Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/7C4E6EFA8B6B11F1975A431DCF1D38B0.roa
File: 7C4E6EFA8B6B11F1975A431DCF1D38B0.roa (raw, json)
Hash identifier: 5fNF9adn8hznCtC8W7/QFTQ4MXq5VVjvENhur/9sV/w=
Subject key identifier: E2:CB:04:DC:0A:E9:14:56:FF:9A:FB:E3:ED:3B:1A:C6:12:87:89:BD
Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial: 08F5
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/7C4E6EFA8B6B11F1975A431DCF1D38B0.roa
Signing time: Wed 29 Jul 2026 16:35:19 +0000
ROA not before: Wed 29 Jul 2026 16:35:15 +0000
ROA not after: Wed 23 Mar 2033 16:35:15 +0000
asID: 37337
IP address blocks: 41.79.48.0/22 maxlen: 24
102.223.24.0/22 maxlen: 24
2c0f:f840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Validity
Not Before: Jul 29 16:35:15 2026 GMT
Not After : Mar 23 16:35:15 2033 GMT
Subject: CN=6a6a2bc7-ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:ca:e7:46:da:ff:08:a1:ec:37:7f:83:cc:
a9:d1:dc:61:5a:48:3d:09:80:98:7b:ed:e2:06:59:
b1:c1:4b:48:41:04:df:91:8f:23:f4:fa:f7:bf:f0:
1d:80:d4:e0:ed:db:a3:05:44:eb:b8:64:7c:7f:f6:
f1:8d:f9:08:98:20:8c:0a:bc:9f:d1:9a:2b:72:0c:
19:fb:e7:b8:4d:d9:b3:b8:b4:48:c9:5e:b7:d5:64:
84:76:9d:87:84:bc:3f:33:3d:d6:17:a0:59:5a:7b:
f5:43:58:c7:48:8c:68:c4:8e:f7:c1:17:95:5d:81:
cc:78:30:8e:aa:72:9b:b8:c1:fd:b0:1f:54:de:db:
55:68:b2:2d:4a:9e:d2:36:b5:30:86:db:84:0d:d4:
45:de:60:7b:77:bd:7d:2b:b4:af:b6:81:15:06:01:
9a:79:e7:ea:15:a5:5b:03:98:d2:ca:e1:70:20:e0:
eb:af:9a:6c:3d:a2:95:e8:80:e5:b4:eb:6e:97:b1:
24:b2:7e:d1:31:6c:4c:ff:bc:2d:99:23:c4:b3:9d:
cf:53:ce:fb:be:dd:42:65:7e:18:fa:ab:54:10:08:
7c:f7:88:ba:ac:0c:c2:52:e9:ef:d0:f6:0e:0a:bd:
8f:7e:95:ff:85:95:b3:1e:ee:f2:f4:7e:56:65:f3:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:04:DC:0A:E9:14:56:FF:9A:FB:E3:ED:3B:1A:C6:12:87:89:BD
X509v3 Authority Key Identifier:
keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/7C4E6EFA8B6B11F1975A431DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.48.0/22
102.223.24.0/22
IPv6:
2c0f:f840::/32
Signature Algorithm: sha256WithRSAEncryption
36:b8:93:a3:3a:13:e9:0b:76:55:5a:ed:b8:4f:3c:de:fa:fc:
62:00:6d:6e:f6:52:ab:29:8a:52:ce:c1:10:3a:ac:85:22:5a:
c1:cc:a3:c9:31:3f:d6:9e:7f:fc:8c:47:e6:82:1d:86:c3:c8:
