Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/FFEA21FE7F8211F19C66F4B9CE1D38B0.roa
File: FFEA21FE7F8211F19C66F4B9CE1D38B0.roa (raw, json)
Hash identifier: T0+aQCB1jE+0pKJ961D3GcJJnHxca1wiIgEMw2YqtwA=
Subject key identifier: C3:3D:82:B0:7B:C8:88:6A:06:90:9F:60:58:FA:4E:A6:4E:B8:F5:8B
Certificate issuer: /CN=F3677E0AAF/serialNumber=357E7EEF1D31A5BE3AF8E45EF1BEA47122CCEEB2
Certificate serial: 08
Authority key identifier: 35:7E:7E:EF:1D:31:A5:BE:3A:F8:E4:5E:F1:BE:A4:71:22:CC:EE:B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NX5-7x0xpb46-ORe8b6kcSLM7rI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/FFEA21FE7F8211F19C66F4B9CE1D38B0.roa
Signing time: Tue 14 Jul 2026 12:53:24 +0000
ROA not before: Tue 14 Jul 2026 12:53:20 +0000
ROA not after: Sun 13 Jul 2036 12:53:20 +0000
asID: 37424
IP address blocks: 41.79.216.0/22 maxlen: 24
102.202.108.0/22 maxlen: 24
197.234.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.mft
rsync://rpki.afrinic.net/repository/afrinic/NX5-7x0xpb46-ORe8b6kcSLM7rI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3677E0AAF, serialNumber=357E7EEF1D31A5BE3AF8E45EF1BEA47122CCEEB2
Validity
Not Before: Jul 14 12:53:20 2026 GMT
Not After : Jul 13 12:53:20 2036 GMT
Subject: CN=6a563144-45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:7b:74:e5:c4:07:dd:ab:bb:a8:95:ce:c9:
ed:84:50:27:05:04:f4:d1:1c:87:b0:d0:50:76:58:
54:0e:55:af:e7:f8:b3:fb:b3:8b:1a:c3:24:70:47:
36:1d:34:14:ef:a4:02:55:3a:64:9b:9a:ea:46:20:
6c:87:98:59:9e:bc:da:d1:28:41:5d:11:60:53:e4:
92:23:d2:24:a0:6c:16:02:7c:68:7e:9f:ce:63:c4:
f4:64:08:39:8f:94:8a:45:01:9f:4c:28:5a:85:b1:
05:81:f1:d9:eb:60:ec:d6:f9:db:fc:62:49:6b:17:
0c:19:9c:34:65:44:27:2c:a6:de:4c:49:a3:7b:71:
d3:1b:17:70:d4:1f:3c:b8:e1:c2:67:98:70:ca:38:
15:8b:17:79:23:22:b5:fd:b1:20:04:2c:9b:91:52:
25:44:89:a5:fd:3b:6e:d3:c8:08:a8:5f:5f:48:f8:
47:82:6f:c9:ac:68:8f:e5:76:9b:0c:7b:ac:52:d8:
42:d5:57:ec:65:6c:a0:ca:8d:86:2d:f8:60:c9:c4:
dd:02:b2:75:f1:5f:e9:d8:d5:db:47:9a:2b:3d:dd:
6c:48:e6:28:2c:c7:63:18:9b:e3:29:43:b1:62:48:
10:76:c0:b5:3e:0c:0b:c2:87:46:94:4f:78:35:22:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:82:B0:7B:C8:88:6A:06:90:9F:60:58:FA:4E:A6:4E:B8:F5:8B
X509v3 Authority Key Identifier:
keyid:35:7E:7E:EF:1D:31:A5:BE:3A:F8:E4:5E:F1:BE:A4:71:22:CC:EE:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NX5-7x0xpb46-ORe8b6kcSLM7rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/FFEA21FE7F8211F19C66F4B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.216.0/22
