Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/9060B240898611F1A376620ECF1D38B0.roa
File: 9060B240898611F1A376620ECF1D38B0.roa (raw, json)
Hash identifier: gQ1sjUFexgHOAgPIwTpJ+Irjm7EB6T0fzT2OUcT9J/0=
Subject key identifier: A9:64:36:58:04:0B:B0:46:B3:2D:69:C8:A0:23:9C:7A:49:6D:31:82
Certificate issuer: /CN=F36CC7DDAF/serialNumber=619AA3642CB46F3BD2CB891CB67FFDDADE6736AE
Certificate serial: 04EC
Authority key identifier: 61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/9060B240898611F1A376620ECF1D38B0.roa
Signing time: Mon 27 Jul 2026 06:44:07 +0000
ROA not before: Mon 27 Jul 2026 06:44:03 +0000
ROA not after: Thu 31 Mar 2033 06:44:03 +0000
asID: 328547
IP address blocks: 102.23.208.0/21 maxlen: 24
2c0f:ea90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
rsync://rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1260 (0x4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC7DDAF, serialNumber=619AA3642CB46F3BD2CB891CB67FFDDADE6736AE
Validity
Not Before: Jul 27 06:44:03 2026 GMT
Not After : Mar 31 06:44:03 2033 GMT
Subject: CN=6a66fe37-aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:e6:94:21:a8:b3:6c:49:65:5f:55:18:98:
bf:d8:32:98:49:c6:b4:b4:b1:b0:ec:28:0f:8d:34:
25:06:92:2f:ca:76:59:4b:c7:2d:e8:c6:ac:ad:d3:
de:d3:91:c4:c4:c6:b1:c2:86:24:56:36:67:ec:b1:
28:90:c8:28:5e:24:de:8b:62:65:65:ba:d8:6d:6d:
f1:b1:c1:81:7e:a9:ec:70:4a:aa:b4:a1:0e:61:8d:
23:2d:e0:e7:5c:24:8d:3f:bf:d8:44:6d:eb:a8:16:
d1:3a:05:a6:f8:27:58:db:37:85:b2:f8:d9:2d:83:
3c:2e:f1:ed:87:70:a9:63:a7:01:e3:eb:f0:65:32:
af:ec:6d:f7:46:02:63:63:ea:d0:f5:5a:29:d7:92:
21:c8:d9:a2:17:4b:3d:b7:e1:9f:3d:fa:7d:3d:4a:
65:3e:f3:31:07:bc:d1:a6:1c:e4:a4:68:95:9b:7f:
f0:37:34:ee:84:85:5f:52:e1:b3:0a:88:7f:f5:f4:
b4:50:4e:70:74:d7:72:e4:7c:a1:b4:bb:de:ff:fb:
b5:9c:12:d2:b9:ee:7b:7a:3c:e2:d9:e8:f7:06:09:
9e:ca:ef:5b:28:74:7b:2e:22:fd:2e:c4:98:89:ce:
74:13:2c:a7:52:b1:0b:37:98:b9:6b:21:bb:90:f5:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:36:58:04:0B:B0:46:B3:2D:69:C8:A0:23:9C:7A:49:6D:31:82
X509v3 Authority Key Identifier:
keyid:61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/9060B240898611F1A376620ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.208.0/21
IPv6:
2c0f:ea90::/32
Signature Algorithm: sha256WithRSAEncryption
86:25:f4:96:ba:41:a4:04:78:0b:b7:7f:cd:c2:28:b4:f8:ed:
