Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/B910CB028E6E11F1845A6602CF1D38B0.roa
File: B910CB028E6E11F1845A6602CF1D38B0.roa (raw, json)
Hash identifier: w0divEnGeKhPaNpp5pSAeh2v6YZz+bPKKZA6O6oQeAo=
Subject key identifier: C3:5E:56:D4:2C:F4:DC:E9:6F:42:76:D8:0E:29:31:EF:3F:A9:53:C1
Certificate issuer: /CN=F3652A25AF/serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
Certificate serial: 02
Authority key identifier: 5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/B910CB028E6E11F1845A6602CF1D38B0.roa
Signing time: Sun 02 Aug 2026 12:36:03 +0000
ROA not before: Sun 02 Aug 2026 12:35:59 +0000
ROA not after: Sat 02 Aug 2031 12:35:59 +0000
asID: 329773
IP address blocks: 102.202.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652A25AF, serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
Validity
Not Before: Aug 2 12:35:59 2026 GMT
Not After : Aug 2 12:35:59 2031 GMT
Subject: CN=6a6f39b3-7b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:75:54:e3:32:32:26:65:34:e5:00:74:96:
31:b9:59:d2:76:2a:20:92:78:95:9d:dc:99:4a:0f:
70:fa:43:bc:67:62:fe:75:28:76:42:24:6b:a3:d6:
d7:b1:f9:ca:df:99:20:4f:95:42:f1:a5:12:eb:e8:
64:19:b3:b1:d7:e5:34:ff:9a:75:19:0a:ae:ee:ad:
28:be:df:ab:e5:33:56:a2:02:70:d8:ac:dc:e6:aa:
7b:07:39:04:b0:db:15:6e:31:f4:39:3f:a5:13:d7:
7d:ea:4f:8b:3d:ac:90:73:ba:a2:66:ea:55:87:a1:
b8:a7:f1:f9:ba:e2:52:22:55:59:f0:1b:77:a0:72:
26:8f:d2:e4:66:b3:8c:81:97:b3:27:a1:32:16:50:
37:b6:de:e1:2a:35:58:e1:7f:dc:25:45:3a:d0:1a:
f7:27:3f:e6:bc:7d:cc:60:80:ca:43:5b:9f:a2:0d:
10:61:0b:bb:b4:00:19:a8:84:63:a0:2b:76:06:97:
5a:d8:c9:ad:ae:cc:15:2a:c5:89:0e:13:44:2a:1a:
00:db:54:6e:3d:ac:56:95:1d:7a:6b:eb:f1:57:05:
fd:c8:18:1b:2e:98:5c:c0:11:59:63:e1:0a:7f:14:
77:3d:77:46:5d:15:f4:ad:f6:a1:3b:63:55:fe:6e:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:56:D4:2C:F4:DC:E9:6F:42:76:D8:0E:29:31:EF:3F:A9:53:C1
X509v3 Authority Key Identifier:
keyid:5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/B910CB028E6E11F1845A6602CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.6.0/24
Signature Algorithm: sha256WithRSAEncryption
61:de:ca:b7:47:4b:03:ad:31:d3:d2:58:8b:d1:2b:a3:63:01:
af:0d:b8:d9:2e:6e:9f:3d:aa:a3:c2:d9:be:74:c9:4f:f4:8d:
da:8a:2c:32:c5:e6:29:af:60:d2:fa:67:2e:b1:b7:69:f7:1b:
c5:b2:06:14:df:92:24:f4:f4:5c:74:9e:1d:16:26:5a:b8:63:
a1:77:bf:de:f9:f6:73:78:7f:0a:bd:d9:96:68:04:83:e1:b7:
40:e8:b8:12:58:80:ab:74:6f:6b:bc:c2:df:32:b6:6e:1a:c7:
1d:df:91:53:44:1e:76:32:93:37:e1:53:de:f8:b8:08:58:c8:
87:f0:66:8d:f5:44:23:36:89:a9:3c:51:11:08:55:bf:f9:58:
e4:95:5d:19:52:8a:7e:89:c4:e6:f0:eb:51:1c:4b:af:08:dd:
37:ab:ff:a1:ee:8b:6c:c2:b5:a3:3c:de:8b:1f:cf:ca:77:70:
7e:de:8e:c3:d9:58:36:e9:52:f0:9e:54:33:a1:2b:d2:3f:23:
ce:42:36:7c:1e:5d:b8:ec:b9:2c:d5:2e:60:84:0d:f5:a8:5a:
d8:ea:75:73:54:e8:88:7d:90:c4:d2:d9:33:ef:d4:f5:7c:68:
b6:ec:9d:0f:e9:72:9c:5d:e5:3e:06:cc:c7:25:f8:2a:36:b7:
98:44:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:40 2026 by rpki-client