Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/A727C4428B6F11F1BB2BB2B7CE1D38B0.roa
File: A727C4428B6F11F1BB2BB2B7CE1D38B0.roa (raw, json)
Hash identifier: XawFZJaxnzvq5b0Rtz7wsotNQ+4PwTnD6TvOuVmsVCg=
Subject key identifier: 8F:9B:84:1C:F1:6D:BF:10:11:68:DE:73:C8:AB:3F:34:91:4C:18:14
Certificate issuer: /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial: 06FD
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/A727C4428B6F11F1BB2BB2B7CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:05:09 +0000
ROA not before: Wed 29 Jul 2026 17:05:05 +0000
ROA not after: Tue 31 Dec 2030 17:05:05 +0000
asID: 328961
IP address blocks: 102.213.132.0/22 maxlen: 24
102.217.240.0/22 maxlen: 24
2c0f:4f00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Validity
Not Before: Jul 29 17:05:05 2026 GMT
Not After : Dec 31 17:05:05 2030 GMT
Subject: CN=6a6a32c5-4525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:d5:ee:bf:3b:d1:e6:fd:9b:1f:ad:2f:9f:
a9:3c:cd:9c:aa:86:9d:35:74:45:36:75:1c:a1:c4:
de:f9:de:95:b4:ac:6b:38:59:41:ce:b3:df:c1:50:
ee:7c:8d:b1:de:a5:b0:f5:a0:54:7c:0c:6d:c8:03:
0e:e2:f7:1c:a8:2a:84:43:ff:0f:0e:53:cb:69:67:
a9:33:09:d2:1c:3b:f3:00:57:38:57:18:3f:a0:c5:
5d:b9:ac:e2:62:25:87:ed:fc:c7:d7:dd:ae:0e:0c:
96:e1:ba:fd:5d:2e:05:0e:d1:1c:52:f2:5b:08:7c:
e8:50:40:b3:e4:a7:e6:17:82:2e:a5:eb:0b:18:c7:
a8:22:66:51:7e:9b:20:f3:84:63:af:b4:be:05:29:
15:78:18:36:37:1c:32:2b:b1:63:27:ac:26:99:7e:
f5:ef:a1:1f:88:84:d1:e4:ab:59:e7:ed:c0:80:e8:
51:d9:9a:a7:53:88:9d:61:2a:36:19:c2:27:d5:b7:
3c:c6:fc:ef:bb:36:1e:63:dd:14:8f:4b:4d:d3:ce:
50:03:04:7d:c3:6e:99:fb:b2:fd:6a:a1:f1:af:11:
45:39:bb:ec:83:76:02:4c:0c:70:d2:77:02:90:d2:
14:4c:9f:e6:b9:46:61:ce:52:00:4d:78:cd:1d:d0:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9B:84:1C:F1:6D:BF:10:11:68:DE:73:C8:AB:3F:34:91:4C:18:14
X509v3 Authority Key Identifier:
keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/A727C4428B6F11F1BB2BB2B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.132.0/22
102.217.240.0/22
IPv6:
2c0f:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
50:e3:f6:02:c0:a3:d6:94:34:a1:18:26:be:5e:20:33:ff:ce:
aa:60:43:b2:ee:6f:a2:e2:33:41:b1:4c:5d:95:8a:51:32:aa:
03:dd:23:ca:a0:62:65:45:18:9c:9e:85:bb:88:64:af:e1:8c:
74:64:ed:b7:e1:67:05:0c:40:73:02:df:c7:02:0b:e8:4f:4d:
b6:2b:58:27:6e:9f:03:3b:d6:81:69:fa:e2:d4:2e:36:39:14:
64:cf:ec:90:f3:ac:72:fc:4f:ee:ad:59:fb:d5:8f:cc:c5:01:
ee:ac:11:7a:26:84:cb:fd:6e:de:34:82:5d:c5:2c:61:3b:a8:
7e:6b:8c:e5:a3:82:68:de:31:0a:a3:4a:c0:df:1a:a9:7c:6d:
54:b5:81:84:d2:c0:67:a5:29:2d:3d:e4:90:b0:9d:95:70:76:
28:d2:78:18:d0:28:ff:60:2a:11:e3:c9:50:4d:de:4b:dc:4f:
6f:8d:15:cc:58:83:ff:73:8f:29:78:9a:7f:fe:a5:c6:2c:3d:
4b:ab:e1:aa:78:9d:fd:ef:63:79:b0:06:8e:29:c7:7f:d3:d0:
c2:d6:ab:50:3b:4b:98:af:d4:03:6f:f4:32:69:3c:d6:f2:92:
35:24:76:d5:84:6d:ea:99:90:a0:31:6e:d9:5c:fb:6e:1d:29:
b8:67:bb:7a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUQ0OEFBRjExMC8GA1UEBRMoQkJGRjI1MjQwQjIwN0Y5QkFDQzVDQjk1NEE2MjMw
OUFCQkE1MzY1RDAeFw0yNjA3MjkxNzA1MDVaFw0zMDEyMzExNzA1MDVaMBgxFjAU
BgNVBAMTDTZhNmEzMmM1LTQ1MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0N9XuvzvR5v2bH60vn6k8zZyqhp01dEU2dRyhxN753pW0rGs4WUHOs9/B
UO58jbHepbD1oFR8DG3IAw7i9xyoKoRD/w8OU8tpZ6kzCdIcO/MAVzhXGD+gxV25
rOJiJYft/MfX3a4ODJbhuv1dLgUO0RxS8lsIfOhQQLPkp+YXgi6l6wsYx6giZlF+
myDzhGOvtL4FKRV4GDY3HDIrsWMnrCaZfvXvoR+IhNHkq1nn7cCA6FHZmqdTiJ1h
KjYZwifVtzzG/O+7Nh5j3RSPS03TzlADBH3Dbpn7sv1qofGvEUU5u+yDdgJMDHDS
dwKQ0hRMn+a5RmHOUgBNeM0d0LO5AgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUj5uE
HPFtvxARaN5zyKs/NJFMGBQwHwYDVR0jBBgwFoAUu/8lJAsgf5usxcuVSmIwmrul
Nl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlENDhBL0M0MDk3REQwMzhENjExRUNBNTAxMjQ3REQ4QTAxNENFL3VfOGxK
QXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VfOGxKQXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlENDhBL0M0MDk3REQwMzhENjExRUNBNTAxMjQ3REQ4
QTAxNENFL0E3MjdDNDQyOEI2RjExRjFCQjJCQjJCN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm1YQDBAJm2fAwDQQCAAIw
BwMFACwPTwAwDQYJKoZIhvcNAQELBQADggEBAFDj9gLAo9aUNKEYJr5eIDP/zqpg
Q7Lub6LiM0GxTF2VilEyqgPdI8qgYmVFGJyehbuIZK/hjHRk7bfhZwUMQHMC38cC
C+hPTbYrWCdunwM71oFp+uLULjY5FGTP7JDzrHL8T+6tWfvVj8zFAe6sEXomhMv9
bt40gl3FLGE7qH5rjOWjgmjeMQqjSsDfGql8bVS1gYTSwGelKS095JCwnZVwdijS
eBjQKP9gKhHjyVBN3kvcT2+NFcxYg/9zjyl4mn/+pcYsPUur4ap4nf3vY3mwBo4p
x3/T0MLWq1A7S5iv1ANv9DJpPNbykjUkdtWEbeqZkKAxbtlc+24dKbhnu3o=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:36:14 2026 by rpki-client