Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/27A93F1685AC11F18D75960BCF1D38B0.roa
File: 27A93F1685AC11F18D75960BCF1D38B0.roa (raw, json)
Hash identifier: iSbDT4UZQy67HHwZ1jodLd9ZkZ1k+Hf1kXiU4KWaMUE=
Subject key identifier: D3:0D:C9:38:05:CC:36:00:35:11:D3:45:DA:50:F7:7F:56:60:3C:5C
Certificate issuer: /CN=F3656CC2AF/serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Certificate serial: 079A
Authority key identifier: F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/27A93F1685AC11F18D75960BCF1D38B0.roa
Signing time: Wed 22 Jul 2026 09:03:07 +0000
ROA not before: Wed 22 Jul 2026 09:03:03 +0000
ROA not after: Sat 22 Jul 2028 09:03:03 +0000
asID: 37302
IP address blocks: 102.130.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656CC2AF, serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Validity
Not Before: Jul 22 09:03:03 2026 GMT
Not After : Jul 22 09:03:03 2028 GMT
Subject: CN=6a60874b-c502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:f0:3c:7b:72:d6:c2:df:cd:f1:66:c0:f5:
54:26:15:d8:78:44:9b:0c:8a:73:4d:14:3b:9a:c9:
53:33:9c:ca:cf:25:c0:6c:41:52:d7:8d:88:9e:2a:
ae:c1:ea:02:4f:86:b8:41:3e:87:c8:c3:a8:c2:85:
4c:0b:83:19:d4:c1:f3:1a:47:2f:e3:91:d2:bd:43:
b1:e6:1f:67:64:be:8d:ec:51:d4:d2:65:96:ad:35:
c3:e5:cf:65:33:65:09:c5:8f:d0:20:35:14:1e:34:
83:20:94:3d:69:2c:a1:15:28:cb:c0:2f:e3:8a:56:
86:a7:d6:68:82:37:2f:0b:2a:f2:85:f3:40:ef:9c:
8e:4b:3e:60:b2:2f:00:07:a9:9a:b0:9a:bc:3b:7f:
ac:13:45:b8:16:65:65:f6:9e:20:a6:f8:47:45:7d:
6e:c7:90:bd:69:c4:d4:cf:23:10:a6:11:a3:6b:81:
d4:c0:66:bc:94:d3:67:b1:f0:44:38:61:59:33:90:
0b:ab:69:93:95:73:a6:a3:1b:d8:35:e7:cc:2d:4f:
4d:c6:65:9b:87:7a:8f:26:53:7c:47:e9:11:02:64:
0b:38:b2:b2:d9:bf:34:9f:56:ef:1d:23:4f:8d:11:
54:d8:d7:bc:62:7b:2a:a8:97:05:c1:ec:18:6b:ca:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:C9:38:05:CC:36:00:35:11:D3:45:DA:50:F7:7F:56:60:3C:5C
X509v3 Authority Key Identifier:
keyid:F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/27A93F1685AC11F18D75960BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.130.40.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:c1:67:e1:86:86:30:6d:d4:25:37:f6:c7:bf:98:b9:62:15:
a7:72:70:8f:b7:b3:25:b1:c6:33:e8:9b:8c:0c:3f:c7:0f:38:
44:c7:5d:f3:e2:92:9b:30:d9:77:34:38:39:eb:61:19:55:15:
e7:16:bf:51:4e:de:56:68:f8:4d:4b:31:a1:6f:b8:55:82:b4:
43:89:55:89:db:f3:2c:b5:01:e7:a0:1d:b2:8e:33:d8:1d:41:
2c:84:dd:46:1e:30:c3:d8:d1:44:fe:5b:af:db:9f:6f:53:11:
bd:d9:ad:1e:a1:8c:f8:39:80:b4:a0:f8:3a:9d:6d:01:c3:97:
f5:14:28:13:48:12:ea:6d:01:3c:19:72:a4:bd:85:c3:e0:20:
9a:9c:5c:64:f4:78:8f:77:ee:1e:c7:96:37:6c:55:bf:d4:d2:
16:e6:79:1c:ed:49:8f:8f:ee:00:b9:75:90:d8:fb:8b:b3:bb:
e7:12:de:7f:82:f0:af:dc:00:fc:93:b4:7e:73:3f:12:17:f9:
2c:ac:61:ee:43:41:f0:8c:de:ff:9e:8c:92:2c:62:78:30:1b:
ff:63:ca:0e:1d:00:70:c3:a8:26:0b:a6:6a:f8:1b:ca:56:94:
4e:df:05:1a:1d:e6:51:ab:b4:6f:18:9f:ba:a1:0b:bc:05:e2:
4b:e3:f9:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB5owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZDQzJBRjExMC8GA1UEBRMoRjA5QzJDN0EyQUY2MDEzQTVCQkZGRkVDNjEwNDJC
M0JCNEI1ODEyQjAeFw0yNjA3MjIwOTAzMDNaFw0yODA3MjIwOTAzMDNaMBgxFjAU
BgNVBAMTDTZhNjA4NzRiLWM1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0sfA8e3LWwt/N8WbA9VQmFdh4RJsMinNNFDuayVMznMrPJcBsQVLXjYie
Kq7B6gJPhrhBPofIw6jChUwLgxnUwfMaRy/jkdK9Q7HmH2dkvo3sUdTSZZatNcPl
z2UzZQnFj9AgNRQeNIMglD1pLKEVKMvAL+OKVoan1miCNy8LKvKF80DvnI5LPmCy
LwAHqZqwmrw7f6wTRbgWZWX2niCm+EdFfW7HkL1pxNTPIxCmEaNrgdTAZryU02ex
8EQ4YVkzkAuraZOVc6ajG9g158wtT03GZZuHeo8mU3xH6RECZAs4srLZvzSfVu8d
I0+NEVTY17xieyqolwXB7BhrykOvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0w3J
OAXMNgA1EdNF2lD3f1ZgPFwwHwYDVR0jBBgwFoAU8Jwseir2ATpbv//sYQQrO7S1
gSswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2Q0MyL0Q2OURFODIwQkUzMTExRUI5QUQ0NEU1REY4QUVBMjI4LzhKd3Nl
aXIyQVRwYnZfX3NZUVFyTzdTMWdTcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhKd3NlaXIyQVRwYnZfX3NZUVFyTzdTMWdTcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU2Q0MyL0Q2OURFODIwQkUzMTExRUI5QUQ0NEU1REY4
QUVBMjI4LzI3QTkzRjE2ODVBQzExRjE4RDc1OTYwQkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmgigwDQYJKoZIhvcNAQEL
BQADggEBAMXBZ+GGhjBt1CU39se/mLliFadycI+3syWxxjPom4wMP8cPOETHXfPi
kpsw2Xc0ODnrYRlVFecWv1FO3lZo+E1LMaFvuFWCtEOJVYnb8yy1AeegHbKOM9gd
QSyE3UYeMMPY0UT+W6/bn29TEb3ZrR6hjPg5gLSg+DqdbQHDl/UUKBNIEuptATwZ
cqS9hcPgIJqcXGT0eI937h7HljdsVb/U0hbmeRztSY+P7gC5dZDY+4uzu+cS3n+C
8K/cAPyTtH5zPxIX+SysYe5DQfCM3v+ejJIsYngwG/9jyg4dAHDDqCYLpmr4G8pW
lE7fBRod5lGrtG8Yn7qhC7wF4kvj+dQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:55 2026 by rpki-client