Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/2CB96FFE8C1311F1A48940A4CE1D38B0.roa
File: 2CB96FFE8C1311F1A48940A4CE1D38B0.roa (raw, json)
Hash identifier: 4BVXrsjSfZOlG6Lwd79j2HTxKWPi7qZHUFZz5/3agyk=
Subject key identifier: 0D:13:1A:24:D0:76:4B:05:B4:38:9F:C6:6F:A7:4A:54:D5:E0:CD:4E
Certificate issuer: /CN=F3655E48AF/serialNumber=1E8F8F820D7D01F8B5915762B1F5C638FD69E710
Certificate serial: 04
Authority key identifier: 1E:8F:8F:82:0D:7D:01:F8:B5:91:57:62:B1:F5:C6:38:FD:69:E7:10
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ho-Pgg19Afi1kVdisfXGOP1p5xA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/2CB96FFE8C1311F1A48940A4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:35:41 +0000
ROA not before: Thu 30 Jul 2026 12:35:37 +0000
ROA not after: Sat 31 Aug 2030 12:35:37 +0000
asID: 329724
IP address blocks: 102.202.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.mft
rsync://rpki.afrinic.net/repository/afrinic/Ho-Pgg19Afi1kVdisfXGOP1p5xA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655E48AF, serialNumber=1E8F8F820D7D01F8B5915762B1F5C638FD69E710
Validity
Not Before: Jul 30 12:35:37 2026 GMT
Not After : Aug 31 12:35:37 2030 GMT
Subject: CN=6a6b451d-d89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:03:cc:32:c2:33:df:50:12:2c:34:f1:84:
7f:12:eb:cb:94:8d:f4:83:f3:c9:3b:88:d8:c8:f0:
d8:55:e9:a6:ed:7b:f5:f0:c2:12:85:fa:46:bf:a2:
a1:0b:c2:8a:85:76:aa:5e:8c:da:f9:12:48:4e:e6:
9f:4a:10:89:67:f0:74:18:7e:46:13:f1:41:53:fa:
3d:b4:83:51:97:3a:6a:47:4e:93:0b:86:c4:b5:6d:
6c:23:ff:05:99:9c:ce:fa:ea:2d:24:97:61:0e:0b:
9d:2a:d5:4d:0e:6a:84:5e:7b:b0:b0:1c:b1:54:8f:
59:72:57:89:cf:14:46:dd:d7:2f:f0:92:db:63:05:
a5:f7:8f:04:aa:ab:8b:d7:95:0b:cb:52:d8:b9:02:
66:7b:7c:e0:81:01:98:18:6a:26:4c:d9:14:00:85:
6a:b9:91:a3:17:1f:4b:4a:d0:e7:e1:b8:43:56:af:
5a:6e:dc:61:d8:7d:79:7b:92:b6:39:c5:ea:c8:5d:
71:c0:b5:f7:80:29:ee:3d:36:96:d2:3d:2f:ba:58:
45:94:f2:63:b0:6e:cd:fb:f1:99:0a:b9:4a:24:3c:
1e:93:ba:c0:ca:1e:63:d8:e1:72:0c:a2:a1:9b:2a:
1f:a1:f2:09:99:83:e3:a9:7b:9c:db:65:b8:f7:f6:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:1A:24:D0:76:4B:05:B4:38:9F:C6:6F:A7:4A:54:D5:E0:CD:4E
X509v3 Authority Key Identifier:
keyid:1E:8F:8F:82:0D:7D:01:F8:B5:91:57:62:B1:F5:C6:38:FD:69:E7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho-Pgg19Afi1kVdisfXGOP1p5xA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/2CB96FFE8C1311F1A48940A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5d:c9:e9:35:cb:0f:19:40:0c:df:3a:6b:dd:c7:9f:04:7e:
3d:25:c0:56:23:ac:c0:9e:52:50:7d:0b:1d:32:86:ac:39:f6:
78:32:f3:9a:5e:31:66:71:63:b3:28:9c:93:35:98:63:ac:ef:
a0:dc:c2:9c:07:4b:9e:71:62:f5:2a:e4:bf:2b:d7:e9:2a:54:
21:2d:97:92:7b:55:5c:4e:6e:9a:1b:4b:be:ab:e6:c0:cd:f1:
68:b3:f8:3c:07:15:ff:cf:16:f0:70:74:65:1c:fb:78:fb:a2:
a5:1e:9e:c4:a0:5f:8a:e2:21:46:a7:92:d9:a4:aa:b5:bd:28:
99:09:67:31:b4:5f:87:ee:80:7d:0d:46:a3:45:c6:38:91:46:
f7:30:69:12:fe:31:00:6b:be:c7:19:f8:0b:0d:50:f2:89:03:
7b:86:3f:0f:09:fa:de:e5:6e:b2:7d:99:04:3f:c8:90:75:2e:
5c:bb:59:d0:eb:5d:78:4f:8b:35:fd:3c:1a:ed:14:9c:61:8e:
b6:8a:9f:3d:ff:06:07:cf:d4:55:3e:36:d3:b9:01:22:27:82:
0f:5b:f6:ed:54:28:26:e9:c7:95:16:08:b0:9c:bd:f3:47:3e:
fe:4b:76:35:ec:81:9b:0d:94:1a:c4:19:c4:94:fd:1b:53:f0:
c2:e6:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:34 2026 by rpki-client