uAX7I4T9KV6h7Qhuemf9XiHnWfTCcuaKOs=
Subject key identifier: 54:36:F1:59:77:CC:32:75:15:86:8C:C9:1E:C8:4A:3E:7D:37:66:C3
Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial: 08F7
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/1C467B5A8B6C11F1A58384A2CE1D38B0.roa
Signing time: Wed 29 Jul 2026 16:39:47 +0000
ROA not before: Wed 29 Jul 2026 16:39:43 +0000
ROA not after: Tue 22 Mar 2033 16:39:43 +0000
asID: 37337
IP address blocks: 41.79.48.0/24 maxlen: 24
41.79.49.0/24 maxlen: 24
41.79.50.0/24 maxlen: 24
41.79.51.0/24 maxlen: 24
102.223.24.0/24 maxlen: 24
102.223.25.0/24 maxlen: 24
102.223.26.0/24 maxlen: 24
102.223.27.0/24 maxlen: 24
2c0f:f840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Validity
Not Before: Jul 29 16:39:43 2026 GMT
Not After : Mar 22 16:39:43 2033 GMT
Subject: CN=6a6a2cd3-2215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:56:bc:7d:74:28:22:63:5c:22:83:84:54:
66:6c:41:e2:48:74:b6:15:9c:70:40:a3:25:6a:8a:
ac:1e:b1:1b:f9:2b:de:d3:74:b6:4a:8d:9c:3c:88:
d9:d5:b1:72:9b:73:80:af:f2:34:f5:d3:03:47:3a:
03:40:07:10:2d:19:b3:a3:54:fc:3d:bc:ae:ff:e3:
96:9e:71:2f:01:af:99:86:bb:19:da:df:52:d1:e7:
4a:f5:38:e7:58:1c:25:74:db:69:b4:fd:6d:19:19:
95:b2:71:b9:2d:20:94:2e:ae:d5:73:11:c0:2c:0b:
e3:4c:e6:f3:67:b7:7b:75:5f:97:21:3e:9b:ab:ed:
a4:eb:51:19:a9:f5:d9:69:2c:67:29:22:11:ea:98:
e4:6d:b8:68:c2:f9:dd:a2:3a:47:5c:c9:4c:6e:c5:
05:c9:a1:59:08:1d:ac:90:e2:7b:2e:00:86:f2:e3:
35:c7:55:81:79:2a:4b:79:39:4b:07:30:7c:5b:93:
c3:2a:ee:80:cc:12:18:cb:dd:70:2b:ef:04:3f:05:
54:78:6c:a8:f0:7e:60:0f:68:89:8e:4c:42:cd:15:
3f:bc:a7:73:14:23:ef:2e:c4:ea:d5:bb:cc:48:1f:
e2:08:fe:fb:c8:a6:b8:7c:ac:35:88:5a:fb:23:44:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:36:F1:59:77:CC:32:75:15:86:8C:C9:1E:C8:4A:3E:7D:37:66:C3
X509v3 Authority Key Identifier:
keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/1C467B5A8B6C11F1A58384A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.48.0/22
102.223.24.0/22
IPv6:
2c0f:f840::/32
Signature Algorithm: sha256WithRSAEncryption
2a:ee:4a:07:ce:21:5e:4c:8a:4e:78:39:00:48:eb:b0:7f:8b:
84:4a:0a:db:59:fe:c0:1e:af:6f:ea:07:92:65:13:44:c4:e9:
90:aa:17:f0:30:32:b3:d2:50:c3:08:42:fa:a1:e7:36:cd:f7:
7e:63:3a:31:f7:c0:48:7a:72:2f:ee:34:31:79:7f:06:49:a2:
49:fb:b4:c3:c7:e0:8a:ba:11:d4:d4:19:ae:8a:7c:7f:12:ba:
ce:c3:ac:d0:56:91:95:3f:2c:86:3d:cb:9e:00:a7:b4:7d:ea:
d3:a9:2d:bb:b5:b1:80:1c:5c:a4:05:fe:d2:08:78:f4:1e:3a:
90:18:2f:08:0c:ec:41:74:df:a1:81:3e:65:83:b7:7f:24:b7:
09:ea:47:ef:a0:56:cc:23:d1:85:eb:64:8a:c6:70:e6:03:99:
58:09:96:e7:94:0a:23:89:d4:68:1b:be:59:04:2c:07:70:3b:
89:7d:98:e1:5e:5a:de:29:98:52:97:84:97:33:c2:55:78:27:
5a:bf:38:77:ee:f5:12:b9:3b:27:8b:90:35:1b:21:9a:f9:cf:
b9:a0:49:95:d3:38:bd:d3:20:91:f0:76:75:0f:e7:5d:aa:10:
20:1c:5f:92:4b:bf:8e:8d:1f:bb:12:c0:e3:f3:b7:bb:0b:57:
2b:34:42:d7
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc0NEZBRjExMC8GA1UEBRMoODBBRjA2MEU0NjQwQzMyNjUzRDBGMDBDMzAyNDUx
NEE5RjE0OTUzODAeFw0yNjA3MjkxNjM5NDNaFw0zMzAzMjIxNjM5NDNaMBgxFjAU
BgNVBAMTDTZhNmEyY2QzLTIyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmaVa8fXQoImNcIoOEVGZsQeJIdLYVnHBAoyVqiqwesRv5K97TdLZKjZw8
iNnVsXKbc4Cv8jT10wNHOgNABxAtGbOjVPw9vK7/45aecS8Br5mGuxna31LR50r1
OOdYHCV022m0/W0ZGZWycbktIJQurtVzEcAsC+NM5vNnt3t1X5chPpur7aTrURmp
9dlpLGcpIhHqmORtuGjC+d2iOkdcyUxuxQXJoVkIHayQ4nsuAIby4zXHVYF5Kkt5
OUsHMHxbk8Mq7oDMEhjL3XAr7wQ/BVR4bKjwfmAPaImOTELNFT+8p3MUI+8uxOrV
u8xIH+II/vvIprh8rDWIWvsjRHX/AgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUVDbx
WXfMMnUVhozJHshKPn03ZsMwHwYDVR0jBBgwFoAUgK8GDkZAwyZT0PAMMCRRSp8U
lTgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3NDRGLzNCMDJGOEIyQURDMzExRUE4RjQyRUY3N0Y4QUVBMjI4L2dLOEdE
a1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dLOEdEa1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3NDRGLzNCMDJGOEIyQURDMzExRUE4RjQyRUY3N0Y4
QUVBMjI4LzFDNDY3QjVBOEI2QzExRjFBNTgzODRBMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIpTzADBAJm3xgwDQQCAAIw
BwMFACwP+EAwDQYJKoZIhvcNAQELBQADggEBACruSgfOIV5Mik54OQBI67B/i4RK
CttZ/sAer2/qB5JlE0TE6ZCqF/AwMrPSUMMIQvqh5zbN935jOjH3wEh6ci/uNDF5
fwZJokn7tMPH4Iq6EdTUGa6KfH8Sus7DrNBWkZU/LIY9y54Ap7R96tOpLbu1sYAc
XKQF/tIIePQeOpAYLwgM7EF036GBPmWDt38ktwnqR++gVswj0YXrZIrGcOYDmVgJ
lueUCiOJ1GgbvlkELAdwO4l9mOFeWt4pmFKXhJczwlV4J1q/OHfu9RK5OyeLkDUb
IZr5z7mgSZXTOL3TIJHwdnUP512qECAcX5JLv46NH7sSwOPzt7sLVys0Qtc=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:30 2026 by rpki-client