Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/C40549888F0011F1918F32FFCE1D38B0.roa
File: C40549888F0011F1918F32FFCE1D38B0.roa (raw, json)
Hash identifier: wFWmr0oJ7v1BsIvog0c7NfbbwrWinf932c1fPe3tfYg=
Subject key identifier: 9C:78:94:F6:0B:BE:3B:FB:53:03:30:2A:A3:9A:BF:DD:3F:C5:4A:7E
Certificate issuer: /CN=F368B25FAF/serialNumber=FF8FA54E9EE23337D980FAA6FF1B4C52844FF8D8
Certificate serial: 02
Authority key identifier: FF:8F:A5:4E:9E:E2:33:37:D9:80:FA:A6:FF:1B:4C:52:84:4F:F8:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/C40549888F0011F1918F32FFCE1D38B0.roa
Signing time: Mon 03 Aug 2026 06:01:28 +0000
ROA not before: Mon 03 Aug 2026 06:01:24 +0000
ROA not after: Thu 03 Aug 2028 06:01:24 +0000
asID: 328999
IP address blocks: 102.217.8.0/24 maxlen: 24
102.217.9.0/24 maxlen: 24
102.217.10.0/24 maxlen: 24
102.217.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.crl
rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft
rsync://rpki.afrinic.net/repository/afrinic/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B25FAF, serialNumber=FF8FA54E9EE23337D980FAA6FF1B4C52844FF8D8
Validity
Not Before: Aug 3 06:01:24 2026 GMT
Not After : Aug 3 06:01:24 2028 GMT
Subject: CN=6a702eb8-29e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:c9:f0:47:a6:bb:c0:70:df:1c:16:cf:ba:
81:2b:fd:83:a0:5d:16:ed:b7:30:bf:7b:78:f6:96:
0e:29:b4:bb:c7:ce:32:58:19:c9:cc:17:92:41:11:
6e:65:ba:50:ca:cb:c5:6a:c0:26:fd:64:08:72:79:
4f:f0:58:3c:a8:07:0e:2b:97:ec:70:7e:56:85:e6:
e9:87:e7:cd:33:0b:f8:2b:b9:b1:fa:dd:cc:cf:33:
48:dd:a2:30:3b:f3:2b:d3:42:e0:a0:11:8f:d7:87:
9a:b2:1a:bc:e1:db:d9:aa:d1:91:71:b1:55:73:8c:
04:28:e0:b0:9a:71:60:99:9a:19:22:9b:5e:4a:98:
85:1c:15:35:0c:bd:75:ea:8a:33:22:ac:12:b9:d2:
ba:83:fd:83:fc:22:d7:3f:e0:bb:06:30:e9:a9:df:
0c:6b:a1:da:da:2b:35:6d:0c:19:d5:53:fe:cc:99:
11:a7:21:fb:6b:a7:4f:fd:89:8a:7e:8e:97:35:ac:
54:f3:8f:26:16:d1:b5:16:8a:6b:73:db:60:65:be:
91:b9:1a:d9:7d:bd:90:10:81:ff:0d:70:96:cc:c2:
ea:fa:1f:0e:1d:f8:f3:5a:ca:11:7e:9a:62:89:fe:
45:54:bf:0d:25:ae:7b:a5:22:da:dc:02:2a:05:15:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:94:F6:0B:BE:3B:FB:53:03:30:2A:A3:9A:BF:DD:3F:C5:4A:7E
X509v3 Authority Key Identifier:
keyid:FF:8F:A5:4E:9E:E2:33:37:D9:80:FA:A6:FF:1B:4C:52:84:4F:F8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/C40549888F0011F1918F32FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.8.0/22
Signature Algorithm: sha256WithRSAEncryption
07:1b:a5:be:f1:a2:97:59:ad:45:08:08:d3:0f:24:24:d2:1d:
d5:80:16:33:a7:27:03:37:90:8f:15:25:78:4f:54:8b:b8:4f:
fa:9e:0e:32:f4:19:83:b3:56:86:f7:cb:29:ef:f8:d3:e6:c8:
87:ee:95:77:c8:5d:85:dc:3d:20:f1:ba:14:ac:cf:dc:03:22:
a1:44:9d:34:66:0f:7b:ae:f6:54:71:13:83:60:72:d4:85:b8:
99:95:b1:9b:47:ef:d3:49:dd:96:cc:c1:61:ab:ba:c4:28:fb:
8c:11:5f:7b:eb:fa:e6:41:6b:c1:b0:29:60:94:be:2e:8d:8d:
72:32:5a:28:ec:c5:50:c0:58:9d:3a:02:85:c2:72:e4:10:1b:
f3:e6:a5:ab:78:fc:e9:50:eb:31:7d:a9:e0:df:be:51:6d:b0:
8d:2c:19:7e:13:d6:5c:ec:ec:97:6c:ab:7f:ff:a0:f1:74:21:
42:62:95:8f:0a:09:2a:9c:c4:f3:88:bb:89:92:b8:c0:d2:a6:
6f:ef:24:98:68:32:af:37:ec:21:52:c1:21:66:87:a0:ab:f3:
ae:06:e7:12:a1:85:8c:86:b9:1e:2c:51:41:cc:4b:15:fb:b1:
e1:3f:7f:dc:ee:d2:aa:67:aa:8b:93:56:54:d4:f3:c3:62:51:
81:93:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:36 2026 by rpki-client