Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/038F8934847E11F1A17202C8CE1D38B0.roa
File: 038F8934847E11F1A17202C8CE1D38B0.roa (raw, json)
Hash identifier: bi0jplJxyCtUg06GFuRdU/6LAuPHM1py8WeXrGn6jzo=
Subject key identifier: 1F:48:BD:EB:B3:3C:88:53:DE:85:34:AA:1A:0A:03:59:B7:17:50:E2
Certificate issuer: /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial: 0B94
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/038F8934847E11F1A17202C8CE1D38B0.roa
Signing time: Mon 20 Jul 2026 21:00:19 +0000
ROA not before: Mon 20 Jul 2026 21:00:14 +0000
ROA not after: Thu 19 Jul 2035 21:00:14 +0000
asID: 37721
IP address blocks: 102.67.96.0/19 maxlen: 24
102.212.161.0/24 maxlen: 24
102.214.64.0/22 maxlen: 24
2c0f:ee00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AF, serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Validity
Not Before: Jul 20 21:00:14 2026 GMT
Not After : Jul 19 21:00:14 2035 GMT
Subject: CN=6a5e8c63-0113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:19:b9:94:5e:71:c3:72:1d:b5:0a:96:c8:
f1:9f:45:f8:ee:ab:00:01:49:30:24:63:58:e1:31:
86:3f:57:a3:0c:29:71:bb:62:ac:57:30:93:69:13:
d8:0b:2f:d7:0e:77:f5:ac:e3:58:94:1e:00:87:d1:
eb:4d:81:5d:c4:e4:ea:ac:58:10:39:10:82:21:0c:
5c:c4:a0:df:4f:88:52:69:68:4d:d2:56:d7:f8:4b:
41:bc:b0:23:a7:52:5c:07:59:51:7b:99:f4:5a:d4:
78:bf:11:c4:84:64:9b:80:f8:d9:70:09:bf:93:02:
41:25:e6:c7:d5:d6:63:6e:a4:ec:22:4d:3d:f6:3f:
eb:17:dd:bd:b7:07:45:13:f9:20:59:56:af:8a:d9:
4a:14:9c:24:32:76:81:17:5e:2a:a0:d7:b2:25:90:
29:62:06:54:27:49:7f:73:38:3e:d2:db:69:90:ff:
0c:6d:c0:97:21:52:6e:cd:f4:78:94:9a:3e:47:b2:
29:68:ca:43:96:ad:b4:37:0e:e1:44:f6:4b:3b:13:
7c:06:20:25:18:2a:56:f7:d6:d2:7f:31:c3:15:34:
30:41:6f:7c:0c:cf:3c:0b:85:66:7f:d8:2e:59:e9:
ed:32:dc:3d:0a:1d:25:f3:fd:ab:bb:8e:d2:61:f1:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:BD:EB:B3:3C:88:53:DE:85:34:AA:1A:0A:03:59:B7:17:50:E2
X509v3 Authority Key Identifier:
keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/038F8934847E11F1A17202C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.96.0/19
102.212.161.0/24
102.214.64.0/22
IPv6:
2c0f:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:57:7e:c1:c2:86:1f:53:7a:d2:75:9d:33:82:7f:72:11:be:
0c:a0:4c:2e:d0:45:7a:a4:fc:51:a6:19:d8:73:e4:50:d2:80:
