Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/A2CB9DA88AA511F1875D4CE2CE1D38B0.roa
File: A2CB9DA88AA511F1875D4CE2CE1D38B0.roa (raw, json)
Hash identifier: 37pJQBHBvY5YoMd8VQVHX5sLOFC0Hze+E4R/+cVDN9s=
Subject key identifier: C2:FD:E1:D5:2B:7C:1F:65:2D:BD:02:3A:05:84:0F:C9:CE:CE:8E:D3
Certificate issuer: /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial: 0508
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/A2CB9DA88AA511F1875D4CE2CE1D38B0.roa
Signing time: Tue 28 Jul 2026 16:59:03 +0000
ROA not before: Tue 28 Jul 2026 16:58:59 +0000
ROA not after: Thu 28 Feb 2030 16:58:59 +0000
asID: 36992
IP address blocks: 41.152.0.0/15 maxlen: 24
41.222.128.0/21 maxlen: 24
102.56.0.0/13 maxlen: 24
105.80.0.0/12 maxlen: 24
105.200.0.0/13 maxlen: 24
197.120.0.0/13 maxlen: 24
197.192.0.0/13 maxlen: 24
2c0f:fc88::/31 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36432B6AF, serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Validity
Not Before: Jul 28 16:58:59 2026 GMT
Not After : Feb 28 16:58:59 2030 GMT
Subject: CN=6a68dfd7-8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:98:4c:4f:f3:7a:c2:b8:96:1c:75:51:c5:
3b:8a:8f:41:d9:5e:b7:95:61:2e:75:40:25:4f:a4:
59:ea:a7:63:a3:74:ed:79:21:8d:b1:24:da:67:1a:
e9:a7:9d:8b:c1:0e:20:77:f7:f8:5a:ae:d8:0f:e2:
6a:5e:dd:ce:5d:81:8c:b4:c3:42:de:6f:2d:bd:83:
b9:54:32:86:d4:a3:6d:68:d8:8f:c4:d2:09:09:d8:
04:9a:b2:0f:97:11:93:02:c4:a0:f7:30:5f:ce:fe:
db:e0:fd:ba:47:79:ef:f1:18:d8:18:b5:66:a7:a9:
b1:3d:d7:87:a6:6d:df:c7:17:c8:c5:27:92:c6:44:
71:e9:12:78:6f:68:bb:4c:44:da:47:d1:aa:bf:15:
b4:06:a7:c2:b7:97:d2:17:a2:a3:df:51:c2:e9:37:
ae:c7:3a:a7:85:d4:84:87:0a:de:02:7b:60:3a:ec:
38:a8:35:c7:38:48:87:00:b7:fd:03:fc:3b:0c:04:
6e:48:b0:fa:09:2f:a4:68:87:13:f3:5c:94:a5:51:
c2:ba:06:17:1a:f2:41:c0:a7:9c:d7:43:75:50:fc:
c3:a7:b9:60:10:a3:4f:62:fd:73:a1:fc:50:02:17:
b6:4e:13:be:9c:dc:2c:a8:fd:e4:0c:1a:b5:2b:31:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:E1:D5:2B:7C:1F:65:2D:BD:02:3A:05:84:0F:C9:CE:CE:8E:D3
X509v3 Authority Key Identifier:
keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/A2CB9DA88AA511F1875D4CE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.152.0.0/15
41.222.128.0/21
102.56.0.0/13
105.80.0.0/12
105.200.0.0/13
197.120.0.0/13
197.192.0.0/13
IPv6:
2c0f:fc88::/31
Signature Algorithm: sha256WithRSAEncryption
82:68:95:bc:d7:03:6d:5b:66:fe:35:ef:f0:33:29:ab:91:31:
