Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/A9F6AB448AA611F1AB08A6E8CE1D38B0.roa
File: A9F6AB448AA611F1AB08A6E8CE1D38B0.roa (raw, json)
Hash identifier: 1HF94d7nJvg5x8i0KXil+/R/nuN02veH03L12eIYLRo=
Subject key identifier: 7C:FE:A0:64:DB:D1:09:97:F1:38:16:8B:6D:C7:23:E1:6C:CA:BB:A7
Certificate issuer: /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial: 050A
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/A9F6AB448AA611F1AB08A6E8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 17:06:25 +0000
ROA not before: Tue 28 Jul 2026 17:06:21 +0000
ROA not after: Sun 30 Jun 2030 17:06:21 +0000
asID: 36992
IP address blocks: 102.56.0.0/13 maxlen: 24
2c0f:fc88::/31 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36432B6AF, serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Validity
Not Before: Jul 28 17:06:21 2026 GMT
Not After : Jun 30 17:06:21 2030 GMT
Subject: CN=6a68e191-a859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:84:b5:88:83:27:4a:28:54:51:e6:e5:8a:
b8:47:c7:c8:18:0a:e3:72:ba:f4:92:ee:d2:62:0d:
f2:1f:fb:27:18:6f:1f:89:a7:bf:89:dd:f1:68:f1:
5c:0e:a8:1a:a1:14:58:1b:e9:c9:cb:f8:2b:f9:42:
40:3d:48:16:2a:56:db:6f:62:e2:aa:b6:bb:85:ca:
ca:88:96:47:00:68:34:92:53:3b:45:e1:61:60:18:
a5:f1:81:e6:0d:d8:2f:b9:55:84:b4:8d:1f:44:50:
89:93:85:e3:fe:1f:d8:bb:47:26:88:a3:16:e0:92:
de:d9:94:ab:8c:f0:00:d7:59:a5:48:6d:5d:d9:5d:
14:4a:01:72:ea:a2:fd:d1:f5:f4:df:5b:fd:cc:e5:
92:be:c8:ff:64:6f:4d:df:7b:23:24:c6:59:49:98:
ee:80:97:0a:67:98:8c:1e:f1:24:cb:06:c9:ba:ac:
61:c4:84:a6:4e:fb:8d:0a:bf:b6:c7:2d:b4:b2:a1:
e8:d8:df:31:47:9c:4d:ac:fb:04:eb:da:51:4f:cb:
46:e5:5a:cc:b9:7f:16:7e:d0:fc:ea:58:bc:9d:90:
f7:25:b0:52:55:57:20:7f:d6:ec:b9:94:ee:33:b5:
c1:55:f3:16:a2:b7:18:7f:98:dc:e6:c0:af:39:70:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:A0:64:DB:D1:09:97:F1:38:16:8B:6D:C7:23:E1:6C:CA:BB:A7
X509v3 Authority Key Identifier:
keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/A9F6AB448AA611F1AB08A6E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.56.0.0/13
IPv6:
2c0f:fc88::/31
Signature Algorithm: sha256WithRSAEncryption
a4:b2:84:55:d3:6e:bb:04:b6:63:ae:78:f1:30:03:ab:04:7d:
93:75:f6:37:79:57:92:7b:ea:f0:cd:01:b4:e4:b3:f8:47:35:
33:fd:c7:4a:fb:fe:15:37:88:33:d2:53:66:9a:78:1c:f0:17:
26:c9:ba:66:3b:f3:a1:2e:ec:9c:cb:a6:cb:f6:e1:0d:74:70:
