Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/AF34E060885F11F1A0626AF8CE1D38B0.roa
File: AF34E060885F11F1A0626AF8CE1D38B0.roa (raw, json)
Hash identifier: XGf51Q8pDGhym3OB8mnGv3P/awHpaZKoyyeubpLI1UQ=
Subject key identifier: 34:8E:70:58:33:63:9D:0F:5D:01:B2:F1:B8:70:1A:C1:48:AC:23:97
Certificate issuer: /CN=F36316B1AF/serialNumber=7DC5A5D8A67E312A68FE980A90A6FC75F744245B
Certificate serial: 02
Authority key identifier: 7D:C5:A5:D8:A6:7E:31:2A:68:FE:98:0A:90:A6:FC:75:F7:44:24:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/AF34E060885F11F1A0626AF8CE1D38B0.roa
Signing time: Sat 25 Jul 2026 19:33:17 +0000
ROA not before: Sat 25 Jul 2026 19:33:13 +0000
ROA not after: Fri 25 Jul 2036 19:33:13 +0000
asID: 329777
IP address blocks: 102.201.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft
rsync://rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36316B1AF, serialNumber=7DC5A5D8A67E312A68FE980A90A6FC75F744245B
Validity
Not Before: Jul 25 19:33:13 2026 GMT
Not After : Jul 25 19:33:13 2036 GMT
Subject: CN=6a650f7d-2226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:23:62:8a:27:18:2b:b5:8f:95:fb:f2:bc:
40:63:b4:78:c9:da:9d:e0:91:3c:45:60:4b:9d:9b:
94:f2:7d:8a:ca:43:af:db:b5:55:7f:a0:a7:65:35:
16:5d:db:e9:07:bd:02:41:c9:fc:69:7b:f5:04:d5:
e0:cc:04:3f:81:aa:fe:8c:a6:60:28:da:8a:a2:35:
8d:d0:9f:2a:fa:f6:68:1d:45:42:62:6f:a2:f7:27:
dc:e7:c0:22:fd:fb:9f:3c:71:95:96:e9:6f:dd:13:
8c:40:58:5b:69:56:cb:c5:37:27:5a:8f:d6:46:45:
2d:7b:3a:83:d8:6f:1e:dc:f2:75:57:68:45:4d:b7:
ea:fe:19:a3:79:3e:b2:cc:c7:74:03:74:6a:71:a5:
77:a8:d8:60:bb:43:a9:cd:8c:cc:42:e7:57:54:38:
f7:34:84:19:a1:af:71:41:7a:46:57:1d:35:68:90:
71:b5:74:e4:c4:93:b7:c6:e3:02:8c:70:4f:37:a0:
ca:2b:55:7e:1a:61:86:39:60:94:4c:b8:17:00:d9:
cb:cf:62:a9:2f:ff:96:c6:e3:57:a8:7e:19:a2:95:
5c:d3:cf:c3:a4:60:ca:85:ac:e3:0c:60:96:c0:c2:
00:60:4c:2d:a4:67:f4:f6:a5:fe:cc:f7:1b:83:bc:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8E:70:58:33:63:9D:0F:5D:01:B2:F1:B8:70:1A:C1:48:AC:23:97
X509v3 Authority Key Identifier:
keyid:7D:C5:A5:D8:A6:7E:31:2A:68:FE:98:0A:90:A6:FC:75:F7:44:24:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/AF34E060885F11F1A0626AF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.201.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e1:92:37:58:f4:b7:81:db:7a:cb:33:a7:ff:1f:ab:3f:91:
