Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/8922B3068A5411F18CA202F9CE1D38B0.roa
File: 8922B3068A5411F18CA202F9CE1D38B0.roa (raw, json)
Hash identifier: l7tujZrecd0pm3b6zD0UYp8LyARkv2XxQVA5DhrewW8=
Subject key identifier: FB:0B:20:12:37:1C:5E:B2:DA:46:B7:1E:55:A4:AD:5F:4F:AB:91:7D
Certificate issuer: /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial: 06F5
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/8922B3068A5411F18CA202F9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:18:31 +0000
ROA not before: Tue 28 Jul 2026 07:18:27 +0000
ROA not after: Sat 30 Nov 2041 07:18:27 +0000
asID: 328537
IP address blocks: 102.36.172.0/22 maxlen: 22
2c0f:ea58::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D32D1AF, serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Validity
Not Before: Jul 28 07:18:27 2026 GMT
Not After : Nov 30 07:18:27 2041 GMT
Subject: CN=6a6857c7-e86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:d7:f6:61:61:10:aa:26:5f:fc:aa:9a:c3:
a1:d1:06:34:b8:25:30:76:04:62:9c:21:c5:e4:2e:
3a:a6:f7:6c:29:66:f3:6d:79:bb:80:a3:c5:48:6f:
b7:dc:e2:ca:72:31:7d:db:d0:46:be:f2:10:dc:d7:
b8:f2:e2:69:63:2d:eb:e4:16:6a:d6:66:3d:ba:76:
86:79:77:00:b6:c7:ba:0e:24:52:38:03:a4:53:4a:
cb:fd:8c:a9:26:8a:07:cc:ec:57:c3:ed:b0:cd:f4:
ad:09:79:14:01:18:c1:c0:0c:0a:ee:64:21:73:3d:
11:de:79:91:33:2a:c6:63:96:2a:4c:33:c4:54:8a:
3c:20:39:21:f8:24:59:22:e4:f4:ac:63:b1:9c:73:
4b:b6:b6:af:8a:dc:d7:b9:af:1c:e1:b3:c8:5f:f1:
6c:fb:b6:de:e8:af:78:90:b7:81:bf:2d:ef:59:0b:
53:d3:46:77:64:fb:3d:e8:f9:f9:7a:15:44:03:37:
ff:08:73:3e:a2:72:4f:6f:05:50:dd:11:bf:15:d2:
5c:d1:34:24:8f:65:85:f6:a1:0a:81:b8:a8:74:fb:
1b:34:cc:85:4b:95:5e:fe:f3:54:63:d8:56:6e:fd:
22:90:c2:e6:25:41:ea:28:28:9a:de:4f:a6:b6:7a:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:20:12:37:1C:5E:B2:DA:46:B7:1E:55:A4:AD:5F:4F:AB:91:7D
X509v3 Authority Key Identifier:
keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/8922B3068A5411F18CA202F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.172.0/22
IPv6:
2c0f:ea58::/32
Signature Algorithm: sha256WithRSAEncryption
c1:22:d7:b3:08:74:4e:79:c5:6a:8d:66:b2:ef:0c:20:75:2c:
45:e4:06:ca:e3:d6:31:3e:e9:51:ad:ec:73:cc:0b:d0:bc:c4:
6b:88:9c:df:4f:32:82:b6:b0:bc:78:e8:01:32:e3:0b:9e:7e:
30:50:9d:a7:dd:5f:86:80:77:82:3b:0c:a9:b0:e7:54:56:b6:
26:4f:01:ce:50:8e:6a:fa:91:e7:a4:8b:f3:f3:40:6a:74:d3:
41:ea:b6:54:49:3f:6b:46:d6:f1:dc:8d:f0:45:1e:15:e3:ae:
84:e3:74:13:64:b3:11:ab:d8:38:a4:b4:48:7c:13:f9:55:4d:
8a:44:8e:db:bc:a6:22:bc:29:99:6c:53:c6:c0:71:9c:0b:36:
7c:93:6e:62:9d:10:f3:bc:93:59:55:44:25:89:f5:91:eb:fe:
90:28:cf:34:9b:b9:9a:e4:6b:49:12:61:1c:ea:60:cf:8d:8f:
1f:58:c0:37:62:7e:54:86:9f:f9:fd:d7:2b:e2:3d:d0:a4:e0:
b8:d2:fa:49:e7:cf:d6:7f:58:c4:c0:23:d4:30:95:f4:bd:3b:
61:07:2e:d5:5e:0f:69:77:e3:43:02:52:a0:a9:30:3c:55:cd:
b8:53:c3:5e:e3:ad:54:37:a1:68:c8:09:1d:f4:bf:bf:f5:17:
98:a6:91:e6
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDMyRDFBRjExMC8GA1UEBRMoQkY1RDNGNERDOUFGMTdGOEJBNzNGNTVBMUQ3MkYz
OTU5QzA1MThFMjAeFw0yNjA3MjgwNzE4MjdaFw00MTExMzAwNzE4MjdaMBgxFjAU
BgNVBAMTDTZhNjg1N2M3LWU4NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJQ9f2YWEQqiZf/Kqaw6HRBjS4JTB2BGKcIcXkLjqm92wpZvNtebuAo8VI
b7fc4spyMX3b0Ea+8hDc17jy4mljLevkFmrWZj26doZ5dwC2x7oOJFI4A6RTSsv9
jKkmigfM7FfD7bDN9K0JeRQBGMHADAruZCFzPRHeeZEzKsZjlipMM8RUijwgOSH4
JFki5PSsY7Gcc0u2tq+K3Ne5rxzhs8hf8Wz7tt7or3iQt4G/Le9ZC1PTRndk+z3o
+fl6FUQDN/8Icz6ick9vBVDdEb8V0lzRNCSPZYX2oQqBuKh0+xs0zIVLlV7+81Rj
2FZu/SKQwuYlQeooKJreT6a2eppNAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQU+wsg
EjccXrLaRrceVaStX0+rkX0wHwYDVR0jBBgwFoAUv10/TcmvF/i6c/VaHXLzlZwF
GOIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzMkQxL0FEMDA5MzJDNDA3RDExRUNBOEU1OUQwRkQ4QTAxNENFL3YxMF9U
Y212Rl9pNmNfVmFIWEx6bFp3RkdPSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YxMF9UY212Rl9pNmNfVmFIWEx6bFp3RkdPSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQzMkQxL0FEMDA5MzJDNDA3RDExRUNBOEU1OUQwRkQ4
QTAxNENFLzg5MjJCMzA2OEE1NDExRjE4Q0EyMDJGOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmJKwwDQQCAAIwBwMFACwP
6lgwDQYJKoZIhvcNAQELBQADggEBAMEi17MIdE55xWqNZrLvDCB1LEXkBsrj1jE+
6VGt7HPMC9C8xGuInN9PMoK2sLx46AEy4wuefjBQnafdX4aAd4I7DKmw51RWtiZP
Ac5Qjmr6keeki/PzQGp000HqtlRJP2tG1vHcjfBFHhXjroTjdBNksxGr2DiktEh8
E/lVTYpEjtu8piK8KZlsU8bAcZwLNnyTbmKdEPO8k1lVRCWJ9ZHr/pAozzSbuZrk
a0kSYRzqYM+Njx9YwDdiflSGn/n91yviPdCk4LjS+knnz9Z/WMTAI9QwlfS9O2EH
LtVeD2l340MCUqCpMDxVzbhTw17jrVQ3oWjICR30v7/1F5imkeY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:42 2026 by rpki-client