Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/4D9876F65EE211F1A6C850D2CE1D38B0.roa
File: 4D9876F65EE211F1A6C850D2CE1D38B0.roa (raw, json)
Hash identifier: h+9oIW6kC0vNgF4yIkhDZ/ikr8H7uXQtpONqwGk32N4=
Subject key identifier: 5F:83:65:E6:C2:43:E2:A5:78:6B:92:A4:E0:ED:57:21:90:D2:D2:3C
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 0352
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/4D9876F65EE211F1A6C850D2CE1D38B0.roa
Signing time: Wed 03 Jun 2026 00:22:29 +0000
ROA not before: Wed 03 Jun 2026 00:00:24 +0000
ROA not after: Mon 10 Jun 2030 00:00:24 +0000
asID: 37577
IP address blocks: 102.180.97.0/24 maxlen: 24
102.180.98.0/24 maxlen: 24
102.180.99.0/24 maxlen: 24
102.180.172.0/24 maxlen: 24
102.180.173.0/24 maxlen: 24
102.180.174.0/24 maxlen: 24
102.180.175.0/24 maxlen: 24
102.180.176.0/24 maxlen: 24
102.180.177.0/24 maxlen: 24
102.180.178.0/24 maxlen: 24
102.180.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 04:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Jun 3 00:00:24 2026 GMT
Not After : Jun 10 00:00:24 2030 GMT
Subject: CN=6a1f73c4-619c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:ca:e3:67:cb:37:86:df:02:c2:57:e2:6c:
0d:f5:db:66:1c:f2:05:c5:61:75:d5:85:34:db:23:
ef:4b:2a:c1:e3:26:d5:20:72:f2:43:86:69:68:70:
9a:07:9f:90:f4:cc:ed:fd:b4:2d:88:c9:f3:18:89:
8c:6a:f0:75:51:82:3a:71:c9:0d:fb:8f:17:34:22:
bc:41:db:9a:64:e6:ca:3b:02:a0:e7:27:a4:2a:8c:
7f:48:15:f3:c2:d0:85:73:32:29:0f:63:7e:fe:f6:
ca:46:3d:c7:8c:1d:d0:81:54:01:d8:92:95:f1:7b:
d8:41:1e:cf:ae:97:73:f0:26:da:1e:c8:6a:6c:68:
fe:ad:73:20:f8:05:56:73:d9:0c:df:54:bc:27:2f:
86:4b:81:23:9b:1c:6a:d8:30:21:78:20:14:8e:e2:
9f:56:cb:33:0e:90:36:26:66:3a:5d:b2:5f:8f:dc:
e9:d3:a9:8b:f7:1b:a4:96:9b:6f:ce:aa:00:20:32:
c5:3f:b0:cf:fb:fb:bb:2d:08:20:13:d0:4d:5d:2f:
f6:a0:7e:55:8d:20:de:13:60:ee:7c:88:fa:91:78:
a8:e3:55:49:ee:4d:6d:8d:76:70:0f:c9:76:14:21:
85:9a:6e:96:d5:1a:91:a2:4e:20:b8:f3:c4:21:7e:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:65:E6:C2:43:E2:A5:78:6B:92:A4:E0:ED:57:21:90:D2:D2:3C
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/4D9876F65EE211F1A6C850D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.180.97.0-102.180.99.255
102.180.172.0-102.180.179.255
Signature Algorithm: sha256WithRSAEncryption
04:c3:32:e1:46:64:3b:bd:0f:ec:ac:ea:92:4d:77:86:52:2f:
83:cc:12:cc:54:39:cb:2c:86:db:6c:24:03:7f:62:d3:bb:2e:
e0:a1:33:fb:5e:7a:bf:d4:e5:08:1a:6a:15:af:40:6b:d3:85:
6a:ab:6a:40:80:cf:5f:8e:f0:44:c9:c5:a4:d3:2d:4b:6e:8a:
39:93:cf:fb:ba:f0:57:e5:7e:c5:e0:50:9d:80:aa:cf:da:44:
ae:90:7c:20:ef:e2:ee:c4:ed:36:b2:37:cf:01:17:b2:27:2e:
16:bd:a0:34:e1:d6:f4:52:b8:47:5a:4c:03:df:9c:55:4f:f4:
36:17:de:2a:d7:8d:78:fa:43:a1:0c:31:9c:ce:3c:28:2a:6a:
8a:f9:09:81:ca:fc:56:d9:dd:1b:36:11:52:4a:19:3c:15:a2:
48:1d:bd:6a:7d:03:c3:1a:24:63:95:af:79:9d:35:61:89:1e:
6e:bf:e6:26:65:db:47:31:f0:9a:88:9d:41:b9:83:bc:88:72:
97:76:fb:c3:01:e7:38:5f:2c:2f:17:d2:16:5f:56:95:98:43:
9f:5f:28:3c:0c:07:d8:5b:90:72:cd:19:de:33:61:08:0f:af:
04:2c:37:df:b2:9a:41:7f:44:66:51:9b:53:d3:8d:fd:af:6b:
b5:95:b5:81
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4
MjUxNEMwNDIwRjAeFw0yNjA2MDMwMDAwMjRaFw0zMDA2MTAwMDAwMjRaMBgxFjAU
BgNVBAMTDTZhMWY3M2M0LTYxOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHSsrjZ8s3ht8CwlfibA3122Yc8gXFYXXVhTTbI+9LKsHjJtUgcvJDhmlo
cJoHn5D0zO39tC2IyfMYiYxq8HVRgjpxyQ37jxc0IrxB25pk5so7AqDnJ6QqjH9I
FfPC0IVzMikPY37+9spGPceMHdCBVAHYkpXxe9hBHs+ul3PwJtoeyGpsaP6tcyD4
BVZz2QzfVLwnL4ZLgSObHGrYMCF4IBSO4p9WyzMOkDYmZjpdsl+P3OnTqYv3G6SW
m2/OqgAgMsU/sM/7+7stCCAT0E1dL/agflWNIN4TYO58iPqReKjjVUnuTW2NdnAP
yXYUIYWabpbVGpGiTiC488Qhfht3AgMBAAGjggK7MIICtzAdBgNVHQ4EFgQUX4Nl
5sJD4qV4a5Kk4O1XIZDS0jwwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA
Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1
NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3
NTQxMkU2LzREOTg3NkY2NUVFMjExRjFBNkM4NTBEMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNQYIKwYBBQUHAQcBAf8EJjAkMCIEAgABMBwwDAMEAGa0YQMEAma0YDAMAwQC
ZrSsAwQCZrSwMA0GCSqGSIb3DQEBCwUAA4IBAQAEwzLhRmQ7vQ/srOqSTXeGUi+D
zBLMVDnLLIbbbCQDf2LTuy7goTP7Xnq/1OUIGmoVr0Br04Vqq2pAgM9fjvBEycWk
0y1Lboo5k8/7uvBX5X7F4FCdgKrP2kSukHwg7+LuxO02sjfPAReyJy4WvaA04db0
UrhHWkwD35xVT/Q2F94q1414+kOhDDGczjwoKmqK+QmByvxW2d0bNhFSShk8FaJI
Hb1qfQPDGiRjla95nTVhiR5uv+YmZdtHMfCaiJ1BuYO8iHKXdvvDAec4XywvF9IW
X1aVmEOfXyg8DAfYW5ByzRneM2EID68ELDffsppBf0RmUZtT0439r2u1lbWB
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:36:06 2026 by rpki-client