Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9C892C2631CC11F1A1108ED2DAE4EC9C.roa
File: 9C892C2631CC11F1A1108ED2DAE4EC9C.roa (raw, json)
Hash identifier: QnqI3tvcewW1sAf9rxjG6hGUqhmFIswnl1mqgcxGm5k=
Subject key identifier: D3:A4:FA:F1:0C:87:55:A0:71:8B:5A:46:2E:FC:BE:5B:95:D9:E7:F1
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07B2
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9C892C2631CC11F1A1108ED2DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 15:23:50 +0000
ROA not before: Mon 06 Apr 2026 15:23:45 +0000
ROA not after: Sun 06 Apr 2036 15:23:45 +0000
asID: 37645
IP address blocks: 102.213.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 15:23:45 2026 GMT
Not After : Apr 6 15:23:45 2036 GMT
Subject: CN=69d3d006-ecc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:58:4b:ba:a8:eb:63:7e:7e:66:62:7d:ac:a0:
57:78:5f:a0:0d:ac:cc:50:df:6f:59:cf:9d:48:e6:
9d:b1:be:a5:cb:98:a0:2b:bd:98:0e:df:96:f5:4d:
d6:a2:48:04:3e:8b:8d:a7:92:40:09:52:02:82:8a:
1f:09:1b:81:50:57:88:65:31:bc:95:08:20:d8:bf:
56:af:7d:ca:7c:e9:b7:fb:21:a4:b7:19:cd:f4:1a:
b4:22:5f:a8:26:b2:5f:ef:ae:02:70:13:08:f5:d5:
b4:02:c0:dd:5b:f0:57:71:7e:11:23:e3:d5:6e:fd:
aa:1d:c1:33:7c:0c:5a:5b:22:df:0c:08:d4:d3:53:
aa:dd:8b:cc:08:6e:7b:77:45:05:b3:cf:72:12:c9:
80:26:92:ae:2c:4d:9b:c0:4c:e0:bb:5c:68:1c:8e:
e5:fe:bc:2e:a7:11:8a:b5:3a:c3:0c:24:9e:f9:c4:
90:8d:d9:2d:cd:ec:ee:96:15:95:79:13:70:7c:c0:
6d:65:a4:22:ba:6a:d7:19:17:60:54:02:90:8c:c7:
5a:f5:32:bd:da:3c:6b:fc:f0:d1:01:43:8a:27:fb:
3d:ad:4a:77:ab:b4:b3:9b:95:6e:e0:74:4d:e8:97:
5d:db:f9:dd:6e:73:81:15:27:d5:4d:5d:17:40:37:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A4:FA:F1:0C:87:55:A0:71:8B:5A:46:2E:FC:BE:5B:95:D9:E7:F1
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9C892C2631CC11F1A1108ED2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.12.0/22
Signature Algorithm: sha256WithRSAEncryption
37:f5:da:63:14:41:29:32:1a:4a:ee:40:17:b2:f5:06:82:c3:
ba:24:eb:a7:a6:ac:e2:c3:16:23:0e:b2:e6:0d:a9:38:71:5e:
57:c4:f1:89:a9:f7:13:46:23:29:62:71:58:d3:36:9b:68:99:
50:24:fb:58:4c:ba:35:c4:37:e4:72:31:f4:65:78:1e:ad:b9:
e4:b2:3b:86:48:96:58:0f:ef:18:03:5b:46:ab:e1:89:34:a9:
18:ae:61:86:81:43:64:9d:6a:c8:75:9b:d5:74:18:7d:c9:92:
48:f1:f5:b8:1a:e1:c4:af:b1:e0:d5:3c:0b:fb:6c:58:02:04:
f5:8f:cf:72:45:80:fe:fc:8b:39:58:86:e6:ef:22:62:bb:ac:
27:74:fa:fe:20:b1:6f:a7:26:80:01:58:8f:d9:48:7b:9b:df:
9e:78:db:d6:fc:b2:10:17:e4:e2:7e:3f:03:09:9f:1a:80:5c:
80:3f:3f:03:9e:f1:bc:a7:4b:4f:d3:b4:5a:5d:00:fd:5d:01:
67:01:ed:42:6e:5e:81:e9:c9:8d:51:b0:4a:79:fc:ff:76:8c:
c3:7c:59:22:03:ea:5c:40:92:76:fb:5a:00:dd:44:f6:28:ca:
fd:13:8c:0f:39:06:2a:b9:62:b8:58:23:c3:89:0b:89:64:ba:
c6:9b:f3:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjA0MDYxNTIzNDVaFw0zNjA0MDYxNTIzNDVaMBgxFjAU
BgNVBAMTDTY5ZDNkMDA2LWVjYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxWEu6qOtjfn5mYn2soFd4X6ANrMxQ329Zz51I5p2xvqXLmKArvZgO35b1
TdaiSAQ+i42nkkAJUgKCih8JG4FQV4hlMbyVCCDYv1avfcp86bf7IaS3Gc30GrQi
X6gmsl/vrgJwEwj11bQCwN1b8FdxfhEj49Vu/aodwTN8DFpbIt8MCNTTU6rdi8wI
bnt3RQWzz3ISyYAmkq4sTZvATOC7XGgcjuX+vC6nEYq1OsMMJJ75xJCN2S3N7O6W
FZV5E3B8wG1lpCK6atcZF2BUApCMx1r1Mr3aPGv88NEBQ4on+z2tSnertLOblW7g
dE3ol13b+d1uc4EVJ9VNXRdAN9WDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU06T6
8QyHVaBxi1pGLvy+W5XZ5/EwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzlDODkyQzI2MzFDQzExRjFBMTEwOEVEMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1QwwDQYJKoZIhvcNAQEL
BQADggEBADf12mMUQSkyGkruQBey9QaCw7ok66emrOLDFiMOsuYNqThxXlfE8Ymp
9xNGIylicVjTNptomVAk+1hMujXEN+RyMfRleB6tueSyO4ZIllgP7xgDW0ar4Yk0
qRiuYYaBQ2Sdash1m9V0GH3Jkkjx9bga4cSvseDVPAv7bFgCBPWPz3JFgP78izlY
hubvImK7rCd0+v4gsW+nJoABWI/ZSHub355429b8shAX5OJ+PwMJnxqAXIA/PwOe
8bynS0/TtFpdAP1dAWcB7UJuXoHpyY1RsEp5/P92jMN8WSID6lxAknb7WgDdRPYo
yv0TjA85Biq5YrhYI8OJC4lkusab89Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:36 2026 by rpki-client