Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/E09561B85EE111F1A566E6D1CE1D38B0.roa
File: E09561B85EE111F1A566E6D1CE1D38B0.roa (raw, json)
Hash identifier: TIZi3tWlJaC0A2I3Tmcgez2CRqE9zMNpFFToSyX14bA=
Subject key identifier: 01:A5:F8:CC:07:7E:2F:B7:2C:B8:54:09:DD:96:04:70:A8:17:93:05
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 0350
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/E09561B85EE111F1A566E6D1CE1D38B0.roa
Signing time: Wed 03 Jun 2026 00:19:26 +0000
ROA not before: Wed 03 Jun 2026 00:00:19 +0000
ROA not after: Mon 10 Jun 2030 00:00:19 +0000
asID: 37577
IP address blocks: 102.178.72.0/24 maxlen: 24
102.178.73.0/24 maxlen: 24
102.178.74.0/24 maxlen: 24
102.178.75.0/24 maxlen: 24
102.178.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 04:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Jun 3 00:00:19 2026 GMT
Not After : Jun 10 00:00:19 2030 GMT
Subject: CN=6a1f730e-006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:b7:e5:93:ce:b9:a7:49:db:30:e7:e8:1e:
0d:df:9f:8f:3f:d1:07:54:15:37:8c:f2:39:99:a7:
8a:18:7b:a3:2c:80:e4:92:38:60:78:c8:c8:c7:fc:
5d:d4:10:c7:79:2e:82:d3:26:ff:92:aa:d0:f0:16:
c4:3a:a8:0d:35:2b:05:cf:30:49:87:d8:64:96:74:
9f:f1:1c:25:ca:38:4e:a6:6a:86:ec:63:7e:fb:1a:
7b:13:14:03:47:44:ec:86:51:8f:4d:33:c5:ba:3e:
14:f6:fe:b4:23:2e:55:d3:ee:4a:9c:f8:11:3d:2d:
52:c8:89:f1:a4:d9:45:9b:61:29:e1:e0:67:2a:53:
e4:b5:a3:4a:c4:60:3d:39:fe:a2:3f:39:1d:12:26:
0d:9b:07:26:e6:23:ec:ca:66:aa:54:ee:ea:1c:eb:
43:45:e7:96:0d:c9:14:b2:c2:cc:17:06:da:fe:15:
78:50:07:af:d5:b7:63:8a:d9:c7:2f:ed:14:f8:4b:
76:c1:ab:4d:89:6f:a3:65:0b:d1:65:c4:97:04:28:
12:db:20:e7:b2:03:b7:9e:57:2b:c1:db:5f:b1:54:
7d:df:2e:a6:72:ef:46:39:ca:c5:ba:52:1e:0c:9b:
9d:bb:5b:b4:90:5e:b6:76:18:58:8c:bf:53:3a:fe:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:F8:CC:07:7E:2F:B7:2C:B8:54:09:DD:96:04:70:A8:17:93:05
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/E09561B85EE111F1A566E6D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.178.72.0/22
102.178.210.0/24
Signature Algorithm: sha256WithRSAEncryption
04:52:43:57:0e:54:fa:23:b5:f4:79:2c:e9:5a:18:4e:e4:f7:
f4:dc:de:e3:18:2c:e7:24:fe:b6:b7:d8:9b:d8:00:79:74:34:
40:48:1e:49:11:e9:51:3d:80:25:72:66:61:16:e7:a0:22:17:
4a:d2:dd:66:16:f0:4e:5e:2f:c4:72:ab:4b:ea:85:26:e5:dd:
fb:7f:8c:a9:56:a1:08:44:f2:0a:de:96:72:43:9d:8b:0c:e9:
a6:d1:66:a7:19:4d:eb:fc:61:00:f7:27:4e:89:d5:dd:d5:c7:
05:a7:e4:62:f5:b9:e2:43:63:69:24:98:74:43:e1:16:82:a0:
f7:1b:8a:f1:2f:6b:4c:b0:ca:19:47:53:55:61:53:24:00:a4:
d7:1e:65:be:b1:c0:36:77:e4:ff:84:ff:d3:fc:f1:58:85:c9:
df:50:60:a0:ac:da:2a:c0:43:82:e1:84:b4:8c:fd:61:20:ea:
fe:81:03:e8:f9:64:d0:ca:93:3d:a3:01:0b:45:bc:89:95:4c:
a9:8f:5a:5d:8f:6b:a9:37:4c:0c:19:63:1b:e2:bd:01:d2:76:
9a:0f:a8:89:ea:5f:17:2e:f3:df:a1:63:c8:39:24:c6:ec:24:
62:5f:6a:25:d9:65:48:f4:1c:bc:2b:dc:7b:9f:76:eb:fb:ad:
f3:2c:d9:cb
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4
MjUxNEMwNDIwRjAeFw0yNjA2MDMwMDAwMTlaFw0zMDA2MTAwMDAwMTlaMBgxFjAU
BgNVBAMTDTZhMWY3MzBlLTAwNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuILflk865p0nbMOfoHg3fn48/0QdUFTeM8jmZp4oYe6MsgOSSOGB4yMjH
/F3UEMd5LoLTJv+SqtDwFsQ6qA01KwXPMEmH2GSWdJ/xHCXKOE6maobsY377GnsT
FANHROyGUY9NM8W6PhT2/rQjLlXT7kqc+BE9LVLIifGk2UWbYSnh4GcqU+S1o0rE
YD05/qI/OR0SJg2bBybmI+zKZqpU7uoc60NF55YNyRSywswXBtr+FXhQB6/Vt2OK
2ccv7RT4S3bBq02Jb6NlC9FlxJcEKBLbIOeyA7eeVyvB21+xVH3fLqZy70Y5ysW6
Uh4Mm527W7SQXrZ2GFiMv1M6/lHHAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUAaX4
zAd+L7csuFQJ3ZYEcKgXkwUwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA
Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1
NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3
NTQxMkU2L0UwOTU2MUI4NUVFMTExRjFBNTY2RTZEMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJmskgDBABmstIwDQYJKoZI
hvcNAQELBQADggEBAARSQ1cOVPojtfR5LOlaGE7k9/Tc3uMYLOck/ra32JvYAHl0
NEBIHkkR6VE9gCVyZmEW56AiF0rS3WYW8E5eL8Ryq0vqhSbl3ft/jKlWoQhE8gre
lnJDnYsM6abRZqcZTev8YQD3J06J1d3VxwWn5GL1ueJDY2kkmHRD4RaCoPcbivEv
a0ywyhlHU1VhUyQApNceZb6xwDZ35P+E/9P88ViFyd9QYKCs2irAQ4LhhLSM/WEg
6v6BA+j5ZNDKkz2jAQtFvImVTKmPWl2Pa6k3TAwZYxvivQHSdpoPqInqXxcu89+h
Y8g5JMbsJGJfaiXZZUj0HLwr3Hufduv7rfMs2cs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:00 2026 by rpki-client