Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/FACAEE98703B11F186502B13CF1D38B0.roa
File: FACAEE98703B11F186502B13CF1D38B0.roa (raw, json)
Hash identifier: +atnFyNmkEsaCKX9Ro0ZZNx+4LrHBs/bVM1erUMfE6Q=
Subject key identifier: 30:53:2E:FA:59:93:8B:24:52:F9:4E:7A:77:75:EF:D7:AD:9D:03:5C
Certificate issuer: /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial: 06F9
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/FACAEE98703B11F186502B13CF1D38B0.roa
Signing time: Thu 25 Jun 2026 02:17:14 +0000
ROA not before: Thu 25 Jun 2026 02:17:09 +0000
ROA not after: Mon 30 Jun 2031 02:17:09 +0000
asID: 329181
IP address blocks: 102.217.136.0/22 maxlen: 24
102.219.12.0/22 maxlen: 24
2c0f:1900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Validity
Not Before: Jun 25 02:17:09 2026 GMT
Not After : Jun 30 02:17:09 2031 GMT
Subject: CN=6a3c8faa-dcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:b0:03:19:87:5e:2a:8c:de:17:f8:5e:63:
42:59:ca:b2:84:69:25:27:61:7a:62:0d:7b:f9:c2:
cd:7a:d9:ef:bb:9c:fb:d3:19:85:b5:d2:48:46:42:
dd:81:64:2a:f6:f0:03:cd:2d:fd:f7:4e:f1:5b:16:
e7:a4:18:9d:b4:6a:5e:b4:0a:0e:29:aa:3d:da:b2:
eb:1d:ed:ef:5a:9d:69:43:fa:31:7e:89:ec:06:e7:
10:93:3b:2e:a7:37:c7:45:40:ff:fe:77:38:ac:b1:
f9:be:bb:b9:d3:33:e9:ff:f9:ec:a0:08:82:8d:17:
6e:27:42:42:96:25:78:bc:5b:84:91:e3:7f:9c:d2:
82:72:3a:c5:af:57:c5:37:67:65:9e:e8:f5:56:72:
6c:9f:2e:a4:64:93:71:8e:90:1a:58:a9:30:db:f3:
05:93:69:15:bf:52:06:65:98:00:0e:5b:d3:cf:00:
63:0e:95:11:f0:40:ea:16:49:11:6f:ca:b6:e4:8d:
06:7e:49:3c:b4:95:f8:ed:3c:fb:dc:19:27:e8:b5:
fc:88:39:64:85:28:d7:7f:fb:12:cd:ad:65:d7:8b:
d7:41:ee:cb:b1:99:5d:b5:20:c0:fa:50:9e:39:9e:
42:3f:c1:30:e9:94:a0:5f:47:76:0c:e1:7c:e5:69:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:2E:FA:59:93:8B:24:52:F9:4E:7A:77:75:EF:D7:AD:9D:03:5C
X509v3 Authority Key Identifier:
keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/FACAEE98703B11F186502B13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.136.0/22
102.219.12.0/22
IPv6:
2c0f:1900::/32
Signature Algorithm: sha256WithRSAEncryption
d5:1f:2d:b6:0d:91:00:52:b9:06:7c:40:68:4d:4c:37:19:61:
f6:73:9a:6b:2c:e4:02:1b:7d:ea:e2:eb:85:04:7e:85:28:3e:
b9:c2:e0:70:47:c3:9c:b2:58:10:d4:d7:fa:c3:ab:cb:cf:bc:
