Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/294373CC6F0F11F1819301F7CE1D38B0.roa
File: 294373CC6F0F11F1819301F7CE1D38B0.roa (raw, json)
Hash identifier: ETMnfkYgdR0C9KWl5E+TZTv27PVluRefelvYjni0Gxw=
Subject key identifier: 3D:0F:EA:BB:90:BB:EF:38:4B:4C:CC:53:46:E4:CA:0E:DA:A1:2C:EE
Certificate issuer: /CN=F36D9331AF/serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Certificate serial: 04
Authority key identifier: DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/294373CC6F0F11F1819301F7CE1D38B0.roa
Signing time: Tue 23 Jun 2026 14:23:54 +0000
ROA not before: Tue 23 Jun 2026 14:23:49 +0000
ROA not after: Fri 05 Dec 2036 14:23:49 +0000
asID: 328757
IP address blocks: 102.222.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9331AF, serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Validity
Not Before: Jun 23 14:23:49 2026 GMT
Not After : Dec 5 14:23:49 2036 GMT
Subject: CN=6a3a96f9-1646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:19:ba:11:af:3e:fd:5d:b7:25:92:4f:9d:
70:c1:20:14:cc:6b:99:98:fd:08:78:07:2a:e3:b6:
0a:d7:92:41:1c:b6:3d:6c:1c:03:f1:7d:70:1f:6c:
2a:f9:db:58:79:42:5d:bb:5e:b9:45:96:62:b7:b9:
f9:2e:52:30:a6:0c:c9:5c:cc:6f:c4:67:e0:65:42:
55:fd:d0:f7:7c:9b:81:7c:93:b2:ac:3a:89:3f:28:
be:80:a4:a8:e6:3f:94:8f:23:9c:54:8a:b5:4a:1d:
22:46:39:f6:71:95:f4:72:11:72:8d:ef:98:f2:73:
34:fc:1b:47:f1:08:49:75:fe:a3:65:e7:bb:97:c0:
0b:a5:f0:bf:fe:50:86:c7:22:f7:a4:db:c2:5d:3f:
01:f3:63:a7:4f:aa:97:29:28:bf:da:19:64:62:7b:
72:e3:25:d6:b3:de:96:11:19:70:cd:04:38:74:75:
84:47:e9:98:45:67:12:94:f1:45:34:f0:40:a3:b7:
3d:6e:59:bb:6a:fd:1b:1b:1b:97:b4:51:c2:36:36:
b1:f4:d2:ac:b9:82:9a:bf:2b:d9:d7:bb:8b:de:71:
46:1e:c4:29:9f:76:d4:84:e7:73:26:79:33:d8:81:
72:9b:de:7e:dd:58:27:53:1d:b0:28:69:a1:f8:71:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:EA:BB:90:BB:EF:38:4B:4C:CC:53:46:E4:CA:0E:DA:A1:2C:EE
X509v3 Authority Key Identifier:
keyid:DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/294373CC6F0F11F1819301F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7b:a7:93:c1:45:6f:ac:37:b5:72:6d:0f:9b:dc:84:7f:53:
d9:43:91:06:7b:76:a0:61:75:15:59:c3:2c:2e:e8:67:e9:af:
54:c9:d2:41:ac:f0:5f:ed:5b:cb:39:05:a0:70:bf:1e:8c:cf:
1b:13:8d:f8:ba:f4:78:83:8e:3a:67:1c:cf:0c:bf:f1:37:45:
aa:46:58:ab:a5:2a:a4:20:7d:46:5d:6c:83:2b:b6:c2:2b:fa:
27:5f:7e:ab:46:00:c8:d9:25:e6:bd:8d:3b:95:e9:76:2d:4d:
db:85:86:b2:f1:f4:df:60:c9:eb:3d:95:69:93:98:7b:b4:10:
95:fc:a2:b1:2c:cb:fd:fb:ab:50:80:c2:ca:ec:d7:e0:93:7b:
7d:83:85:59:88:21:37:de:6c:7d:8b:ed:d5:33:46:ee:51:6e:
ac:60:ea:96:bc:3a:83:12:43:96:eb:9c:86:22:87:f8:d6:9a:
4f:c2:49:b1:62:df:97:55:c5:fb:77:76:2a:4b:32:06:7e:fa:
94:31:f3:2a:a7:8c:06:d9:da:ac:0c:b8:d3:ee:3a:97:17:f7:
93:7c:1a:db:bc:58:89:44:f6:46:bf:57:ba:d7:ba:d3:c8:30:
99:a0:f7:3b:66:b5:45:6e:92:e7:73:37:f6:55:f7:e7:d0:5d:
aa:af:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:05 2026 by rpki-client