b5:0e:7b:37:a4:ca:c6:7c:0c:ec:49:b7:2e:13:1d:7d:67:16:
b4:33:c3:7b:67:f6:e6:39:18:a1:8f:ee:be:30:3b:2b:7d:41:
af:1f:eb:5b:9e:dc:cb:b3:28:dd:a8:88:db:d6:b8:15:92:31:
26:fb:e4:c3:8d:d5:23:16:47:7b:a1:d1:68:6b:e2:c4:01:54:
a2:ff:af:a3:b6:f5:a7:15:23:d1:90:9a:d8:92:30:14:6e:6b:
be:5f:86:84:29:f7:3a:e3:61:dd:40:b2:4b:b3:15:28:21:e4:
d8:18:3b:17:26:7a:93:4b:b6:c1:4d:01:f7:fe:ed:36:6d:90:
40:1e:a4:9d:c4:a9:47:26:f3:fa:31:ba:cd:3a:c4:30:06:2e:
84:e0:5d:b5:8e:d0:f8:03:0d:ac:a6:11:8c:80:05:f6:c5:72:
f5:9c:cf:b9:2c:88:95:d7:8e:e6:4a:5f:9c:d6:12:bb:db:ad:
1e:20:1a:94:fc:7c:7f:07:ed:cd:86:50:ad:df:f4:a0:91:8b:
7f:57:be:af
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc0NEZBRjExMC8GA1UEBRMoODBBRjA2MEU0NjQwQzMyNjUzRDBGMDBDMzAyNDUx
NEE5RjE0OTUzODAeFw0yNjA3MjkxNjM1MTVaFw0zMzAzMjMxNjM1MTVaMBgxFjAU
BgNVBAMTDTZhNmEyYmM3LWVlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDl/srnRtr/CKHsN3+DzKnR3GFaSD0JgJh77eIGWbHBS0hBBN+RjyP0+ve/
8B2A1ODt26MFROu4ZHx/9vGN+QiYIIwKvJ/RmityDBn757hN2bO4tEjJXrfVZIR2
nYeEvD8zPdYXoFlae/VDWMdIjGjEjvfBF5Vdgcx4MI6qcpu4wf2wH1Te21Vosi1K
ntI2tTCG24QN1EXeYHt3vX0rtK+2gRUGAZp55+oVpVsDmNLK4XAg4Ouvmmw9opXo
gOW0626XsSSyftExbEz/vC2ZI8Sznc9Tzvu+3UJlfhj6q1QQCHz3iLqsDMJS6e/Q
9g4KvY9+lf+FlbMe7vL0flZl817jAgMBAAGjggK6MIICtjAdBgNVHQ4EFgQU4ssE
3ArpFFb/mvvj7TsaxhKHib0wHwYDVR0jBBgwFoAUgK8GDkZAwyZT0PAMMCRRSp8U
lTgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3NDRGLzNCMDJGOEIyQURDMzExRUE4RjQyRUY3N0Y4QUVBMjI4L2dLOEdE
a1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dLOEdEa1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3NDRGLzNCMDJGOEIyQURDMzExRUE4RjQyRUY3N0Y4
QUVBMjI4LzdDNEU2RUZBOEI2QjExRjE5NzVBNDMxRENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIpTzADBAJm3xgwDQQCAAIw
BwMFACwP+EAwDQYJKoZIhvcNAQELBQADggEBADa4k6M6E+kLdlVa7bhPPN76/GIA
bW72UqspilLOwRA6rIUiWsHMo8kxP9aef/yMR+aCHYbDyLUOezekysZ8DOxJty4T
HX1nFrQzw3tn9uY5GKGP7r4wOyt9Qa8f61ue3MuzKN2oiNvWuBWSMSb75MON1SMW
R3uh0Whr4sQBVKL/r6O29acVI9GQmtiSMBRua75fhoQp9zrjYd1AskuzFSgh5NgY
OxcmepNLtsFNAff+7TZtkEAepJ3EqUcm8/oxus06xDAGLoTgXbWO0PgDDaymEYyA
BfbFcvWcz7ksiJXXjuZKX5zWErvbrR4gGpT8fH8H7c2GUK3f9KCRi39Xvq8=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client