Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/FC67BBDA7B6E11F1A29088ECCE1D38B0.roa
File: FC67BBDA7B6E11F1A29088ECCE1D38B0.roa (raw, json)
Hash identifier: VuyY8Cp5a1XrJqlaUJnSJWCJHjs6SKQq/6s6QpmiIL8=
Subject key identifier: 87:3A:26:40:F5:FE:F5:1D:D8:06:AE:7C:A9:D0:52:56:E5:A0:82:02
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0FE3
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/FC67BBDA7B6E11F1A29088ECCE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:20:04 +0000
ROA not before: Thu 09 Jul 2026 08:19:59 +0000
ROA not after: Thu 31 Jul 2036 08:19:59 +0000
asID: 327750
IP address blocks: 102.69.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4067 (0xfe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Jul 9 08:19:59 2026 GMT
Not After : Jul 31 08:19:59 2036 GMT
Subject: CN=6a4f59b4-abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:e5:70:42:a5:1e:cc:b2:8a:75:f7:d4:cd:
77:79:43:e7:fc:13:c5:11:c1:bd:6d:0c:b7:5b:7a:
c2:87:2f:ec:54:d5:77:01:00:3d:de:97:de:97:50:
c6:27:a5:1d:77:39:05:c3:aa:0f:24:14:56:a0:cc:
e8:c3:d3:f5:5b:2d:a2:0c:ea:3c:29:7f:0b:7b:8d:
40:7c:60:12:80:1a:22:96:30:c5:18:ff:ba:f1:19:
99:2a:4b:5e:af:bc:76:53:1c:67:e7:51:5d:2b:6c:
d2:11:4a:ee:65:99:7f:bd:b3:f1:89:3e:ba:7a:e3:
65:a3:f0:b4:e9:59:71:72:5a:5b:cb:f1:2b:33:b7:
78:69:60:e9:64:8e:71:8a:49:04:5d:64:d4:40:1a:
e6:3b:09:5d:37:a2:f7:83:4b:d2:be:bf:b2:92:47:
3c:b2:32:c9:91:ca:6f:71:12:1a:90:94:03:90:67:
1c:a2:57:24:aa:57:1f:36:72:7e:98:9e:3e:7e:4b:
7d:10:80:c1:ea:e2:e2:e6:d6:01:c3:bd:d6:2e:f3:
3a:75:f6:30:aa:66:0d:03:8a:67:90:a0:73:55:fa:
f4:7b:ac:11:68:4c:f5:c4:0f:11:a8:f8:48:fd:e7:
8c:95:ea:66:cc:72:0c:83:29:b0:16:f2:42:6c:53:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:26:40:F5:FE:F5:1D:D8:06:AE:7C:A9:D0:52:56:E5:A0:82:02
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/FC67BBDA7B6E11F1A29088ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.248.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:22:9e:3f:3b:c8:b1:f4:1d:89:69:2b:86:62:51:21:29:77:
4b:4c:2c:13:6b:48:48:de:b0:75:42:3f:aa:fe:d9:a9:25:ed:
c6:5c:50:e3:2e:92:28:6f:3b:5d:bf:19:b5:5a:3b:c4:e3:bb:
b0:03:34:51:0e:ae:9b:27:e7:3d:c3:13:2a:48:42:ac:ca:7d:
c2:45:b9:88:ab:de:b0:ae:0e:05:cc:e7:ce:83:58:6b:ba:32:
d5:50:be:6f:fd:e0:cd:bf:18:2f:6b:0d:11:65:9d:d4:5f:3d:
13:53:a6:0b:a6:ae:bc:d6:1d:28:70:fe:26:68:ab:ce:85:e4:
aa:1d:23:d1:70:7e:35:14:d0:92:c8:19:d6:5d:c9:70:61:e4:
c1:4a:7b:03:26:63:d9:56:81:f0:d3:af:f0:0c:cb:66:05:96:
56:67:1a:71:1f:85:14:da:9a:5b:5c:3a:af:3d:fd:bf:e9:43:
2f:0f:2d:31:03:6a:f3:8a:05:2e:df:9a:54:df:c4:f7:7c:b9:
68:3e:a3:30:a8:90:cf:dc:5e:2b:6f:b4:aa:d0:44:4f:82:b0:
bb:dd:86:fc:f2:a5:27:46:cb:40:09:ef:22:11:ad:a2:ae:eb:
1d:78:41:20:75:9e:6f:d0:87:4c:e0:ed:9d:db:00:01:df:33:
3f:3d:30:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD+MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBBQ0ZBRjExMC8GA1UEBRMoODgyNjI5ODk1RDhEQjU3QjI1NDFFQTQ4RkExMTI2
MzI1RTI5MDIwQjAeFw0yNjA3MDkwODE5NTlaFw0zNjA3MzEwODE5NTlaMBgxFjAU
BgNVBAMTDTZhNGY1OWI0LWFiYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDb+VwQqUezLKKdffUzXd5Q+f8E8URwb1tDLdbesKHL+xU1XcBAD3el96X
UMYnpR13OQXDqg8kFFagzOjD0/VbLaIM6jwpfwt7jUB8YBKAGiKWMMUY/7rxGZkq
S16vvHZTHGfnUV0rbNIRSu5lmX+9s/GJPrp642Wj8LTpWXFyWlvL8Sszt3hpYOlk
jnGKSQRdZNRAGuY7CV03oveDS9K+v7KSRzyyMsmRym9xEhqQlAOQZxyiVySqVx82
cn6Ynj5+S30QgMHq4uLm1gHDvdYu8zp19jCqZg0DimeQoHNV+vR7rBFoTPXEDxGo
+Ej954yV6mbMcgyDKbAW8kJsU5bxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhzom
QPX+9R3YBq58qdBSVuWgggIwHwYDVR0jBBgwFoAUiCYpiV2NtXslQepI+hEmMl4p
AgswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4QUVBMjI4L2lDWXBp
VjJOdFhzbFFlcEktaEVtTWw0cEFncy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lDWXBpVjJOdFhzbFFlcEktaEVtTWw0cEFncy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4
QUVBMjI4L0ZDNjdCQkRBN0I2RTExRjFBMjkwODhFQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmRfgwDQYJKoZIhvcNAQEL
BQADggEBAEsinj87yLH0HYlpK4ZiUSEpd0tMLBNrSEjesHVCP6r+2akl7cZcUOMu
kihvO12/GbVaO8Tju7ADNFEOrpsn5z3DEypIQqzKfcJFuYir3rCuDgXM586DWGu6
MtVQvm/94M2/GC9rDRFlndRfPRNTpgumrrzWHShw/iZoq86F5KodI9FwfjUU0JLI
GdZdyXBh5MFKewMmY9lWgfDTr/AMy2YFllZnGnEfhRTamltcOq89/b/pQy8PLTED
avOKBS7fmlTfxPd8uWg+ozCokM/cXitvtKrQRE+CsLvdhvzypSdGy0AJ7yIRraKu
6x14QSB1nm/Qh0zg7Z3bAAHfMz89MHM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:43 2026 by rpki-client