Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/035CAA908B7311F195CEEFC9CE1D38B0.roa
File: 035CAA908B7311F195CEEFC9CE1D38B0.roa (raw, json)
Hash identifier: qcBetUd8xC2jeGG+Hn5C4gKtPrfGhAKKzRv2pUT1GwI=
Subject key identifier: BD:6D:03:F4:90:DB:B6:55:BA:54:E7:E8:D5:97:F0:3C:A6:6A:56:70
Certificate issuer: /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial: 0713
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/035CAA908B7311F195CEEFC9CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:29:12 +0000
ROA not before: Wed 29 Jul 2026 17:29:08 +0000
ROA not after: Tue 30 Sep 2031 17:29:08 +0000
asID: 328935
IP address blocks: 102.219.56.0/22 maxlen: 22
2c0f:7900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669277AF, serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Validity
Not Before: Jul 29 17:29:08 2026 GMT
Not After : Sep 30 17:29:08 2031 GMT
Subject: CN=6a6a3868-f573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:18:ee:6f:02:e3:95:c8:8d:52:78:b3:a3:
4c:c7:87:f8:4b:30:04:22:36:61:26:12:f7:86:bb:
61:b3:63:0c:9b:ff:f6:78:e0:d3:8e:ba:1e:7e:24:
5d:c7:2f:a8:f0:eb:1a:33:87:93:02:ec:20:a7:30:
67:f3:61:7d:95:56:46:c1:f1:dc:0b:25:67:e5:6f:
6d:ad:8d:0e:60:20:c9:10:cc:c9:59:cf:1d:bd:3a:
d8:ec:e2:22:f6:27:40:21:8e:bc:29:a2:50:8a:48:
55:8e:85:4b:43:56:7e:47:95:be:f2:06:5a:81:dd:
0b:6a:5d:00:27:6c:9b:5d:8a:43:47:a2:56:aa:e2:
a5:45:4c:15:33:1e:bf:66:30:da:1d:3a:b5:ec:df:
60:fe:d7:f5:f6:3a:92:d6:79:82:46:be:91:47:3f:
0c:33:10:7c:a7:bc:44:06:5f:8e:a9:bf:09:1b:63:
89:70:f9:8b:c3:93:6a:9d:ef:4b:18:ce:cd:df:fb:
44:87:3a:90:5d:2b:3d:e0:48:91:8e:9b:5e:a3:10:
b2:43:56:90:c2:56:bb:84:38:4d:cd:0a:b7:08:47:
b9:43:8e:0c:da:f9:bd:70:89:75:5f:68:07:1e:ee:
50:f7:28:14:1c:09:78:9e:a4:02:e2:b1:18:7e:8e:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:03:F4:90:DB:B6:55:BA:54:E7:E8:D5:97:F0:3C:A6:6A:56:70
X509v3 Authority Key Identifier:
keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/035CAA908B7311F195CEEFC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.56.0/22
IPv6:
2c0f:7900::/32
Signature Algorithm: sha256WithRSAEncryption
3d:4d:08:fe:4d:03:61:01:79:fc:61:e8:6e:93:1e:cc:4b:6c:
06:18:83:77:47:9b:22:02:e5:67:5a:f9:99:b4:7e:eb:2e:9b:
1b:70:c5:4e:69:9c:21:7a:7c:b8:27:5f:95:38:26:2a:9f:e7:
dc:60:1c:5f:da:75:53:76:a7:74:c7:07:86:20:35:94:36:fa:
33:71:fb:95:3c:5e:73:72:a2:59:a1:b4:2d:9e:23:89:09:5b:
bf:84:5e:bc:88:40:83:de:98:93:52:69:4a:0a:2c:d9:43:b6:
d7:91:4e:e2:ca:6a:46:6c:a5:13:3a:56:35:bd:38:d7:53:31:
a3:be:ff:56:dd:dc:71:18:93:98:b5:c8:98:db:30:c8:f6:f6:
01:c0:88:c6:e6:3f:e5:1e:e1:9c:e4:86:e5:b6:17:8e:2a:24:
ff:16:eb:cb:cf:94:39:3a:24:1a:58:ad:94:d5:b7:b9:22:a4:
c0:64:af:9d:02:23:8c:4d:0c:9d:eb:30:16:69:6c:83:60:e2:
50:4d:14:6a:a2:27:8a:52:12:23:bd:d8:9e:d6:39:c3:d7:a1:
4f:2c:d1:b5:c5:f9:c8:10:46:09:8f:68:41:c3:ba:23:72:24:
9a:13:57:0e:f3:8e:9a:ae:0e:52:2e:d7:c2:e2:7b:f2:64:b2:
61:f0:17:08
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjkyNzdBRjExMC8GA1UEBRMoRDM4QTg1NzEwRkVGRTZGQTZCQjVBQzIyMDgwMkE4
RTQ5QUFDNkJFNDAeFw0yNjA3MjkxNzI5MDhaFw0zMTA5MzAxNzI5MDhaMBgxFjAU
BgNVBAMTDTZhNmEzODY4LWY1NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXQBjubwLjlciNUnizo0zHh/hLMAQiNmEmEveGu2GzYwyb//Z44NOOuh5+
JF3HL6jw6xozh5MC7CCnMGfzYX2VVkbB8dwLJWflb22tjQ5gIMkQzMlZzx29Otjs
4iL2J0AhjrwpolCKSFWOhUtDVn5Hlb7yBlqB3QtqXQAnbJtdikNHolaq4qVFTBUz
Hr9mMNodOrXs32D+1/X2OpLWeYJGvpFHPwwzEHynvEQGX46pvwkbY4lw+YvDk2qd
70sYzs3f+0SHOpBdKz3gSJGOm16jELJDVpDCVruEOE3NCrcIR7lDjgza+b1wiXVf
aAce7lD3KBQcCXiepALisRh+jpXJAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUvW0D
9JDbtlW6VOfo1ZfwPKZqVnAwHwYDVR0jBBgwFoAU04qFcQ/v5vprtawiCAKo5Jqs
a+QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5Mjc3LzVFMjQ1MDgyMjFFMTExRUNCRkQxMEE2MkQ4QTAxNENFLzA0cUZj
UV92NXZwcnRhd2lDQUtvNUpxc2EtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzA0cUZjUV92NXZwcnRhd2lDQUtvNUpxc2EtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5Mjc3LzVFMjQ1MDgyMjFFMTExRUNCRkQxMEE2MkQ4
QTAxNENFLzAzNUNBQTkwOEI3MzExRjE5NUNFRUZDOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2zgwDQQCAAIwBwMFACwP
eQAwDQYJKoZIhvcNAQELBQADggEBAD1NCP5NA2EBefxh6G6THsxLbAYYg3dHmyIC
5Wda+Zm0fusumxtwxU5pnCF6fLgnX5U4Jiqf59xgHF/adVN2p3THB4YgNZQ2+jNx
+5U8XnNyolmhtC2eI4kJW7+EXryIQIPemJNSaUoKLNlDtteRTuLKakZspRM6VjW9
ONdTMaO+/1bd3HEYk5i1yJjbMMj29gHAiMbmP+Ue4ZzkhuW2F44qJP8W68vPlDk6
JBpYrZTVt7kipMBkr50CI4xNDJ3rMBZpbINg4lBNFGqiJ4pSEiO92J7WOcPXoU8s
0bXF+cgQRgmPaEHDuiNyJJoTVw7zjpquDlIu18Lie/JksmHwFwg=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:20 2026 by rpki-client