f5:53:b9:7d:5f:55:5b:89:b9:63:9d:6f:b1:25:37:ba:c0:c1:
72:97:70:d8:e1:99:17:28:80:28:36:65:af:d0:d0:d4:79:8e:
d9:11:99:bb:32:9e:ba:e7:f7:48:a1:c7:ac:64:1e:be:cd:2a:
f8:4e:02:da:c3:58:86:30:0d:9c:74:2a:4d:70:4d:2c:21:6d:
d5:1c:ac:9a:6e:8e:67:89:1e:10:cd:dc:5d:fb:aa:b6:6b:ef:
0c:f2:fc:dd:3c:8a:4f:e7:ef:cf:e0:36:b5:99:d8:ea:8c:b9:
bb:58:28:b6:97:66:a0:a6:38:87:18:6b:f2:8b:c7:c2:0a:28:
9a:93:f2:48:fe:0b:7b:22:b8:b7:b0:25:bd:0f:39:5c:3a:88:
94:3a:04:d8:ba:33:e0:f3:e6:e6:eb:df:72:0b:18:39:c2:18:
52:60:49:16:cf:49:d5:74:bc:c2:d6:65:cb:56:21:53:ca:17:
9f:9f:b6:80:c3:00:26:46:86:03:d9:a8:c6:5c:45:98:41:7a:
d3:09:30:0d:d5:82:eb:98:9c:e6:c2:21:df:8a:2a:dc:d5:e5:
7b:b5:a9:49:2b:d3:12:95:6c:2f:5a:12:70:4d:f3:cd:16:0e:
36:79:54:02
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDMyQjZBRjExMC8GA1UEBRMoMUM5MUI1QUY5QjYwRUEzRjFDMURCODdFQUVDNkRB
N0MyRUEwQTg3NzAeFw0yNjA3MjgxNjU4NTlaFw0zMDAyMjgxNjU4NTlaMBgxFjAU
BgNVBAMTDTZhNjhkZmQ3LTg1ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGNZhMT/N6wriWHHVRxTuKj0HZXreVYS51QCVPpFnqp2OjdO15IY2xJNpn
GumnnYvBDiB39/hartgP4mpe3c5dgYy0w0Leby29g7lUMobUo21o2I/E0gkJ2ASa
sg+XEZMCxKD3MF/O/tvg/bpHee/xGNgYtWanqbE914embd/HF8jFJ5LGRHHpEnhv
aLtMRNpH0aq/FbQGp8K3l9IXoqPfUcLpN67HOqeF1ISHCt4Ce2A67DioNcc4SIcA
t/0D/DsMBG5IsPoJL6RohxPzXJSlUcK6Bhca8kHAp5zXQ3VQ/MOnuWAQo09i/XOh
/FACF7ZOE76c3Cyo/eQMGrUrMZd1AgMBAAGjggLSMIICzjAdBgNVHQ4EFgQUwv3h
1St8H2UtvQI6BYQPyc7OjtMwHwYDVR0jBBgwFoAUHJG1r5tg6j8cHbh+rsbafC6g
qHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzMkI2L0YzQUI3MzAyQjc1ODExRUQ4QjQyQUM4RkYxMjIyNDY4L0hKRzFy
NXRnNmo4Y0hiaC1yc2JhZkM2Z3FIYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hKRzFyNXRnNmo4Y0hiaC1yc2JhZkM2Z3FIYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzMkI2L0YzQUI3MzAyQjc1ODExRUQ4QjQyQUM4RkYx
MjIyNDY4L0EyQ0I5REE4OEFBNTExRjE4NzVENENFMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDAwEpmAMEAynegAMDA2Y4AwME
aVADAwNpyAMDA8V4AwMDxcAwDQQCAAIwBwMFASwP/IgwDQYJKoZIhvcNAQELBQAD
ggEBAIJolbzXA21bZv417/AzKauRMfVTuX1fVVuJuWOdb7ElN7rAwXKXcNjhmRco
gCg2Za/Q0NR5jtkRmbsynrrn90ihx6xkHr7NKvhOAtrDWIYwDZx0Kk1wTSwhbdUc
rJpujmeJHhDN3F37qrZr7wzy/N08ik/n78/gNrWZ2OqMubtYKLaXZqCmOIcYa/KL
x8IKKJqT8kj+C3siuLewJb0POVw6iJQ6BNi6M+Dz5ubr33ILGDnCGFJgSRbPSdV0
vMLWZctWIVPKF5+ftoDDACZGhgPZqMZcRZhBetMJMA3VguuYnObCId+KKtzV5Xu1
qUkr0xKVbC9aEnBN880WDjZ5VAI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:06 2026 by rpki-client