Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/CC57F9FE802911F18C6173B5CE1D38B0.roa
File: CC57F9FE802911F18C6173B5CE1D38B0.roa (raw, json)
Hash identifier: Hckwq9V90vbLABfQHm6j3qtGP+ab2XK8+TXEgPcon/Q=
Subject key identifier: F5:EC:01:F1:E1:D5:FD:E3:B4:53:FB:00:43:67:BC:D6:BB:68:8A:8A
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 08B1
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/CC57F9FE802911F18C6173B5CE1D38B0.roa
Signing time: Wed 15 Jul 2026 08:47:24 +0000
ROA not before: Wed 15 Jul 2026 08:47:20 +0000
ROA not after: Thu 31 Jul 2036 08:47:20 +0000
asID: 328748
IP address blocks: 102.216.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Jul 15 08:47:20 2026 GMT
Not After : Jul 31 08:47:20 2036 GMT
Subject: CN=6a57491c-362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d0:bb:ff:c6:87:68:12:b2:a0:68:a2:8b:bc:
14:af:40:89:26:eb:fa:fb:e8:c9:c6:02:b1:94:9a:
f0:c2:bb:d7:71:b7:b7:9a:ae:f5:29:79:fc:2c:28:
51:76:13:cd:a8:e0:98:11:7b:29:e1:b6:a8:07:91:
cd:f2:cb:99:9b:ab:a2:a4:f5:53:12:d5:f5:ba:4b:
8c:7d:3f:ad:9f:54:5f:de:55:ae:43:bf:c1:6d:9b:
84:7a:d1:85:08:d5:40:e5:aa:c5:69:1b:f2:40:d7:
dc:99:f0:11:f8:c2:15:29:35:af:b3:8d:b7:00:25:
67:55:a9:f3:cf:02:14:f4:df:94:f1:0e:7d:e6:73:
14:27:43:0e:16:40:f1:1b:dd:f9:2d:a7:28:15:1e:
ae:6f:60:93:08:b8:4a:2e:cb:0b:63:30:13:94:20:
c1:7e:53:a3:54:72:cb:c1:13:80:7a:f9:f2:84:7b:
ba:3c:45:73:67:d1:9d:bf:32:f1:6b:33:5e:5e:7d:
88:3c:24:05:c0:d6:11:70:4e:91:5f:b8:94:38:f3:
d7:6b:b8:c0:10:7a:6c:8a:b4:13:b4:e8:f5:f7:72:
84:fd:c9:3c:3c:20:30:9d:15:79:68:ac:a9:7d:3f:
eb:7f:65:8a:7b:f9:19:b8:e9:20:de:aa:0c:37:e8:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:01:F1:E1:D5:FD:E3:B4:53:FB:00:43:67:BC:D6:BB:68:8A:8A
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/CC57F9FE802911F18C6173B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ee:b1:8f:a8:49:bc:7f:bb:6d:25:05:12:ac:b8:69:ae:9b:
f6:1d:08:aa:c2:fc:ca:1b:cd:dc:1f:a0:0d:cb:94:63:84:1f:
00:96:7b:84:2d:68:f9:9d:f7:77:26:d6:dd:e7:1b:9e:a1:27:
ad:c5:6f:5e:32:93:1b:96:2b:a3:14:04:aa:f9:ce:78:55:db:
0b:f8:14:7f:f1:e7:2c:e5:3a:3b:c5:5d:50:4a:a1:3e:58:63:
38:1d:29:f9:9f:c7:4a:c9:7c:6e:92:29:13:3e:a9:a3:92:29:
2a:44:71:f0:1b:dd:5b:0d:39:fe:68:aa:e4:76:01:a0:4d:5c:
35:94:50:71:bf:74:96:b1:d0:98:06:93:08:07:4e:22:0f:38:
3e:05:f0:84:78:4b:53:be:5c:ac:37:f1:ba:5c:8e:bc:59:50:
7a:a8:7c:6b:28:31:ed:3c:04:b5:65:90:66:ba:22:39:83:bc:
a0:c5:c8:76:ed:bc:a9:bb:8a:34:70:2b:19:3e:52:75:de:49:
75:1b:32:cf:2e:84:9e:45:be:6e:88:95:cf:3a:df:e4:09:ba:
09:94:3c:45:ad:c5:d9:df:13:54:f6:aa:a9:be:fd:bd:5d:a5:
e2:bb:80:77:e0:ed:4b:e9:a0:d7:20:58:bb:c2:09:f2:87:72:
96:28:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:41 2026 by rpki-client