102.202.108.0/22
197.234.216.0/21
Signature Algorithm: sha256WithRSAEncryption
29:ff:27:c2:b1:57:65:8b:c0:a9:63:39:8c:a4:a9:b0:6f:27:
bd:d8:85:82:ac:85:37:8e:b4:5d:4b:7c:6e:17:28:02:f9:78:
a3:bd:20:22:92:05:42:8f:1d:7a:62:00:b2:07:33:75:7a:81:
a0:d0:2e:7a:ca:ed:9e:c3:a5:8d:72:e9:07:e3:71:9e:8a:3f:
ae:90:ac:a5:c7:f3:1c:1b:e8:dd:06:3f:d8:32:b5:31:e5:12:
c5:19:66:dd:d2:84:b2:e8:1e:77:54:2e:bb:e4:b7:2a:e2:45:
10:f2:f2:f9:66:01:c1:a7:20:91:7d:25:66:fb:17:81:5f:5c:
99:92:a2:e8:77:6b:6c:1b:a4:18:19:dd:de:a8:f5:35:ee:f0:
ff:cc:70:7b:8e:f3:e2:ba:1f:19:3a:8f:9d:92:0d:b3:2b:f2:
8c:80:2d:e8:45:20:c1:41:91:93:49:55:a4:22:e3:4d:b2:87:
aa:44:06:4a:3b:3f:1c:01:97:bb:4b:88:3f:e6:d2:7f:6e:2e:
19:f8:41:01:7d:7c:8d:94:23:0d:ca:c5:0e:c7:07:dd:bd:33:
26:e5:ea:d2:88:b8:ff:91:10:87:f7:5c:69:4a:1a:e3:68:0a:
a4:51:da:82:bb:34:d2:92:ca:14:5e:c9:58:f9:71:61:dd:8c:
31:27:ce:8c
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
N0UwQUFGMTEwLwYDVQQFEygzNTdFN0VFRjFEMzFBNUJFM0FGOEU0NUVGMUJFQTQ3
MTIyQ0NFRUIyMB4XDTI2MDcxNDEyNTMyMFoXDTM2MDcxMzEyNTMyMFowGDEWMBQG
A1UEAxMNNmE1NjMxNDQtNDVhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMxze3TlxAfdq7uolc7J7YRQJwUE9NEch7DQUHZYVA5Vr+f4s/uzixrDJHBH
Nh00FO+kAlU6ZJua6kYgbIeYWZ682tEoQV0RYFPkkiPSJKBsFgJ8aH6fzmPE9GQI
OY+UikUBn0woWoWxBYHx2etg7Nb52/xiSWsXDBmcNGVEJyym3kxJo3tx0xsXcNQf
PLjhwmeYcMo4FYsXeSMitf2xIAQsm5FSJUSJpf07btPICKhfX0j4R4Jvyaxoj+V2
mwx7rFLYQtVX7GVsoMqNhi34YMnE3QKydfFf6djV20eaKz3dbEjmKCzHYxib4ylD
sWJIEHbAtT4MC8KHRpRPeDUiLpUCAwEAAaOCArEwggKtMB0GA1UdDgQWBBTDPYKw
e8iIagaQn2BY+k6mTrj1izAfBgNVHSMEGDAWgBQ1fn7vHTGlvjr45F7xvqRxIszu
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzdFMEEvMDI2MzExRDI3RjgwMTFGMTk5NDI4M0E5Q0UxRDM4QjAvTlg1LTd4
MHhwYjQ2LU9SZThiNmtjU0xNN3JJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTlg1LTd4MHhwYjQ2LU9SZThiNmtjU0xNN3JJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzdFMEEvMDI2MzExRDI3RjgwMTFGMTk5NDI4M0E5Q0Ux
RDM4QjAvRkZFQTIxRkU3RjgyMTFGMTlDNjZGNEI5Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAilP2AMEAmbKbAMEA8Xq2DAN
BgkqhkiG9w0BAQsFAAOCAQEAKf8nwrFXZYvAqWM5jKSpsG8nvdiFgqyFN460XUt8
bhcoAvl4o70gIpIFQo8demIAsgczdXqBoNAuesrtnsOljXLpB+Nxnoo/rpCspcfz
HBvo3QY/2DK1MeUSxRlm3dKEsuged1Quu+S3KuJFEPLy+WYBwacgkX0lZvsXgV9c
mZKi6HdrbBukGBnd3qj1Ne7w/8xwe47z4rofGTqPnZINsyvyjIAt6EUgwUGRk0lV
pCLjTbKHqkQGSjs/HAGXu0uIP+bSf24uGfhBAX18jZQjDcrFDscH3b0zJuXq0oi4
/5EQh/dcaUoa42gKpFHagrs00pLKFF7JWPlxYd2MMSfOjA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:05 2026 by rpki-client