df:bb:bb:a8:8a:71:97:86:08:15:08:2f:71:7d:6c:ed:b3:ca:
3c:fc:c1:86:00:a0:47:f0:89:16:13:96:89:73:1d:4d:91:8a:
ae:f6:16:43:a7:7b:02:64:3a:d8:ff:31:ee:74:89:a8:82:e8:
d1:b2:e7:4b:65:71:29:c7:51:0c:90:67:34:42:e3:88:05:6c:
e3:8f:f9:34:eb:18:9c:a2:96:87:9b:ac:81:8f:dc:af:ca:e5:
2e:8d:d7:35:64:ca:bb:84:f0:f6:3d:01:a9:99:5e:ca:0a:b5:
0e:12:b3:b0:2d:1b:50:d9:d3:a2:a5:c3:ec:95:3a:d5:20:ea:
f8:59:83:fd:49:83:b7:b7:b1:60:a1:22:b4:3e:c7:68:cd:e4:
f9:cf:aa:54:d5:5e:3e:97:36:76:ac:25:e9:8a:14:59:b4:3d:
e3:d4:87:73:51:e8:14:8b:95:f5:8f:4e:7b:f6:87:81:bd:c5:
65:0e:f2:ab:f3:e9:52:77:46:72:5b:5f:fe:69:fe:1e:aa:0f:
8c:43:af:1e:3a:63:4c:d1:a4:62:c1:32:58:8a:47:d9:d3:6c:
a2:2f:38:9d
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBMDJBRjExMC8GA1UEBRMoNTY5NTJFRjkzMEY0NEZGRTkxMjc3MEUzREJDMTYz
MDQ5RjVBRkRCNzAeFw0yNjA3MjAyMTAwMTRaFw0zNTA3MTkyMTAwMTRaMBgxFjAU
BgNVBAMTDTZhNWU4YzYzLTAxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2mRm5lF5xw3IdtQqWyPGfRfjuqwABSTAkY1jhMYY/V6MMKXG7YqxXMJNp
E9gLL9cOd/Ws41iUHgCH0etNgV3E5OqsWBA5EIIhDFzEoN9PiFJpaE3SVtf4S0G8
sCOnUlwHWVF7mfRa1Hi/EcSEZJuA+NlwCb+TAkEl5sfV1mNupOwiTT32P+sX3b23
B0UT+SBZVq+K2UoUnCQydoEXXiqg17IlkCliBlQnSX9zOD7S22mQ/wxtwJchUm7N
9HiUmj5HsiloykOWrbQ3DuFE9ks7E3wGICUYKlb31tJ/McMVNDBBb3wMzzwLhWZ/
2C5Z6e0y3D0KHSXz/au7jtJh8XsFAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQUH0i9
67M8iFPehTSqGgoDWbcXUOIwHwYDVR0jBBgwFoAUVpUu+TD0T/6RJ3Dj28FjBJ9a
/bcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTAyLzI2REZENkI4QjU4RTExRThBNkNFMjY2NEY4QUVBMjI4L1ZwVXUt
VEQwVF82UkozRGoyOEZqQko5YV9iYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZwVXUtVEQwVF82UkozRGoyOEZqQko5YV9iYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI3QTAyLzI2REZENkI4QjU4RTExRThBNkNFMjY2NEY4
QUVBMjI4LzAzOEY4OTM0ODQ3RTExRjFBMTcyMDJDOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAVmQ2ADBABm1KEDBAJm1kAw
DQQCAAIwBwMFACwP7gAwDQYJKoZIhvcNAQELBQADggEBALFXfsHChh9TetJ1nTOC
f3IRvgygTC7QRXqk/FGmGdhz5FDSgN+7u6iKcZeGCBUIL3F9bO2zyjz8wYYAoEfw
iRYTlolzHU2Riq72FkOnewJkOtj/Me50iaiC6NGy50tlcSnHUQyQZzRC44gFbOOP
+TTrGJyiloebrIGP3K/K5S6N1zVkyruE8PY9AamZXsoKtQ4Ss7AtG1DZ06Klw+yV
OtUg6vhZg/1Jg7e3sWChIrQ+x2jN5PnPqlTVXj6XNnasJemKFFm0PePUh3NR6BSL
lfWPTnv2h4G9xWUO8qvz6VJ3RnJbX/5p/h6qD4xDrx46Y0zRpGLBMliKR9nTbKIv
OJ0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:19 2026 by rpki-client