Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/8F463D3227AF11F1930A44A7DAE4EC9C.roa
File: 8F463D3227AF11F1930A44A7DAE4EC9C.roa (raw, json)
Hash identifier: olApEm5VDBpoyz8XFSGTWF+ZGrgDV6oxvgIY+GR8RDU=
Subject key identifier: B1:5F:F7:CE:A2:FF:C6:DB:7F:2F:8F:8D:7F:C6:38:39:57:80:34:6E
Certificate issuer: /CN=F365D714AF/serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Certificate serial: 09
Authority key identifier: 1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/8F463D3227AF11F1930A44A7DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:30:41 +0000
ROA not before: Tue 24 Mar 2026 18:30:36 +0000
ROA not after: Wed 24 Mar 2032 18:30:36 +0000
asID: 329475
IP address blocks: 102.208.44.0/22 maxlen: 22
102.208.44.0/24 maxlen: 24
102.208.45.0/24 maxlen: 24
102.208.46.0/24 maxlen: 24
102.208.47.0/24 maxlen: 24
2c0f:4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365D714AF, serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Validity
Not Before: Mar 24 18:30:36 2026 GMT
Not After : Mar 24 18:30:36 2032 GMT
Subject: CN=69c2d850-f71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:c4:2c:7c:34:41:22:d6:12:a0:5a:24:73:
55:0d:47:ea:de:63:14:f9:93:91:d1:1d:4d:11:fc:
da:87:1f:6a:69:3b:5c:7f:d5:2f:12:20:a4:31:ec:
4c:3b:50:24:3b:d9:f0:c9:05:e7:97:9f:a3:f0:3f:
a8:34:b6:bd:b5:12:94:ea:7d:78:19:b0:11:2f:f9:
7d:5c:82:8b:f7:12:ef:f2:05:2f:0e:39:ea:29:e3:
85:78:71:36:fc:bd:a9:ab:c8:1c:a3:26:8e:49:b4:
05:56:ec:86:29:1d:25:ac:12:20:8d:20:4b:9e:89:
a1:7e:e2:fe:33:65:1f:dc:24:b2:dc:a6:72:1d:ae:
e3:72:41:fc:fb:ad:98:5e:0a:b6:65:4d:27:7f:42:
fb:e5:8d:31:cc:a8:02:d6:40:b5:3e:71:c2:b4:1a:
d9:50:2b:cb:fe:62:ea:63:46:6e:a1:92:27:4f:ac:
d1:c8:22:8c:da:6e:d4:20:f2:1f:4a:f5:0d:78:68:
ce:fd:b8:57:db:3f:33:65:ea:f0:11:84:49:7b:52:
99:1b:5a:77:12:18:a4:20:39:62:d9:f3:fa:03:9a:
73:f9:e2:11:b1:31:5a:a4:33:3d:35:e6:32:e0:8a:
e9:ae:e6:52:4d:d1:9a:d7:5c:88:8f:1d:64:e1:03:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:F7:CE:A2:FF:C6:DB:7F:2F:8F:8D:7F:C6:38:39:57:80:34:6E
X509v3 Authority Key Identifier:
keyid:1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/8F463D3227AF11F1930A44A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.44.0/22
IPv6:
2c0f:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
82:2c:b5:ef:0d:34:f0:1e:07:4f:53:bd:6f:59:3c:10:1c:fc:
