Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/B3EB2DF284CD11F1ACC118C0CE1D38B0.roa
File: B3EB2DF284CD11F1ACC118C0CE1D38B0.roa (raw, json)
Hash identifier: mPFr1wGhjGQfmZVzboz03fqnAUX0UELhmEq9L3nSUJE=
Subject key identifier: 21:3B:83:6D:8C:14:8F:0B:12:5A:8D:30:8A:CE:63:A3:90:BA:8E:8F
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0801
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/B3EB2DF284CD11F1ACC118C0CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:30:45 +0000
ROA not before: Tue 21 Jul 2026 06:30:41 +0000
ROA not after: Mon 21 Jul 2036 06:30:41 +0000
asID: 37053
IP address blocks: 102.217.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:30:41 2026 GMT
Not After : Jul 21 06:30:41 2036 GMT
Subject: CN=6a5f1215-855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:47:cd:51:d3:69:47:53:cf:5e:c8:2b:94:
08:07:07:29:eb:d4:27:c7:c4:3f:92:5c:62:5a:71:
49:b5:65:35:06:84:dc:62:60:7a:3e:f2:13:a6:07:
3f:87:c8:86:f3:f8:5a:b7:ea:2f:c3:d6:02:12:f3:
06:a3:19:d5:4a:56:57:17:38:35:e1:72:47:f2:15:
73:e4:fa:b5:86:b1:25:62:ea:8b:1e:f0:af:6d:df:
13:38:96:ca:a8:31:ed:4a:1e:a0:8d:9c:57:84:5c:
1b:81:0d:a0:c5:7c:92:d6:85:f2:c3:01:4d:dc:58:
d6:b5:1b:53:49:a0:3c:43:cb:86:4a:9f:37:07:ce:
06:e2:73:f9:4a:75:04:92:98:15:0e:9b:a7:a0:ca:
fd:46:fd:ee:01:cc:9f:f1:a3:1a:1b:71:0d:0a:4d:
af:a6:80:71:bf:32:8c:15:9d:61:b5:db:ad:01:8a:
72:77:32:d1:8c:ac:a7:64:e4:9c:67:ad:22:9f:82:
a5:4c:3c:80:97:58:dd:2e:0c:25:4e:a8:05:f8:ea:
0f:af:c2:9c:00:58:2f:fe:0f:6f:4b:84:28:6b:0d:
a2:19:eb:5a:a8:0e:8f:7f:ac:12:c8:f6:3a:5b:e2:
5e:a7:a0:30:9c:5f:55:01:b8:02:e6:2b:af:20:15:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:83:6D:8C:14:8F:0B:12:5A:8D:30:8A:CE:63:A3:90:BA:8E:8F
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/B3EB2DF284CD11F1ACC118C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.32.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d9:d3:d8:a6:84:c6:94:b3:db:af:f7:29:46:a6:f6:d6:66:
25:25:97:c3:80:d4:d2:95:62:76:3f:87:2a:23:c4:7e:84:c9:
93:66:f9:5e:e5:96:7c:89:bb:8a:d8:ef:88:ce:9c:78:eb:52:
dc:94:03:53:11:9e:20:04:82:cd:75:34:62:7e:7a:22:38:a9:
3a:84:ab:f5:dd:63:ae:76:7d:ec:77:de:86:ff:0d:50:ee:81:
95:14:bc:85:5f:f2:8f:f4:4c:d1:f6:19:39:1f:16:1f:83:85:
b9:9f:2c:f8:e1:d9:a4:36:43:84:aa:56:eb:cd:4c:6c:ca:74:
5a:f6:c3:45:9c:80:55:01:ad:77:44:7f:05:88:f6:f6:1d:aa:
e5:b7:64:b1:85:4f:4e:ef:05:14:a8:50:51:b1:66:78:73:80:
15:5f:f1:87:77:f7:69:8d:7d:da:14:5c:27:aa:5e:a8:c7:2b:
cb:17:61:ba:ae:3c:8f:1b:9b:77:cc:08:60:b7:bd:32:47:3d:
36:d4:44:46:5d:74:13:46:a1:6d:bb:24:32:46:0b:e4:a6:6f:
a3:64:f5:a9:35:71:b0:a7:70:0c:7f:50:1b:8f:d2:83:87:59:
9d:29:44:b6:9c:de:c6:a9:c0:bb:7e:f7:10:a5:3f:e8:37:f1:
10:52:e4:fa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB
MjE1RjI0NzU0MTAeFw0yNjA3MjEwNjMwNDFaFw0zNjA3MjEwNjMwNDFaMBgxFjAU
BgNVBAMTDTZhNWYxMjE1LTg1NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYjkfNUdNpR1PPXsgrlAgHBynr1CfHxD+SXGJacUm1ZTUGhNxiYHo+8hOm
Bz+HyIbz+Fq36i/D1gIS8wajGdVKVlcXODXhckfyFXPk+rWGsSVi6ose8K9t3xM4
lsqoMe1KHqCNnFeEXBuBDaDFfJLWhfLDAU3cWNa1G1NJoDxDy4ZKnzcHzgbic/lK
dQSSmBUOm6egyv1G/e4BzJ/xoxobcQ0KTa+mgHG/MowVnWG1260BinJ3MtGMrKdk
5JxnrSKfgqVMPICXWN0uDCVOqAX46g+vwpwAWC/+D29LhChrDaIZ61qoDo9/rBLI
9jpb4l6noDCcX1UBuALmK68gFdUfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUITuD
bYwUjwsSWo0wis5jo5C6jo8wHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k
dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn
Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4
QUVBMjI4L0IzRUIyREYyODRDRDExRjFBQ0MxMThDMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2SAwDQYJKoZIhvcNAQEL
BQADggEBAAHZ09imhMaUs9uv9ylGpvbWZiUll8OA1NKVYnY/hyojxH6EyZNm+V7l
lnyJu4rY74jOnHjrUtyUA1MRniAEgs11NGJ+eiI4qTqEq/XdY652fex33ob/DVDu
gZUUvIVf8o/0TNH2GTkfFh+DhbmfLPjh2aQ2Q4SqVuvNTGzKdFr2w0WcgFUBrXdE
fwWI9vYdquW3ZLGFT07vBRSoUFGxZnhzgBVf8Yd392mNfdoUXCeqXqjHK8sXYbqu
PI8bm3fMCGC3vTJHPTbUREZddBNGoW27JDJGC+Smb6Nk9ak1cbCncAx/UBuP0oOH
WZ0pRLac3sapwLt+9xClP+g38RBS5Po=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:31 2026 by rpki-client