2e:5a:3c:76:a6:58:75:d2:c4:8e:13:3b:a9:73:6f:24:e0:d5:
02:07:a4:6a:2f:ed:c3:5b:21:d6:c8:27:47:8d:b8:9a:9e:5e:
06:8d:83:7c:04:0a:e5:56:df:94:76:91:2c:8c:f7:7b:66:38:
95:77:8d:1c:bf:9a:71:63:21:df:fc:db:1e:41:95:d2:c6:d2:
7b:fe:5a:95:3c:41:45:b2:84:a2:36:ec:0c:57:66:57:7e:74:
42:c0:d4:13:ce:f1:4c:66:77:be:0a:34:7b:57:e7:6c:fc:8c:
ac:e2:53:ec:75:a1:27:8c:68:1a:7d:16:17:7f:4c:ef:bf:53:
b7:bb:d2:a0:a4:99:78:5c:35:13:bd:7b:6e:e7:15:6e:b0:6a:
b6:b3:ec:ae:4a:0d:b4:9e:1f:a5:a0:16:c1:71:ff:02:47:6d:
0e:ef:11:06:ac:a6:8e:df:41:4c:32:de:cc:f6:e8:59:79:8f:
a8:b0:50:21:46:be:23:81:e6:16:2f:a5:b8:ef:14:ac:f7:8c:
16:ed:01:77:ed:b7:6b:f7:d1:dd:da:c4:d4:10:ee:18:a2:21:
d0:a6:77:bc:fd:8c:62:d2:1e:48:7d:6f:e8:de:56:f1:45:60:
2c:4d:dd:3a
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0M3RERBRjExMC8GA1UEBRMoNjE5QUEzNjQyQ0I0NkYzQkQyQ0I4OTFDQjY3RkZE
REFERTY3MzZBRTAeFw0yNjA3MjcwNjQ0MDNaFw0zMzAzMzEwNjQ0MDNaMBgxFjAU
BgNVBAMTDTZhNjZmZTM3LWFhNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM0uaUIaizbEllX1UYmL/YMphJxrS0sbDsKA+NNCUGki/KdllLxy3oxqyt
097TkcTExrHChiRWNmfssSiQyCheJN6LYmVluthtbfGxwYF+qexwSqq0oQ5hjSMt
4OdcJI0/v9hEbeuoFtE6Bab4J1jbN4Wy+Nktgzwu8e2HcKljpwHj6/BlMq/sbfdG
AmNj6tD1WinXkiHI2aIXSz234Z89+n09SmU+8zEHvNGmHOSkaJWbf/A3NO6EhV9S
4bMKiH/19LRQTnB013LkfKG0u97/+7WcEtK57nt6POLZ6PcGCZ7K71sodHsuIv0u
xJiJznQTLKdSsQs3mLlrIbuQ9b3zAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUqWQ2
WAQLsEazLWnIoCOcekltMYIwHwYDVR0jBBgwFoAUYZqjZCy0bzvSy4kctn/92t5n
Nq4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNDN0REL0E5MzA2RjRDQzcyMjExRUQ4RjA3MDNFRUYxMjIyNDY4L1lacWpa
Q3kwYnp2U3k0a2N0bl85MnQ1bk5xNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lacWpaQ3kwYnp2U3k0a2N0bl85MnQ1bk5xNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNDN0REL0E5MzA2RjRDQzcyMjExRUQ4RjA3MDNFRUYx
MjIyNDY4LzkwNjBCMjQwODk4NjExRjFBMzc2NjIwRUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmF9AwDQQCAAIwBwMFACwP
6pAwDQYJKoZIhvcNAQELBQADggEBAIYl9Ja6QaQEeAu3f83CKLT47S5aPHamWHXS
xI4TO6lzbyTg1QIHpGov7cNbIdbIJ0eNuJqeXgaNg3wECuVW35R2kSyM93tmOJV3
jRy/mnFjId/82x5BldLG0nv+WpU8QUWyhKI27AxXZld+dELA1BPO8Uxmd74KNHtX
52z8jKziU+x1oSeMaBp9Fhd/TO+/U7e70qCkmXhcNRO9e27nFW6waraz7K5KDbSe
H6WgFsFx/wJHbQ7vEQaspo7fQUwy3sz26Fl5j6iwUCFGviOB5hYvpbjvFKz3jBbt
AXftt2v30d3axNQQ7hiiIdCmd7z9jGLSHkh9b+jeVvFFYCxN3To=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:00 2026 by rpki-client