e5:c2:41:10:90:1d:2e:10:e7:4b:eb:3e:39:ee:cb:a4:25:74:
4e:29:23:39:0d:56:b9:98:7f:8b:b8:4f:84:f9:4e:5d:3e:1c:
48:0b:51:26:75:92:20:3b:1b:0e:6e:4d:3d:a3:01:15:c9:92:
c6:be:f1:6d:06:f2:f7:3f:3e:0b:f9:51:8c:20:5b:4a:c4:10:
01:28:eb:15:9a:87:7b:f1:a8:42:ef:84:db:ae:a3:f3:a4:c8:
6e:1d:a1:0b:00:a1:37:7f:29:33:bb:78:43:a1:eb:a1:c7:76:
95:8b:25:ed:f7:0e:9e:3b:50:7b:7e:17:41:c1:d7:e2:c4:26:
d8:bf:bb:63:f0:ed:d1:83:8a:c0:bf:e6:9b:31:fa:0d:ca:52:
ba:a9:ef:8e:a9:44:6e:d5:81:74:4a:db:80:ca:04:52:0b:d8:
ca:24:5a:ac:32:2a:34:9c:b8:5e:b9:6d:89:37:cf:b1:6c:53:
09:d6:4f:52:b4:7d:fb:74:4d:b6:18:24:a4:e2:74:bd:36:6f:
57:11:ea:1f:05:fa:7f:5a:9c:d4:82:ff:69:ce:bd:fa:c9:65:
e0:a6:bc:87:c9:7a:6d:5f:46:30:81:ee:37:de:8a:e2:4d:bd:
71:b8:8d:af
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
RDcxNEFGMTEwLwYDVQQFEygxRjM4NTdDNzkwRDAyMzVGNzhEMTM4NUIwRUI2OTMw
QjA4RjNBOEU3MB4XDTI2MDMyNDE4MzAzNloXDTMyMDMyNDE4MzAzNlowGDEWMBQG
A1UEAxMNNjljMmQ4NTAtZjcxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCtxCx8NEEi1hKgWiRzVQ1H6t5jFPmTkdEdTRH82ocfamk7XH/VLxIgpDHs
TDtQJDvZ8MkF55efo/A/qDS2vbUSlOp9eBmwES/5fVyCi/cS7/IFLw456injhXhx
Nvy9qavIHKMmjkm0BVbshikdJawSII0gS56JoX7i/jNlH9wkstymch2u43JB/Put
mF4KtmVNJ39C++WNMcyoAtZAtT5xwrQa2VAry/5i6mNGbqGSJ0+s0cgijNpu1CDy
H0r1DXhozv24V9s/M2Xq8BGESXtSmRtadxIYpCA5Ytnz+gOac/niEbExWqQzPTXm
MuCK6a7mUk3RmtdciI8dZOEDrhkCAwEAAaOCArQwggKwMB0GA1UdDgQWBBSxX/fO
ov/G238vj41/xjg5V4A0bjAfBgNVHSMEGDAWgBQfOFfHkNAjX3jROFsOtpMLCPOo
5zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUQ3MTQvNTJBMDFGQzAyMjIyMTFGMThEMTMzRENCREFFNEVDOUMvSHpoWHg1
RFFJMTk0MFRoYkRyYVRDd2p6cU9jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSHpoWHg1RFFJMTk0MFRoYkRyYVRDd2p6cU9jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUQ3MTQvNTJBMDFGQzAyMjIyMTFGMThEMTMzRENCREFF
NEVDOUMvOEY0NjNEMzIyN0FGMTFGMTkzMEE0NEE3REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbQLDANBAIAAjAHAwUALA8E
wDANBgkqhkiG9w0BAQsFAAOCAQEAgiy17w008B4HT1O9b1k8EBz85cJBEJAdLhDn
S+s+Oe7LpCV0TikjOQ1WuZh/i7hPhPlOXT4cSAtRJnWSIDsbDm5NPaMBFcmSxr7x
bQby9z8+C/lRjCBbSsQQASjrFZqHe/GoQu+E266j86TIbh2hCwChN38pM7t4Q6Hr
ocd2lYsl7fcOnjtQe34XQcHX4sQm2L+7Y/Dt0YOKwL/mmzH6DcpSuqnvjqlEbtWB
dErbgMoEUgvYyiRarDIqNJy4XrltiTfPsWxTCdZPUrR9+3RNthgkpOJ0vTZvVxHq
HwX6f1qc1IL/ac69+sll4Ka8h8l6bV9GMIHuN96K4k29cbiNrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:11:11 2026 by rpki-client