Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa
File: F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa (raw, json)
Hash identifier: qKuUkeEtmPFzxueo+0k+zPaf6dnnRZqCKDNqLOTGOTc=
Subject key identifier: F7:49:57:D0:B7:AF:AE:3D:63:D1:D6:AA:79:3D:97:70:AD:58:DB:61
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 052B
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa
Signing time: Tue 28 Jul 2026 12:07:45 +0000
ROA not before: Tue 28 Jul 2026 12:07:41 +0000
ROA not after: Tue 14 Nov 2028 12:07:41 +0000
asID: 37148
IP address blocks: 102.213.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Jul 28 12:07:41 2026 GMT
Not After : Nov 14 12:07:41 2028 GMT
Subject: CN=6a689b90-841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:8e:13:0a:60:e8:1c:6d:1d:06:be:ad:34:
68:69:86:87:e0:2a:95:71:c4:c1:46:6f:ff:77:dd:
a0:0a:54:75:5e:81:85:cf:3b:0e:05:ff:62:26:2b:
c8:c6:a5:41:4d:c6:a6:2f:56:d6:cf:25:ab:68:5a:
b4:bf:ec:49:83:6f:69:a5:e5:a4:87:9f:7f:54:f5:
98:2a:d7:34:46:80:68:01:4d:bd:6b:3e:c8:7d:48:
9d:8c:71:bd:c1:23:1a:49:09:39:55:2f:e5:56:17:
b0:6d:79:15:c8:e0:41:99:81:c7:71:54:8c:68:00:
d6:3e:15:91:29:53:61:9e:c5:ab:5d:47:9e:a1:64:
88:57:53:4e:4d:0d:6f:bb:49:08:f7:bd:c2:a0:a5:
7d:b6:69:e9:9d:29:0a:ba:11:6b:a3:d4:33:57:10:
4f:01:d1:9e:4a:39:f2:b5:1f:07:f5:98:39:1b:1e:
2b:0a:16:15:16:d4:5e:9d:5d:b4:fa:e1:ed:9c:a0:
90:9d:d9:9b:17:53:14:00:37:b2:99:ba:45:75:5a:
9e:ed:13:0b:ec:c4:79:3e:0e:f3:8b:41:55:45:58:
3d:c0:33:ed:9d:3f:8a:65:53:01:0f:07:de:67:bc:
82:7e:0e:60:0a:0b:f9:34:a6:e6:9b:43:5c:d0:04:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:57:D0:B7:AF:AE:3D:63:D1:D6:AA:79:3D:97:70:AD:58:DB:61
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:2e:70:96:3e:4b:97:84:c0:22:12:a5:f1:32:d1:86:f6:6d:
0e:7f:27:5a:cc:89:5f:43:83:24:29:19:3c:70:04:21:e8:3b:
ab:c6:7c:50:1f:1e:9b:a8:ff:fd:b8:4b:da:c5:9c:12:4c:bf:
ba:51:72:4c:db:7d:03:e2:4d:af:42:1d:2f:bc:f1:f1:8d:f8:
eb:a3:90:cf:b6:53:5d:94:ef:63:17:9f:4e:28:f5:cb:d8:cc:
c0:e6:bd:be:69:e9:36:26:f6:49:ae:61:a7:44:d1:17:10:02:
61:42:54:7a:ce:f1:50:73:5f:65:55:94:3c:38:99:eb:e0:bd:
e0:97:bd:08:41:bd:f9:00:62:01:27:74:44:f0:ee:b9:b2:51:
89:ff:ec:3c:e1:4e:5c:25:a8:67:5d:13:0b:79:18:ee:82:9f:
3a:c3:f8:08:e8:a7:7b:0d:51:29:3b:89:83:60:8b:72:3e:f8:
da:4e:8e:dc:7d:67:9e:4d:51:3b:1f:d0:27:33:81:d6:b3:b9:
bd:15:32:1e:26:d6:43:61:5b:77:0f:36:3f:38:9c:32:b3:a1:
7b:6a:fc:d4:5d:e8:6a:ef:34:82:0e:0b:8e:af:92:11:ab:14:
b6:ff:45:14:38:eb:48:11:9f:65:9d:07:af:17:70:f1:86:78:
96:95:92:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBSswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBRjExMC8GA1UEBRMoODMzRDRBMjRFMzlDREM5NDJDQkM1NzgyNTQxQjgx
RDRERDk2QUVBODAeFw0yNjA3MjgxMjA3NDFaFw0yODExMTQxMjA3NDFaMBgxFjAU
BgNVBAMTDTZhNjg5YjkwLTg0MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDffI4TCmDoHG0dBr6tNGhphofgKpVxxMFGb/933aAKVHVegYXPOw4F/2Im
K8jGpUFNxqYvVtbPJatoWrS/7EmDb2ml5aSHn39U9Zgq1zRGgGgBTb1rPsh9SJ2M
cb3BIxpJCTlVL+VWF7BteRXI4EGZgcdxVIxoANY+FZEpU2GexatdR56hZIhXU05N
DW+7SQj3vcKgpX22aemdKQq6EWuj1DNXEE8B0Z5KOfK1Hwf1mDkbHisKFhUW1F6d
XbT64e2coJCd2ZsXUxQAN7KZukV1Wp7tEwvsxHk+DvOLQVVFWD3AM+2dP4plUwEP
B95nvIJ+DmAKC/k0puabQ1zQBGmfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU90lX
0Levrj1j0daqeT2XcK1Y22EwHwYDVR0jBBgwFoAUgz1KJOOc3JQsvFeCVBuB1N2W
rqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzUzQUUxRURDQTYwOTExRUQ5NDIyQzFCOUYxMjIyNDY4L2d6MUtK
T09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d6MUtKT09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVDQUEyLzUzQUUxRURDQTYwOTExRUQ5NDIyQzFCOUYx
MjIyNDY4L0YwQTVCQURDOEE3QzExRjE5Qjc0QTdFQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1VQwDQYJKoZIhvcNAQEL
BQADggEBAC0ucJY+S5eEwCISpfEy0Yb2bQ5/J1rMiV9DgyQpGTxwBCHoO6vGfFAf
Hpuo//24S9rFnBJMv7pRckzbfQPiTa9CHS+88fGN+OujkM+2U12U72MXn04o9cvY
zMDmvb5p6TYm9kmuYadE0RcQAmFCVHrO8VBzX2VVlDw4mevgveCXvQhBvfkAYgEn
dETw7rmyUYn/7DzhTlwlqGddEwt5GO6CnzrD+Ajop3sNUSk7iYNgi3I++NpOjtx9
Z55NUTsf0Cczgdazub0VMh4m1kNhW3cPNj84nDKzoXtq/NRd6GrvNIIOC46vkhGr
FLb/RRQ460gRn2WdB68XcPGGeJaVki0=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:58:58 2026 by rpki-client