Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/91EA49D8333B11F1B22EFDF6CE1D38B0.roa
File: 91EA49D8333B11F1B22EFDF6CE1D38B0.roa (raw, json)
Hash identifier: Leg6xrK4VU4HGI0NvQ1v004esZ1TDt8++lioLjxNeuE=
Subject key identifier: 77:FB:3A:EE:EE:43:F1:EE:35:4A:EA:19:15:14:E7:06:DE:D1:60:B6
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07CC
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/91EA49D8333B11F1B22EFDF6CE1D38B0.roa
Signing time: Wed 08 Apr 2026 11:10:37 +0000
ROA not before: Wed 08 Apr 2026 11:10:32 +0000
ROA not after: Tue 08 Apr 2036 11:10:32 +0000
asID: 37645
IP address blocks: 102.208.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 8 11:10:32 2026 GMT
Not After : Apr 8 11:10:32 2036 GMT
Subject: CN=69d637ad-4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:2e:de:3c:e5:5d:be:57:2d:42:44:7b:74:
99:49:9b:8f:e6:20:9a:05:83:9c:41:c2:56:c0:f7:
d9:8d:56:fb:b1:d5:4f:f4:ae:c4:ce:f2:01:7a:ed:
85:cc:d8:68:46:70:1d:55:17:24:d5:bd:d1:3c:45:
6e:76:3a:e4:52:58:06:dc:a2:35:9e:d3:3a:4d:cc:
93:1d:67:9d:e4:27:cd:9e:01:c1:22:b6:bc:83:75:
b7:7c:ee:32:9d:ed:cc:15:1c:c3:42:e2:2a:77:39:
4a:12:bc:3f:5b:ff:44:7c:ab:b5:f5:30:b5:28:45:
b9:00:dc:ab:a1:b8:f6:27:4b:5d:06:74:08:55:1b:
84:49:88:7c:39:c2:25:1c:5b:30:2f:4f:41:4f:ea:
0b:e2:0d:38:53:f6:17:7d:7b:a6:a0:d5:26:0f:4c:
7e:59:79:04:ce:46:14:bd:af:e5:66:32:6a:38:29:
37:73:68:68:ae:5c:37:7f:13:f3:a0:30:de:ac:5b:
3d:e5:3d:70:c3:f6:fc:5e:4d:7a:e8:ff:29:1f:e0:
6a:0f:97:e3:23:2f:d0:86:3e:75:73:ff:a4:a6:07:
50:67:18:95:4c:88:6a:3f:ab:03:e3:6c:1d:6f:ec:
38:9e:84:d6:22:8f:26:93:4b:96:6d:1b:5d:8b:df:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:3A:EE:EE:43:F1:EE:35:4A:EA:19:15:14:E7:06:DE:D1:60:B6
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/91EA49D8333B11F1B22EFDF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:bd:ea:92:3f:a4:cd:8d:73:78:17:97:f8:01:b2:ba:ad:69:
cc:81:77:9d:7d:37:cf:cc:d0:e2:0d:fe:2f:02:7f:e2:a3:bb:
42:91:a2:c7:ec:61:f3:f5:62:ea:89:aa:82:75:8d:0f:22:19:
2c:97:b6:df:f5:b3:6b:d6:66:1c:1a:f8:35:b8:12:31:66:7e:
c5:8b:3d:89:42:33:3c:2a:e1:ca:74:9f:49:a7:84:7c:1b:9e:
94:31:d4:5e:27:90:b3:a1:43:32:e2:67:85:83:58:b3:eb:a0:
8c:5a:1e:8d:45:b1:5a:f4:da:83:6d:ec:70:70:f5:85:ff:3a:
bf:e3:b7:06:9f:46:04:28:36:53:a5:60:a7:73:9e:8c:39:b9:
7e:65:22:f0:bb:0a:f8:30:0c:9e:5b:c0:14:7e:8d:35:07:35:
98:74:44:e2:6f:5d:25:de:5f:20:91:79:84:4b:7a:b6:d9:be:
fa:b4:d0:11:30:a9:38:e8:5f:92:52:12:dc:c1:65:ee:df:97:
8c:c3:2f:bd:2d:24:d8:94:be:d3:7f:1b:75:76:a2:d9:86:b5:
08:1e:0b:1b:7b:94:5e:7e:89:15:51:81:2f:11:e5:bb:b2:f2:
a1:2c:72:eb:63:2d:d2:1b:c9:9e:88:cc:50:44:53:db:04:37:
c5:82:0a:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjA0MDgxMTEwMzJaFw0zNjA0MDgxMTEwMzJaMBgxFjAU
BgNVBAMTDTY5ZDYzN2FkLTRmYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Xy7ePOVdvlctQkR7dJlJm4/mIJoFg5xBwlbA99mNVvux1U/0rsTO8gF6
7YXM2GhGcB1VFyTVvdE8RW52OuRSWAbcojWe0zpNzJMdZ53kJ82eAcEitryDdbd8
7jKd7cwVHMNC4ip3OUoSvD9b/0R8q7X1MLUoRbkA3KuhuPYnS10GdAhVG4RJiHw5
wiUcWzAvT0FP6gviDThT9hd9e6ag1SYPTH5ZeQTORhS9r+VmMmo4KTdzaGiuXDd/
E/OgMN6sWz3lPXDD9vxeTXro/ykf4GoPl+MjL9CGPnVz/6SmB1BnGJVMiGo/qwPj
bB1v7DiehNYijyaTS5ZtG12L3+tbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUd/s6
7u5D8e41SuoZFRTnBt7RYLYwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzkxRUE0OUQ4MzMzQjExRjFCMjJFRkRGNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0FwwDQYJKoZIhvcNAQEL
BQADggEBALm96pI/pM2Nc3gXl/gBsrqtacyBd519N8/M0OIN/i8Cf+Kju0KRosfs
YfP1YuqJqoJ1jQ8iGSyXtt/1s2vWZhwa+DW4EjFmfsWLPYlCMzwq4cp0n0mnhHwb
npQx1F4nkLOhQzLiZ4WDWLProIxaHo1FsVr02oNt7HBw9YX/Or/jtwafRgQoNlOl
YKdznow5uX5lIvC7CvgwDJ5bwBR+jTUHNZh0ROJvXSXeXyCReYRLerbZvvq00BEw
qTjoX5JSEtzBZe7fl4zDL70tJNiUvtN/G3V2otmGtQgeCxt7lF5+iRVRgS8R5buy
8qEscutjLdIbyZ6IzFBEU9sEN8WCCss=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:48 2026 by rpki-client