Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/180C9F1A793811F19CA8B2B9CE1D38B0.roa
File: 180C9F1A793811F19CA8B2B9CE1D38B0.roa (raw, json)
Hash identifier: DAs78s5LvDn7SQOIhkA/UYbBae9oa0Ki1f+XOP4srJs=
Subject key identifier: DF:CD:1B:12:61:42:1A:A6:3F:58:EB:31:D5:DA:C1:81:A3:EC:E9:C1
Certificate issuer: /CN=F3674A7AAF/serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
Certificate serial: 03
Authority key identifier: 5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/180C9F1A793811F19CA8B2B9CE1D38B0.roa
Signing time: Mon 06 Jul 2026 12:42:06 +0000
ROA not before: Tue 07 Jul 2026 12:42:01 +0000
ROA not after: Sun 07 Jul 2030 12:42:01 +0000
asID: 329441
IP address blocks: 102.208.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674A7AAF, serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
Validity
Not Before: Jul 7 12:42:01 2026 GMT
Not After : Jul 7 12:42:01 2030 GMT
Subject: CN=6a4ba29e-4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:a2:1e:20:29:ab:19:28:e1:97:0f:1d:74:
b6:52:f6:ec:5f:ff:fd:89:70:e9:b8:af:9e:8b:0e:
e2:a1:e8:3f:b1:83:89:4f:73:65:bf:d4:79:a1:b5:
6c:55:ce:a9:0a:66:3b:eb:da:6f:1a:f9:d3:c4:c0:
ea:2b:04:8c:ee:64:43:66:62:33:fc:a4:39:8d:57:
9c:8d:f1:57:3b:e6:3f:e5:06:b7:1c:45:dc:53:9a:
e2:7f:bb:ff:a0:42:69:71:73:9c:c9:76:1f:de:2d:
2f:62:26:fd:ab:b4:81:37:d9:c3:ad:df:14:ad:67:
e4:54:10:ef:3e:bf:b3:73:66:e6:37:87:14:f9:96:
5f:b1:bc:a6:05:a6:64:3e:ee:71:35:67:7b:36:88:
c7:01:86:4e:39:56:28:57:6c:37:ca:a5:b9:0d:f1:
01:d9:bb:9e:b2:e5:af:df:95:ce:26:56:e6:ee:ee:
6e:ec:44:ef:85:32:6a:2c:af:de:ab:e7:2c:a5:25:
42:01:13:da:8c:62:68:fa:6f:15:67:c9:54:0f:86:
5e:91:74:aa:d2:3d:41:26:c9:42:5b:04:70:26:31:
e8:57:1d:bd:e2:c4:84:51:60:f6:4f:a2:62:87:c7:
78:76:dc:ec:a7:f0:de:aa:3b:28:ef:48:22:9d:e9:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CD:1B:12:61:42:1A:A6:3F:58:EB:31:D5:DA:C1:81:A3:EC:E9:C1
X509v3 Authority Key Identifier:
keyid:5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/180C9F1A793811F19CA8B2B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.223.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:fa:1a:6a:87:c9:4f:ea:e9:16:31:3b:1c:4e:9d:66:e2:69:
76:ee:1d:02:3a:bd:60:eb:23:6d:c3:1f:4e:56:f6:89:73:9a:
3d:27:0e:7f:5e:e8:c1:72:38:63:f3:6c:44:de:f0:6e:90:5c:
8d:fa:4c:6b:3b:bb:01:8f:f4:a0:5d:fc:9b:56:67:2f:97:28:
9d:6a:34:86:47:b0:c7:13:07:19:89:92:5e:e0:12:e9:4f:ff:
04:de:ea:d8:30:17:55:3f:03:df:ec:96:06:94:c5:3f:52:4d:
37:c5:7c:d1:0d:ff:5c:8d:4a:f5:1e:85:41:d2:c0:5b:ef:08:
62:94:3b:eb:dc:6a:cf:97:b3:92:b8:57:bb:6f:92:5b:3a:ad:
34:43:c5:5a:5a:17:04:7a:08:c7:af:a2:26:7f:9a:68:8a:9a:
49:18:33:49:82:96:f1:af:30:c6:51:6c:19:8e:75:c1:fd:1e:
af:ec:67:e7:10:c8:05:36:76:a8:8d:ba:94:52:da:72:d6:2b:
05:ae:4c:3f:d4:17:db:07:cf:15:1c:27:24:4d:70:d5:6c:dc:
55:2b:46:c6:99:de:6f:55:db:10:d2:7c:e3:ff:12:29:02:39:
d1:34:85:2d:6e:a2:7b:79:bf:92:0d:25:87:37:fa:e1:fc:1e:
32:18:16:db
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NEE3QUFGMTEwLwYDVQQFEyg1RTlFMTI2NEEyRTkxNEU1NTFGQzM3OUVFQURDQjlC
ODAwNUQwMDhBMB4XDTI2MDcwNzEyNDIwMVoXDTMwMDcwNzEyNDIwMVowGDEWMBQG
A1UEAxMNNmE0YmEyOWUtNDE4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKZHoh4gKasZKOGXDx10tlL27F///Ylw6bivnosO4qHoP7GDiU9zZb/UeaG1
bFXOqQpmO+vabxr508TA6isEjO5kQ2ZiM/ykOY1XnI3xVzvmP+UGtxxF3FOa4n+7
/6BCaXFznMl2H94tL2Im/au0gTfZw63fFK1n5FQQ7z6/s3Nm5jeHFPmWX7G8pgWm
ZD7ucTVnezaIxwGGTjlWKFdsN8qluQ3xAdm7nrLlr9+VziZW5u7ubuxE74Uyaiyv
3qvnLKUlQgET2oxiaPpvFWfJVA+GXpF0qtI9QSbJQlsEcCYx6FcdveLEhFFg9k+i
YofHeHbc7Kfw3qo7KO9IIp3pI3cCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTfzRsS
YUIapj9Y6zHV2sGBo+zpwTAfBgNVHSMEGDAWgBRenhJkoukU5VH8N57q3Lm4AF0A
ijAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzRBN0EvNkM4QzcyREM3OTM3MTFGMThCRTY5NUI1Q0UxRDM4QjAvWHA0U1pL
THBGT1ZSX0RlZTZ0eTV1QUJkQUlvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWHA0U1pLTHBGT1ZSX0RlZTZ0eTV1QUJkQUlvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzRBN0EvNkM4QzcyREM3OTM3MTFGMThCRTY5NUI1Q0Ux
RDM4QjAvMTgwQzlGMUE3OTM4MTFGMTlDQThCMkI5Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbQ3zANBgkqhkiG9w0BAQsF
AAOCAQEAzfoaaofJT+rpFjE7HE6dZuJpdu4dAjq9YOsjbcMfTlb2iXOaPScOf17o
wXI4Y/NsRN7wbpBcjfpMazu7AY/0oF38m1ZnL5conWo0hkewxxMHGYmSXuAS6U//
BN7q2DAXVT8D3+yWBpTFP1JNN8V80Q3/XI1K9R6FQdLAW+8IYpQ769xqz5ezkrhX
u2+SWzqtNEPFWloXBHoIx6+iJn+aaIqaSRgzSYKW8a8wxlFsGY51wf0er+xn5xDI
BTZ2qI26lFLactYrBa5MP9QX2wfPFRwnJE1w1WzcVStGxpneb1XbENJ84/8SKQI5
0TSFLW6ie3m/kg0lhzf64fweMhgW2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:15 2026 by rpki-client