Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/1C7034788C1011F1A1F5490DCF1D38B0.roa
File: 1C7034788C1011F1A1F5490DCF1D38B0.roa (raw, json)
Hash identifier: ZVd4O69I57WSwGFoRPWoL4CVbySrixHjyv1WmPMqr5g=
Subject key identifier: 57:5C:F2:61:DB:D1:35:05:6E:91:A5:60:66:E7:27:60:43:16:B5:13
Certificate issuer: /CN=F3694F05AF/serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Certificate serial: 05D0
Authority key identifier: C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/1C7034788C1011F1A1F5490DCF1D38B0.roa
Signing time: Thu 30 Jul 2026 12:13:45 +0000
ROA not before: Thu 30 Jul 2026 12:13:41 +0000
ROA not after: Mon 11 Oct 2027 12:13:41 +0000
asID: 328722
IP address blocks: 102.221.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694F05AF, serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Validity
Not Before: Jul 30 12:13:41 2026 GMT
Not After : Oct 11 12:13:41 2027 GMT
Subject: CN=6a6b3ff9-790d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:31:e0:b7:7c:a3:15:12:63:b6:a5:b8:12:
00:be:05:0a:af:8d:b5:da:77:6e:91:e2:6d:bc:47:
d2:ca:5d:56:06:04:a4:05:d3:29:bb:0b:3e:34:39:
ab:3d:38:d9:ec:68:14:77:94:42:03:43:b0:85:f1:
68:eb:4e:8b:c1:3c:2c:f5:13:6c:c1:98:bb:f1:1d:
bd:99:30:58:89:fa:53:02:ef:5e:2c:fb:47:da:12:
97:00:8c:64:c8:d7:cd:01:b5:35:df:69:a7:f4:b3:
f8:3a:16:02:5e:00:1a:c9:2e:67:c9:8d:94:73:93:
55:c2:c4:7e:95:b0:38:f9:e4:40:7a:55:7a:4f:cc:
73:30:75:7b:c2:58:5c:ef:04:d8:d1:1c:9c:ed:49:
29:65:75:af:c3:a4:bf:25:22:bc:b7:ba:97:01:a7:
b7:aa:a1:04:14:9f:ac:3e:47:49:be:82:75:3a:00:
a0:f6:30:0d:18:e8:e7:8e:52:5b:d6:25:2e:cc:29:
18:7b:3c:64:40:19:b5:53:5c:0e:5b:99:57:69:bf:
cf:ec:2c:e3:65:80:e8:2d:4b:d9:8d:29:f5:c1:1b:
20:22:d0:d3:b4:39:7f:12:a8:58:73:0c:07:2a:40:
df:39:9e:eb:87:75:6d:a2:db:fc:87:93:1b:b3:4b:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:F2:61:DB:D1:35:05:6E:91:A5:60:66:E7:27:60:43:16:B5:13
X509v3 Authority Key Identifier:
keyid:C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/1C7034788C1011F1A1F5490DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.236.0/24
Signature Algorithm: sha256WithRSAEncryption
18:10:a3:e8:2a:c0:94:02:06:c2:b2:d0:08:70:a2:74:74:6b:
6c:be:7d:4b:81:ca:ea:76:a2:fd:f5:e9:ad:a3:75:a4:e5:73:
27:e4:45:f6:1a:80:ce:3b:3c:8c:66:67:ed:03:67:5c:2e:06:
a7:f1:a9:8b:20:49:4b:12:10:6f:1d:83:00:54:70:1e:a4:f8:
02:73:58:cf:72:42:09:f4:f0:70:55:8b:7b:27:0f:59:86:4c:
89:e5:dd:7c:d0:7f:04:e0:e5:67:9b:a2:7a:8f:5b:f8:11:f0:
00:d7:0d:61:20:04:b7:b5:84:c6:28:ee:81:84:da:5d:ac:f4:
26:14:9a:05:77:ab:a0:78:0d:04:a1:30:53:53:b1:22:98:bc:
0b:de:71:82:a4:23:f3:93:39:64:03:58:d0:e3:46:da:94:73:
d8:11:61:f9:f0:9e:9c:75:eb:6d:0e:31:32:66:b0:30:54:ca:
a8:da:a8:90:28:1a:d5:30:7c:98:f2:ea:9d:53:d9:5a:2c:c8:
81:6c:99:e8:0d:34:72:3f:4d:f2:59:f1:e7:52:31:9f:44:dd:
82:1f:e4:0c:ee:05:a4:78:4d:74:a6:c3:48:b1:66:ff:36:eb:
0f:5a:25:3c:0f:10:99:a6:51:b2:b6:3a:e1:8e:f7:71:7b:f0:
bf:0a:9d:71
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTRGMDVBRjExMC8GA1UEBRMoQzhGOTBDNTY4OUY3NjJCMzYxNDJEOTJERDZDNTI1
N0EwMjYxQUREQjAeFw0yNjA3MzAxMjEzNDFaFw0yNzEwMTExMjEzNDFaMBgxFjAU
BgNVBAMTDTZhNmIzZmY5LTc5MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTZjHgt3yjFRJjtqW4EgC+BQqvjbXad26R4m28R9LKXVYGBKQF0ym7Cz40
Oas9ONnsaBR3lEIDQ7CF8WjrTovBPCz1E2zBmLvxHb2ZMFiJ+lMC714s+0faEpcA
jGTI180BtTXfaaf0s/g6FgJeABrJLmfJjZRzk1XCxH6VsDj55EB6VXpPzHMwdXvC
WFzvBNjRHJztSSllda/DpL8lIry3upcBp7eqoQQUn6w+R0m+gnU6AKD2MA0Y6OeO
UlvWJS7MKRh7PGRAGbVTXA5bmVdpv8/sLONlgOgtS9mNKfXBGyAi0NO0OX8SqFhz
DAcqQN85nuuHdW2i2/yHkxuzS0fpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUV1zy
YdvRNQVukaVgZucnYEMWtRMwHwYDVR0jBBgwFoAUyPkMVon3YrNhQtkt1sUlegJh
rdswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0RjA1LzNGOTZEQUQ4MkFCMjExRURBRTczQTc5Q0YxMjIyNDY4L3lQa01W
b24zWXJOaFF0a3Qxc1VsZWdKaHJkcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lQa01Wb24zWXJOaFF0a3Qxc1VsZWdKaHJkcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk0RjA1LzNGOTZEQUQ4MkFCMjExRURBRTczQTc5Q0Yx
MjIyNDY4LzFDNzAzNDc4OEMxMDExRjFBMUY1NDkwRENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3ewwDQYJKoZIhvcNAQEL
BQADggEBABgQo+gqwJQCBsKy0AhwonR0a2y+fUuByup2ov316a2jdaTlcyfkRfYa
gM47PIxmZ+0DZ1wuBqfxqYsgSUsSEG8dgwBUcB6k+AJzWM9yQgn08HBVi3snD1mG
TInl3XzQfwTg5WebonqPW/gR8ADXDWEgBLe1hMYo7oGE2l2s9CYUmgV3q6B4DQSh
MFNTsSKYvAvecYKkI/OTOWQDWNDjRtqUc9gRYfnwnpx1620OMTJmsDBUyqjaqJAo
GtUwfJjy6p1T2VosyIFsmegNNHI/TfJZ8edSMZ9E3YIf5AzuBaR4TXSmw0ixZv82
6w9aJTwPEJmmUbK2OuGO93F78L8KnXE=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:10 2026 by rpki-client