Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/D4291DAE76C211F18C647DD1CE1D38B0.roa
File: D4291DAE76C211F18C647DD1CE1D38B0.roa (raw, json)
Hash identifier: zSwihuhEJdulvN21l8njAbqFGOfBgoWTW5PKrcUvFSY=
Subject key identifier: 82:E2:55:04:44:09:7D:69:AB:1D:A6:FD:39:EE:1F:49:2D:E3:DA:55
Certificate issuer: /CN=F366D16AAF/serialNumber=39E058A8DCE81630724B897346FA04B132146AE7
Certificate serial: 32
Authority key identifier: 39:E0:58:A8:DC:E8:16:30:72:4B:89:73:46:FA:04:B1:32:14:6A:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/D4291DAE76C211F18C647DD1CE1D38B0.roa
Signing time: Fri 03 Jul 2026 09:37:38 +0000
ROA not before: Fri 03 Jul 2026 09:37:34 +0000
ROA not after: Thu 15 Jul 2032 09:37:34 +0000
asID: 329715
IP address blocks: 102.203.2.0/24 maxlen: 24
2c0f:48a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.crl
rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D16AAF, serialNumber=39E058A8DCE81630724B897346FA04B132146AE7
Validity
Not Before: Jul 3 09:37:34 2026 GMT
Not After : Jul 15 09:37:34 2032 GMT
Subject: CN=6a4782e2-48d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:f7:50:78:df:2b:a3:9f:25:53:de:0e:16:
18:a0:ee:05:7f:7f:0b:0b:29:4f:ba:91:56:c1:10:
7c:4d:24:b9:14:f2:c5:50:fd:b8:cc:e8:7c:52:78:
c4:63:dc:31:96:1f:f6:9a:e6:ad:75:73:23:a9:0a:
8f:62:6f:be:5b:f9:80:1f:5b:ff:f1:06:87:7c:9a:
93:d6:e5:3c:8e:48:28:94:f0:eb:1a:a6:7b:34:f4:
03:a9:fe:c2:bc:84:9d:47:d0:28:7a:34:d6:d6:16:
0e:88:75:1d:b0:23:f7:56:93:8a:46:9f:5f:6b:ba:
07:0e:ee:40:91:88:61:1f:5d:29:aa:fa:0a:96:c4:
16:c4:d6:1f:c8:7f:f9:d9:62:32:17:92:f8:45:93:
48:bb:a8:bc:24:48:a2:41:13:a2:c2:62:d4:1b:8e:
eb:bb:19:e1:c0:0d:1b:51:29:0e:bc:7a:b0:1e:03:
e4:20:8a:eb:13:22:97:ac:60:ea:f0:44:23:85:5a:
d3:d8:56:18:fc:4a:87:bd:ab:9d:2b:38:74:02:cb:
8c:d5:82:03:47:3b:61:12:43:19:e5:2a:45:d5:2f:
69:70:52:ac:fe:ee:42:34:bf:23:fe:6d:6b:37:62:
c4:1f:77:47:71:fd:15:6c:fd:3d:88:a3:88:43:aa:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:55:04:44:09:7D:69:AB:1D:A6:FD:39:EE:1F:49:2D:E3:DA:55
X509v3 Authority Key Identifier:
keyid:39:E0:58:A8:DC:E8:16:30:72:4B:89:73:46:FA:04:B1:32:14:6A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/D4291DAE76C211F18C647DD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.2.0/24
IPv6:
2c0f:48a0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:a0:99:b4:d5:a7:0b:b1:d3:e7:9b:7b:3f:25:c4:b7:74:d6:
48:3d:56:23:72:c0:17:f5:4f:6e:59:fc:70:f5:e5:d1:28:fa:
4c:1d:e4:f7:cd:0e:26:87:bd:fd:2f:c0:fc:03:f1:e9:f8:9d:
5b:1a:c9:73:aa:d3:d7:bc:cc:6f:1d:78:55:5b:0c:0b:f3:e6:
4a:20:a6:ab:21:dd:e5:68:f8:aa:9c:5c:c2:12:d7:d7:41:a8:
83:3e:ce:f5:83:4d:9e:b5:1b:3e:7c:e7:93:3c:2e:95:d7:d6:
bd:b4:64:13:9c:e6:e0:20:da:d8:a3:a5:8e:0b:a9:17:1c:1d:
aa:45:14:55:78:fa:f7:13:0b:d4:94:ca:4f:ca:d3:e4:0e:e1:
8e:bb:38:39:2a:cf:61:3a:04:07:2d:59:61:25:91:a5:92:00:
f3:d4:85:bb:1e:d3:85:7d:a5:26:c9:d8:99:2b:32:d1:8b:f9:
ad:2f:33:a8:81:0b:e8:6f:aa:6b:7a:da:39:fc:0e:65:04:65:
df:61:f1:68:73:24:bf:91:f9:58:97:c2:9c:22:77:24:37:42:
b4:5c:a0:33:f3:e2:8b:42:9d:2c:ad:2c:4a:06:5a:45:70:a2:
22:f4:5c:ec:4e:ba:7c:52:98:b4:24:7e:f9:e2:e3:65:fe:46:
3a:d9:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:40 2026 by rpki-client