21:1e:52:0b:fe:cd:27:bb:69:2a:46:29:06:d6:29:46:a8:2b:
c5:d0:f2:9a:8e:b2:e4:a5:91:d2:f6:c4:37:c2:e7:78:b5:ce:
d4:68:f6:a6:0c:3c:a1:3d:28:8e:78:65:3f:65:7c:0d:a6:a2:
33:36:04:7e:09:39:6d:19:92:ea:fb:8d:ec:83:f4:5e:52:db:
75:69:0e:ce:5b:d1:50:48:42:b3:fe:e7:2d:71:5e:27:66:80:
c8:5d:29:d9:d1:41:5e:1b:fc:10:2a:96:4f:ff:63:11:c1:e4:
72:5f:6a:95:59:89:3e:c7:2d:4a:9f:a7:68:c9:e5:ee:84:86:
6b:bb:2b:3e:2f:d8:97:66:c3:11:b5:7d:1c:c7:ee:96:8d:60:
c4:54:c3:a5:78:82:5f:ad:84:4b:7b:fd:4d:94:02:8a:0e:52:
2a:f6:c6:dd:f8:df:52:71:65:a6:28:f4:b5:59:92:59:20:6a:
57:5e:9f:0c:b2:e9:3a:f4:41:1a:fa:d8:ff:a8:0e:f4:17:70:
b1:9e:9e:8a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5NDRBRjExMC8GA1UEBRMoRDE4MUU5MUVEMTczRjY0RDdCRjgyRDhFMEJFRjk5
NEQ1OTg2REY1MjAeFw0yNjA2MjUwMjE3MDlaFw0zMTA2MzAwMjE3MDlaMBgxFjAU
BgNVBAMTDTZhM2M4ZmFhLWRjZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3urADGYdeKozeF/heY0JZyrKEaSUnYXpiDXv5ws162e+7nPvTGYW10khG
Qt2BZCr28APNLf33TvFbFuekGJ20al60Cg4pqj3asusd7e9anWlD+jF+iewG5xCT
Oy6nN8dFQP/+dzissfm+u7nTM+n/+eygCIKNF24nQkKWJXi8W4SR43+c0oJyOsWv
V8U3Z2We6PVWcmyfLqRkk3GOkBpYqTDb8wWTaRW/UgZlmAAOW9PPAGMOlRHwQOoW
SRFvyrbkjQZ+STy0lfjtPPvcGSfotfyIOWSFKNd/+xLNrWXXi9dB7suxmV21IMD6
UJ45nkI/wTDplKBfR3YM4XzlaQm/AgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUMFMu
+lmTiyRS+U56d3Xv162dA1wwHwYDVR0jBBgwFoAU0YHpHtFz9k17+C2OC++ZTVmG
31IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOTQ0LzE2QUE4QTQ0MjA3NjExRUNCMzA2MDkyNUQ4QTAxNENFLzBZSHBI
dEZ6OWsxNy1DMk9DLS1aVFZtRzMxSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBZSHBIdEZ6OWsxNy1DMk9DLS1aVFZtRzMxSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjkzOTQ0LzE2QUE4QTQ0MjA3NjExRUNCMzA2MDkyNUQ4
QTAxNENFL0ZBQ0FFRTk4NzAzQjExRjE4NjUwMkIxM0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm2YgDBAJm2wwwDQQCAAIw
BwMFACwPGQAwDQYJKoZIhvcNAQELBQADggEBANUfLbYNkQBSuQZ8QGhNTDcZYfZz
mmss5AIbferi64UEfoUoPrnC4HBHw5yyWBDU1/rDq8vPvCEeUgv+zSe7aSpGKQbW
KUaoK8XQ8pqOsuSlkdL2xDfC53i1ztRo9qYMPKE9KI54ZT9lfA2mojM2BH4JOW0Z
kur7jeyD9F5S23VpDs5b0VBIQrP+5y1xXidmgMhdKdnRQV4b/BAqlk//YxHB5HJf
apVZiT7HLUqfp2jJ5e6Ehmu7Kz4v2JdmwxG1fRzH7paNYMRUw6V4gl+thEt7/U2U
AooOUir2xt3431JxZaYo9LVZklkgaldenwyy6Tr0QRr62P+oDvQXcLGenoo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:49 2026 by rpki-client