Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/AA5B87D633ED11F181BB97B5CE1D38B0.roa
File: AA5B87D633ED11F181BB97B5CE1D38B0.roa (raw, json)
Hash identifier: 6Pd+u2gjjm+VgsR8IN1iRrAHY/KiGxo4zHwnk5HLQNY=
Subject key identifier: 02:2F:89:49:ED:F0:BF:25:A5:D9:78:1E:E8:2E:BF:E0:8E:B9:D5:20
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 2C
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/AA5B87D633ED11F181BB97B5CE1D38B0.roa
Signing time: Thu 09 Apr 2026 08:25:29 +0000
ROA not before: Thu 09 Apr 2026 08:25:24 +0000
ROA not after: Wed 09 Apr 2036 08:25:24 +0000
asID: 329648
IP address blocks: 102.204.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 08:25:24 2026 GMT
Not After : Apr 9 08:25:24 2036 GMT
Subject: CN=69d76279-8bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:17:3f:32:e4:b2:30:86:ad:d9:69:6e:35:
bc:1c:bb:87:4d:a8:9f:36:f1:13:ce:5b:3e:2c:c2:
3a:25:68:e9:0e:76:0d:79:77:50:8c:71:fa:2f:e8:
2f:03:f7:5b:15:a8:bc:0d:41:09:28:67:44:73:8c:
9f:f4:ca:78:9a:87:86:32:c3:1f:d0:06:0b:a4:97:
cc:d6:b3:cf:9c:17:49:38:b7:2f:89:55:09:2c:55:
75:47:93:4a:36:22:fd:59:cd:b9:fc:00:c1:cb:b7:
0d:ff:df:ac:68:6e:c3:8a:9f:57:b4:6f:e1:9a:d6:
c0:86:22:ca:b4:24:c6:d7:1b:1c:1e:68:72:72:85:
41:fa:c0:6e:69:55:2c:ad:06:bf:f4:fe:b7:81:4a:
c9:fc:cc:28:d1:70:ef:a4:0b:01:92:56:ad:9f:74:
25:f4:34:bc:37:46:e9:6c:c0:9b:b4:86:f2:bb:56:
d0:2d:8f:09:53:cc:46:73:89:9f:eb:a5:9e:ad:6a:
07:0c:95:44:57:88:5c:d9:48:31:8d:74:63:22:b4:
82:dd:06:53:6f:05:b7:18:40:f5:05:f4:bb:ef:d0:
08:cb:d3:81:cd:a1:d1:4a:11:e2:88:36:6f:72:45:
d6:2c:ca:a5:a8:8d:e8:ef:d4:87:ad:09:d4:12:2d:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:89:49:ED:F0:BF:25:A5:D9:78:1E:E8:2E:BF:E0:8E:B9:D5:20
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/AA5B87D633ED11F181BB97B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.38.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4c:01:b9:5a:de:a2:36:33:5a:a7:5a:3e:3b:16:d0:b8:2f:
90:04:05:65:0d:94:2d:85:e4:17:9a:44:1f:77:c8:5c:c8:d2:
aa:3b:ff:e2:8f:d8:7a:c8:91:77:f6:83:64:f3:21:a1:a2:14:
59:ea:cd:66:6b:d7:0a:1e:40:1b:d7:5f:1a:fd:26:53:e3:0b:
0e:3a:41:a1:f9:c8:a4:8e:c8:6d:7e:e6:8d:82:37:92:7b:da:
e5:fa:85:22:97:4e:50:33:51:da:41:26:78:d9:d7:ee:0d:c9:
7e:fe:be:cf:64:8f:5c:7a:cb:bd:97:82:84:29:cd:16:68:16:
fb:30:c8:68:2f:ae:72:4d:cf:0c:f0:be:0d:3b:5c:88:cb:a6:
23:fb:bd:a7:c8:0b:0d:7d:d1:1e:51:5a:0d:ef:b4:a0:46:b3:
1d:b6:86:66:46:c4:83:30:f5:68:08:07:b3:09:fd:8c:74:79:
e4:0b:60:9c:f5:1a:7b:b4:13:8e:7c:62:b6:bf:73:ad:3f:8d:
dd:df:46:d0:c1:0d:33:f7:6f:a0:4d:f2:1d:e9:f2:55:33:e7:
30:59:94:c5:5b:ac:ab:0a:bb:f3:6b:ef:15:c8:a5:65:f3:7b:
62:e4:2e:05:5e:03:a5:10:fe:f3:c1:49:55:44:5f:19:08:6b:
c7:60:18:ce
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
QkIwNUFGMTEwLwYDVQQFEyhCRUIwNTg2RkQ2RTIwNzNCREY5N0M0RkVGNTZBRjlD
NUEwOUJGNDUyMB4XDTI2MDQwOTA4MjUyNFoXDTM2MDQwOTA4MjUyNFowGDEWMBQG
A1UEAxMNNjlkNzYyNzktOGJmYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALpTFz8y5LIwhq3ZaW41vBy7h02onzbxE85bPizCOiVo6Q52DXl3UIxx+i/o
LwP3WxWovA1BCShnRHOMn/TKeJqHhjLDH9AGC6SXzNazz5wXSTi3L4lVCSxVdUeT
SjYi/VnNufwAwcu3Df/frGhuw4qfV7Rv4ZrWwIYiyrQkxtcbHB5ocnKFQfrAbmlV
LK0Gv/T+t4FKyfzMKNFw76QLAZJWrZ90JfQ0vDdG6WzAm7SG8rtW0C2PCVPMRnOJ
n+ulnq1qBwyVRFeIXNlIMY10YyK0gt0GU28FtxhA9QX0u+/QCMvTgc2h0UoR4og2
b3JF1izKpaiN6O/Uh60J1BItMQECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQCL4lJ
7fC/JaXZeB7oLr/gjrnVIDAfBgNVHSMEGDAWgBS+sFhv1uIHO9+XxP71avnFoJv0
UjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2REJCMDUvMDc0NzQzNkMxOTU1MTFGMUExNzE0N0JDREFFNEVDOUMvdnJCWWI5
YmlCenZmbDhULTlXcjV4YUNiOUZJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdnJCWWI5YmlCenZmbDhULTlXcjV4YUNiOUZJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJCMDUvMDc0NzQzNkMxOTU1MTFGMUExNzE0N0JDREFF
NEVDOUMvQUE1Qjg3RDYzM0VEMTFGMTgxQkI5N0I1Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbMJjANBgkqhkiG9w0BAQsF
AAOCAQEAvEwBuVreojYzWqdaPjsW0LgvkAQFZQ2ULYXkF5pEH3fIXMjSqjv/4o/Y
esiRd/aDZPMhoaIUWerNZmvXCh5AG9dfGv0mU+MLDjpBofnIpI7IbX7mjYI3knva
5fqFIpdOUDNR2kEmeNnX7g3Jfv6+z2SPXHrLvZeChCnNFmgW+zDIaC+uck3PDPC+
DTtciMumI/u9p8gLDX3RHlFaDe+0oEazHbaGZkbEgzD1aAgHswn9jHR55AtgnPUa
e7QTjnxitr9zrT+N3d9G0MENM/dvoE3yHenyVTPnMFmUxVusqwq782vvFcilZfN7
YuQuBV4DpRD+88FJVURfGQhrx2AYzg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:32 2026 by rpki-client