f7:88:df:4d:ad:e2:8a:7b:a3:cd:13:66:9e:ba:d9:1b:9b:ae:
5b:95:04:5f:6a:4d:62:4d:f6:46:6c:3f:cf:24:87:ca:a6:cf:
36:9c:cf:71:d4:bf:9e:07:d8:46:51:01:df:45:24:dd:3d:91:
bb:df:ce:a3:d9:e4:e9:b2:b4:ae:7f:e1:9c:23:e9:e8:f4:67:
3d:a9:43:a2:ce:27:0d:8f:dc:bb:f8:0a:58:58:e9:1e:ca:fa:
96:3a:38:7f:65:fd:dc:4e:69:a1:3a:d0:11:91:e2:78:38:52:
9a:c4:15:62:f2:fe:f7:a5:30:a7:4b:2e:21:e1:0a:e1:a9:68:
dc:5d:ed:94:0a:f3:35:26:2a:aa:52:64:ca:9f:c3:b7:f5:87:
2d:97:b9:5f:d6:80:a0:94:13:5d:44:c5:ae:82:02:52:0e:f1:
ed:a3:21:84:9f:47:02:38:d2:4e:f4:c4:46:b8:dc:00:b9:0d:
9d:62:95:33:0f:78:53:c2:44:fe:00:d4:dd:1d:61:05:44:65:
27:a2:33:f1:c1:9e:4c:03:fe:5b:63:4d:8f:6a:01:88:88:64:
39:f8:92:d1:d0:1d:fa:a8:c3:97:53:fe:c6:33:10:7e:dc:e5:
03:3f:ca:7d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MTZCMUFGMTEwLwYDVQQFEyg3REM1QTVEOEE2N0UzMTJBNjhGRTk4MEE5MEE2RkM3
NUY3NDQyNDVCMB4XDTI2MDcyNTE5MzMxM1oXDTM2MDcyNTE5MzMxM1owGDEWMBQG
A1UEAxMNNmE2NTBmN2QtMjIyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtgI2KKJxgrtY+V+/K8QGO0eMnaneCRPEVgS52blPJ9ispDr9u1VX+gp2U1
Fl3b6Qe9AkHJ/Gl79QTV4MwEP4Gq/oymYCjaiqI1jdCfKvr2aB1FQmJvovcn3OfA
Iv37nzxxlZbpb90TjEBYW2lWy8U3J1qP1kZFLXs6g9hvHtzydVdoRU236v4Zo3k+
sszHdAN0anGld6jYYLtDqc2MzELnV1Q49zSEGaGvcUF6RlcdNWiQcbV05MSTt8bj
AoxwTzegyitVfhphhjlglEy4FwDZy89iqS//lsbjV6h+GaKVXNPPw6RgyoWs4wxg
lsDCAGBMLaRn9Pal/sz3G4O8JZECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ0jnBY
M2OdD10BsvG4cBrBSKwjlzAfBgNVHSMEGDAWgBR9xaXYpn4xKmj+mAqQpvx190Qk
WzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzE2QjEvNDlEMTcyOEU4ODVFMTFGMTkzRkI0REYwQ0UxRDM4QjAvZmNXbDJL
Wi1NU3BvX3BnS2tLYjhkZmRFSkZzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZmNXbDJLWi1NU3BvX3BnS2tLYjhkZmRFSkZzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzE2QjEvNDlEMTcyOEU4ODVFMTFGMTkzRkI0REYwQ0Ux
RDM4QjAvQUYzNEUwNjA4ODVGMTFGMUEwNjI2QUY4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbJ/DANBgkqhkiG9w0BAQsF
AAOCAQEAqOGSN1j0t4Hbesszp/8fqz+R94jfTa3iinujzRNmnrrZG5uuW5UEX2pN
Yk32Rmw/zySHyqbPNpzPcdS/ngfYRlEB30Uk3T2Ru9/Oo9nk6bK0rn/hnCPp6PRn
PalDos4nDY/cu/gKWFjpHsr6ljo4f2X93E5poTrQEZHieDhSmsQVYvL+96Uwp0su
IeEK4alo3F3tlArzNSYqqlJkyp/Dt/WHLZe5X9aAoJQTXUTFroICUg7x7aMhhJ9H
AjjSTvTERrjcALkNnWKVMw94U8JE/gDU3R1hBURlJ6Iz8cGeTAP+W2NNj2oBiIhk
OfiS0dAd+qjDl1P+xjMQftzlAz/KfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:54 2026 by rpki-client