c8:73:5b:34:5a:bf:cf:b3:31:65:18:71:02:6e:e0:5a:60:64:
4f:be:e5:69:f4:2b:cb:74:aa:1b:d3:0c:a5:ea:94:c6:14:0d:
dd:ae:ba:b6:9f:c9:29:a9:34:15:db:4f:74:f5:5a:5f:e7:2c:
26:99:8d:27:5b:e6:7c:2c:7b:07:92:e1:14:3d:26:35:12:74:
2c:32:5d:d8:66:11:74:0a:8d:1e:db:a1:4e:33:de:b6:17:c9:
a4:b5:f4:63:29:2a:d7:35:49:a8:bd:c7:48:ef:1f:c0:39:b6:
55:db:dd:f0:ab:09:46:b6:b2:92:ec:7f:32:94:4c:ee:55:56:
db:db:81:22:a4:92:92:f2:d9:dd:0b:bc:2b:8d:3f:b1:f9:e5:
9a:0f:45:28:5e:38:a9:ff:c2:8d:45:75:b6:92:60:eb:84:7a:
7a:69:83:df:d4:10:ea:f6:4a:ce:d8:9c:e2:a1:5c:ec:6c:02:
39:1d:ea:5a
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICBQowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDMyQjZBRjExMC8GA1UEBRMoMUM5MUI1QUY5QjYwRUEzRjFDMURCODdFQUVDNkRB
N0MyRUEwQTg3NzAeFw0yNjA3MjgxNzA2MjFaFw0zMDA2MzAxNzA2MjFaMBgxFjAU
BgNVBAMTDTZhNjhlMTkxLWE4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbvIS1iIMnSihUUeblirhHx8gYCuNyuvSS7tJiDfIf+ycYbx+Jp7+J3fFo
8VwOqBqhFFgb6cnL+Cv5QkA9SBYqVttvYuKqtruFysqIlkcAaDSSUztF4WFgGKXx
geYN2C+5VYS0jR9EUImTheP+H9i7RyaIoxbgkt7ZlKuM8ADXWaVIbV3ZXRRKAXLq
ov3R9fTfW/3M5ZK+yP9kb03feyMkxllJmO6AlwpnmIwe8STLBsm6rGHEhKZO+40K
v7bHLbSyoejY3zFHnE2s+wTr2lFPy0blWsy5fxZ+0PzqWLydkPclsFJVVyB/1uy5
lO4ztcFV8xaitxh/mNzmwK85cIbPAgMBAAGjggKzMIICrzAdBgNVHQ4EFgQUfP6g
ZNvRCZfxOBaLbccj4WzKu6cwHwYDVR0jBBgwFoAUHJG1r5tg6j8cHbh+rsbafC6g
qHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzMkI2L0YzQUI3MzAyQjc1ODExRUQ4QjQyQUM4RkYxMjIyNDY4L0hKRzFy
NXRnNmo4Y0hiaC1yc2JhZkM2Z3FIYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hKRzFyNXRnNmo4Y0hiaC1yc2JhZkM2Z3FIYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzMkI2L0YzQUI3MzAyQjc1ODExRUQ4QjQyQUM4RkYx
MjIyNDY4L0E5RjZBQjQ0OEFBNjExRjFBQjA4QTZFOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLQYIKwYBBQUHAQcBAf8EHjAcMAsEAgABMAUDAwNmODANBAIAAjAHAwUBLA/8
iDANBgkqhkiG9w0BAQsFAAOCAQEApLKEVdNuuwS2Y6548TADqwR9k3X2N3lXknvq
8M0BtOSz+Ec1M/3HSvv+FTeIM9JTZpp4HPAXJsm6ZjvzoS7snMumy/bhDXRwyHNb
NFq/z7MxZRhxAm7gWmBkT77lafQry3SqG9MMpeqUxhQN3a66tp/JKak0FdtPdPVa
X+csJpmNJ1vmfCx7B5LhFD0mNRJ0LDJd2GYRdAqNHtuhTjPethfJpLX0Yykq1zVJ
qL3HSO8fwDm2Vdvd8KsJRraykux/MpRM7lVW29uBIqSSkvLZ3Qu8K40/sfnlmg9F
KF44qf/CjUV1tpJg64R6emmD39QQ6vZKztic4qFc7GwCOR3qWg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:31 2026 by rpki-client