Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E76F4CF831C611F190C479B3DAE4EC9C.roa
File: E76F4CF831C611F190C479B3DAE4EC9C.roa (raw, json)
Hash identifier: faD0G33rEe95uhhlPweEbpanRsZcsjWv3e68sG62k44=
Subject key identifier: 26:D7:61:8B:29:6F:83:90:26:54:2E:12:A3:D9:C4:94:C9:A7:51:FA
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07A6
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E76F4CF831C611F190C479B3DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 14:42:58 +0000
ROA not before: Mon 06 Apr 2026 14:42:53 +0000
ROA not after: Sun 06 Apr 2036 14:42:53 +0000
asID: 37645
IP address blocks: 102.213.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 14:42:53 2026 GMT
Not After : Apr 6 14:42:53 2036 GMT
Subject: CN=69d3c672-4985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:8e:6a:ef:c8:b9:c3:6e:70:e4:44:0d:04:
9e:07:8c:63:1c:8c:5f:e6:0d:ba:2c:eb:b8:90:40:
3d:49:d9:27:cc:84:c1:69:88:51:d0:2c:be:1c:36:
d4:28:17:2f:b8:52:e7:ed:4a:3f:b1:10:d8:34:3f:
90:8d:fc:06:d9:a1:30:af:5e:7a:dd:8f:04:1d:52:
0a:ae:72:ef:6a:33:e4:af:3d:6d:ca:b0:13:19:86:
ff:41:6e:aa:97:39:5a:97:0e:1b:b4:98:c9:53:f8:
86:74:28:de:eb:dd:27:5c:6f:7a:07:08:5c:26:76:
be:ff:2b:b3:e7:17:85:79:8c:0e:ae:d3:c4:84:f2:
62:30:79:2f:6d:32:22:1d:70:89:50:0e:82:5c:e6:
4f:41:5d:92:7a:32:f1:bb:0e:f9:72:bf:07:25:d2:
96:0e:4d:ff:8c:0d:3f:31:1e:75:db:51:77:dd:06:
06:56:d7:cb:4b:2f:68:c0:3b:b2:70:4d:3a:7d:8d:
bd:e8:c6:b1:f0:87:55:e0:a7:06:16:bb:41:83:d2:
6a:2c:98:2c:3d:83:61:4f:85:81:c3:e9:ad:f7:53:
f4:c5:6e:31:53:e1:8a:58:b9:13:89:61:7f:f6:1f:
1e:34:68:84:fc:de:ac:86:55:da:2a:61:8e:56:df:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D7:61:8B:29:6F:83:90:26:54:2E:12:A3:D9:C4:94:C9:A7:51:FA
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E76F4CF831C611F190C479B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.96.0/22
Signature Algorithm: sha256WithRSAEncryption
77:e2:6d:ec:b0:d2:e0:df:19:6b:ea:23:66:79:9e:8a:dd:1e:
2b:c9:51:c8:9b:93:1f:62:ec:ea:30:17:96:c4:80:dc:fd:c9:
d3:e1:d7:b6:e7:63:b0:39:88:a5:f1:99:0e:af:e2:31:d9:83:
75:65:02:92:58:84:af:b4:8a:6d:83:d3:d4:5c:db:31:54:9a:
a5:0c:9a:57:2f:8f:61:ee:90:86:5f:c6:62:94:37:a8:c8:8d:
81:4a:5f:f7:54:12:5b:8e:48:2a:b2:5f:dd:fe:8e:98:af:43:
05:5f:4c:e4:c7:08:5a:06:3a:5e:5c:c7:54:b9:ea:47:2a:5f:
a0:63:0f:7c:fd:88:61:cb:45:8c:4f:d7:5c:a2:73:b9:9a:45:
97:4e:8e:e8:66:90:c0:6c:59:6f:0f:08:7a:5e:59:44:9d:0b:
e1:26:a4:0d:0a:85:50:03:14:b4:ea:12:8a:50:fa:07:7e:93:
86:c3:23:d4:8d:81:db:c4:1e:32:8e:ac:14:ec:61:db:5e:0a:
ed:ff:c2:30:9a:ac:3c:59:cb:7d:aa:92:4a:13:8c:db:9c:e4:
bb:5e:e0:6c:d3:9b:e8:83:bd:65:9f:c8:ce:95:3b:04:ed:cb:
6b:6b:7f:c1:5a:1d:e3:ec:44:8f:4a:8a:a9:f5:c6:a7:0a:30:
9a:7b:ca:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjA0MDYxNDQyNTNaFw0zNjA0MDYxNDQyNTNaMBgxFjAU
BgNVBAMTDTY5ZDNjNjcyLTQ5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNLI5q78i5w25w5EQNBJ4HjGMcjF/mDbos67iQQD1J2SfMhMFpiFHQLL4c
NtQoFy+4UuftSj+xENg0P5CN/AbZoTCvXnrdjwQdUgqucu9qM+SvPW3KsBMZhv9B
bqqXOVqXDhu0mMlT+IZ0KN7r3Sdcb3oHCFwmdr7/K7PnF4V5jA6u08SE8mIweS9t
MiIdcIlQDoJc5k9BXZJ6MvG7Dvlyvwcl0pYOTf+MDT8xHnXbUXfdBgZW18tLL2jA
O7JwTTp9jb3oxrHwh1XgpwYWu0GD0mosmCw9g2FPhYHD6a33U/TFbjFT4YpYuROJ
YX/2Hx40aIT83qyGVdoqYY5W31WhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJtdh
iylvg5AmVC4So9nElMmnUfowHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFL0U3NkY0Q0Y4MzFDNjExRjE5MEM0NzlCM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1WAwDQYJKoZIhvcNAQEL
BQADggEBAHfibeyw0uDfGWvqI2Z5nordHivJUcibkx9i7OowF5bEgNz9ydPh17bn
Y7A5iKXxmQ6v4jHZg3VlApJYhK+0im2D09Rc2zFUmqUMmlcvj2HukIZfxmKUN6jI
jYFKX/dUEluOSCqyX93+jpivQwVfTOTHCFoGOl5cx1S56kcqX6BjD3z9iGHLRYxP
11yic7maRZdOjuhmkMBsWW8PCHpeWUSdC+EmpA0KhVADFLTqEopQ+gd+k4bDI9SN
gdvEHjKOrBTsYdteCu3/wjCarDxZy32qkkoTjNuc5Lte4GzTm+iDvWWfyM6VOwTt
y2trf8FaHePsRI9Kiqn1xqcKMJp7yss=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:24 2026 by rpki-client