Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5C5FD9AC31C611F19419AEAFDAE4EC9C.roa
File: 5C5FD9AC31C611F19419AEAFDAE4EC9C.roa (raw, json)
Hash identifier: Vfi3YXIFXtroc+xlvW/NnuJNGpVT1vqCm7HLYJu9x5o=
Subject key identifier: C3:4E:ED:47:DB:5C:D9:72:B6:3D:CE:E3:FB:D6:D4:D0:30:B8:3B:71
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07A3
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5C5FD9AC31C611F19419AEAFDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 14:39:05 +0000
ROA not before: Mon 06 Apr 2026 14:39:00 +0000
ROA not after: Sun 06 Apr 2036 14:39:00 +0000
asID: 37645
IP address blocks: 102.216.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 02:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 14:39:00 2026 GMT
Not After : Apr 6 14:39:00 2036 GMT
Subject: CN=69d3c589-b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:79:36:44:c5:6d:59:b5:1b:de:c5:f3:f2:
c7:f0:35:45:15:93:7e:f9:d9:e5:6e:ad:22:89:f6:
d2:a0:78:da:fb:31:33:a1:af:da:3f:a8:3d:95:4d:
c3:a0:da:e5:17:81:c9:68:fb:7c:d0:a5:f3:93:15:
95:2d:cb:f8:ed:5d:a0:d0:7f:58:03:49:30:2d:8b:
0a:2f:18:63:0f:e3:71:c9:2e:d6:e1:e9:59:e6:a3:
2e:a0:5b:03:df:b3:e4:53:08:30:7b:ab:89:9a:b5:
d5:ba:84:45:25:05:a0:64:56:0f:a7:15:21:9e:ee:
9a:d2:a4:d9:d8:2f:ff:a6:e7:50:36:68:76:92:9a:
31:a9:79:ac:da:b9:42:15:fb:90:75:d9:2b:f0:d7:
1a:ea:fb:17:69:b9:99:38:7a:5a:93:df:a2:12:a5:
ee:1f:59:62:68:ad:e8:78:eb:64:60:1a:3a:7c:21:
f2:33:4f:66:36:df:31:62:39:6a:f6:e4:a6:00:57:
33:99:88:36:3e:b3:e1:c4:78:91:f5:42:34:0e:b3:
7f:d6:e7:99:79:76:a2:fa:9e:3f:90:65:4c:45:2e:
ea:f1:79:f1:82:10:0e:69:a8:1f:bb:77:cb:2c:1c:
98:a9:87:21:00:63:6c:2e:f7:b6:e3:8a:08:95:53:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:ED:47:DB:5C:D9:72:B6:3D:CE:E3:FB:D6:D4:D0:30:B8:3B:71
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5C5FD9AC31C611F19419AEAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.56.0/22
Signature Algorithm: sha256WithRSAEncryption
11:62:11:7c:29:8c:e6:2e:40:8b:4e:1a:4d:8a:e0:b7:3e:6b:
96:7c:b0:da:51:0d:cf:dc:a3:d3:37:b0:ae:9a:01:a2:81:66:
7a:15:01:e8:71:30:99:b5:0f:b4:b9:c3:41:43:36:e9:3e:15:
cf:f1:18:c2:69:47:56:f7:1f:42:c2:10:36:77:bb:d1:1f:b0:
f0:ff:01:24:dd:79:a3:cc:bf:a5:c8:bb:4d:32:be:7c:4d:b2:
4d:7e:1e:de:e5:2a:6b:a9:8d:e6:67:31:9e:41:93:a9:09:86:
3d:ff:d0:c8:5f:b9:b7:ec:e4:af:74:23:5a:d6:cc:7f:12:bf:
99:b7:bf:14:67:47:02:cf:0e:cc:df:fb:fa:f2:db:bf:b6:5f:
dc:ec:55:54:49:5d:18:e4:77:5e:a6:ad:eb:dc:df:da:d0:60:
ef:f6:48:cb:e8:4d:91:ec:2e:0e:db:1f:7d:bd:42:95:04:b3:
66:c0:a0:52:37:45:12:1f:39:05:9b:09:03:4f:5e:3e:c9:fe:
b5:8c:5e:0a:54:c7:bd:b0:e0:77:a7:9b:9b:1b:c3:0c:99:67:
fb:23:83:1d:c5:75:b2:c9:7e:fd:59:e0:fc:ef:05:ae:d3:57:
f2:ea:7c:1a:cf:13:cd:1b:05:56:d9:51:2a:12:51:82:52:1f:
f7:05:20:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjA0MDYxNDM5MDBaFw0zNjA0MDYxNDM5MDBaMBgxFjAU
BgNVBAMTDTY5ZDNjNTg5LWI0ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMsHk2RMVtWbUb3sXz8sfwNUUVk3752eVurSKJ9tKgeNr7MTOhr9o/qD2V
TcOg2uUXgclo+3zQpfOTFZUty/jtXaDQf1gDSTAtiwovGGMP43HJLtbh6Vnmoy6g
WwPfs+RTCDB7q4matdW6hEUlBaBkVg+nFSGe7prSpNnYL/+m51A2aHaSmjGpeaza
uUIV+5B12Svw1xrq+xdpuZk4elqT36ISpe4fWWJoreh462RgGjp8IfIzT2Y23zFi
OWr25KYAVzOZiDY+s+HEeJH1QjQOs3/W55l5dqL6nj+QZUxFLurxefGCEA5pqB+7
d8ssHJiphyEAY2wu97bjigiVUyKvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUw07t
R9tc2XK2Pc7j+9bU0DC4O3EwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzVDNUZEOUFDMzFDNjExRjE5NDE5QUVBRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2DgwDQYJKoZIhvcNAQEL
BQADggEBABFiEXwpjOYuQItOGk2K4Lc+a5Z8sNpRDc/co9M3sK6aAaKBZnoVAehx
MJm1D7S5w0FDNuk+Fc/xGMJpR1b3H0LCEDZ3u9EfsPD/ASTdeaPMv6XIu00yvnxN
sk1+Ht7lKmupjeZnMZ5Bk6kJhj3/0Mhfubfs5K90I1rWzH8Sv5m3vxRnRwLPDszf
+/ry27+2X9zsVVRJXRjkd16mrevc39rQYO/2SMvoTZHsLg7bH329QpUEs2bAoFI3
RRIfOQWbCQNPXj7J/rWMXgpUx72w4Henm5sbwwyZZ/sjgx3FdbLJfv1Z4PzvBa7T
V/LqfBrPE80bBVbZUSoSUYJSH/cFIJA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:31 2026 by rpki-client