Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/E2F626462E6111F1A1498780DAE4EC9C.roa
File: E2F626462E6111F1A1498780DAE4EC9C.roa (raw, json)
Hash identifier: MmGMSbM7fxM4JZU+cJo8RgpUYAK1JK9mDHEDIULx+f4=
Subject key identifier: 56:F6:7F:F5:4C:0B:85:96:B1:A8:81:4F:5B:1C:FE:19:D6:00:3E:E5
Certificate issuer: /CN=F36F1295AF/serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Certificate serial: 041A
Authority key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/E2F626462E6111F1A1498780DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 07:02:18 +0000
ROA not before: Thu 02 Apr 2026 07:02:13 +0000
ROA not after: Mon 02 Apr 2035 07:02:13 +0000
asID: 329248
IP address blocks: 102.203.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1295AF, serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Validity
Not Before: Apr 2 07:02:13 2026 GMT
Not After : Apr 2 07:02:13 2035 GMT
Subject: CN=69ce147a-f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:0c:64:d6:ca:c7:2a:7e:79:69:4a:b5:3e:
da:d5:62:57:df:85:2a:76:85:96:d8:29:ed:f3:7f:
87:e7:ee:cb:92:74:1a:5d:ed:dd:44:c5:b3:91:d4:
97:fb:b6:70:ba:75:c1:7a:fb:ec:63:82:3a:1b:20:
c3:84:d5:51:33:d6:73:a5:8d:a0:0b:06:a4:1f:ce:
a1:9e:79:ba:62:a9:54:d4:a1:88:27:9f:46:08:ef:
f3:b1:ee:05:99:21:86:5a:9c:28:84:47:09:59:f4:
89:a5:9c:ed:a2:4b:7f:fd:85:d3:8d:86:0f:08:a9:
1b:31:3c:69:13:1e:9e:61:ff:c4:fd:75:d0:74:8c:
07:ad:89:92:a9:8d:40:25:0d:6f:ed:f6:59:15:b1:
5a:b2:ce:04:2a:e5:1c:5c:30:e3:63:a8:6c:fa:da:
11:e5:c8:0c:a0:d5:77:a2:24:0c:11:40:56:27:8b:
1e:4a:70:ce:64:eb:eb:f0:97:7f:20:33:03:0f:95:
3f:e5:16:0f:df:6c:87:1f:d0:99:b8:63:ff:97:1f:
e1:69:80:11:e9:8c:22:11:39:ec:ca:40:2b:2c:fe:
51:57:7f:d1:fb:ca:24:ac:9c:e6:96:a7:7a:a6:84:
f8:0b:be:a9:3d:97:41:27:73:b9:7d:86:24:4d:94:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F6:7F:F5:4C:0B:85:96:B1:A8:81:4F:5B:1C:FE:19:D6:00:3E:E5
X509v3 Authority Key Identifier:
keyid:BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/E2F626462E6111F1A1498780DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:7d:58:1e:d1:35:6d:0f:df:3c:14:ca:cf:f8:be:21:54:ef:
4e:9c:c3:e9:ce:7c:e8:8d:3c:cc:5d:9f:85:69:9a:ab:89:27:
f3:66:29:f7:5e:05:24:0a:23:f8:d6:c5:79:ea:54:6e:9a:1b:
e5:29:7b:2b:e5:6e:95:ed:24:67:74:78:c3:40:2a:37:6d:a3:
b5:48:4e:90:4f:ba:92:fd:94:c0:19:d3:82:08:a1:32:71:8f:
bb:7f:74:6a:67:93:70:62:fe:e4:87:b1:a9:3b:ae:e0:8d:53:
5e:67:ad:4b:27:60:a2:e5:54:db:54:c2:9d:61:cc:84:54:bc:
77:fa:4d:f2:bf:db:13:5f:14:20:8b:76:23:fa:fe:4d:65:75:
b1:84:8c:95:63:81:55:9c:1f:29:ee:4d:0d:dc:ff:2d:ee:05:
ae:fc:ff:51:4a:52:c2:e3:d3:5c:5e:42:50:bb:43:3f:14:fd:
66:ca:b3:47:cf:44:68:3e:79:eb:06:ef:65:94:69:0b:b5:fd:
c4:3b:39:14:5f:7b:29:6f:bc:05:07:fa:d3:49:25:a3:ea:12:
2c:99:26:b6:14:2a:64:49:fe:b3:f6:37:43:ef:81:a4:b8:af:
f1:e5:7e:77:ed:33:f5:6a:78:0f:16:cc:5c:16:90:2a:6b:c5:
06:f1:1d:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBBowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjEyOTVBRjExMC8GA1UEBRMoQkRCMUFGMUY4QjRFQjZGM0E0MjM3MEY5MUU3MUM1
MzJDN0Y0NjAwNTAeFw0yNjA0MDIwNzAyMTNaFw0zNTA0MDIwNzAyMTNaMBgxFjAU
BgNVBAMTDTY5Y2UxNDdhLWY4MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoAQxk1srHKn55aUq1PtrVYlffhSp2hZbYKe3zf4fn7suSdBpd7d1ExbOR
1Jf7tnC6dcF6++xjgjobIMOE1VEz1nOljaALBqQfzqGeebpiqVTUoYgnn0YI7/Ox
7gWZIYZanCiERwlZ9ImlnO2iS3/9hdONhg8IqRsxPGkTHp5h/8T9ddB0jAetiZKp
jUAlDW/t9lkVsVqyzgQq5RxcMONjqGz62hHlyAyg1XeiJAwRQFYnix5KcM5k6+vw
l38gMwMPlT/lFg/fbIcf0Jm4Y/+XH+FpgBHpjCIROezKQCss/lFXf9H7yiSsnOaW
p3qmhPgLvqk9l0Enc7l9hiRNlLp5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVvZ/
9UwLhZaxqIFPWxz+GdYAPuUwHwYDVR0jBBgwFoAUvbGvH4tOtvOkI3D5HnHFMsf0
YAUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxMjk1LzJGMEVCQzhDMEY2NjExRUU4MTRFMjIzNjRBRDlFNkZDL3ZiR3ZI
NHRPdHZPa0kzRDVIbkhGTXNmMFlBVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZiR3ZINHRPdHZPa0kzRDVIbkhGTXNmMFlBVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYxMjk1LzJGMEVCQzhDMEY2NjExRUU4MTRFMjIzNjRB
RDlFNkZDL0UyRjYyNjQ2MkU2MTExRjFBMTQ5ODc4MERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmy+QwDQYJKoZIhvcNAQEL
BQADggEBAE99WB7RNW0P3zwUys/4viFU706cw+nOfOiNPMxdn4VpmquJJ/NmKfde
BSQKI/jWxXnqVG6aG+UpeyvlbpXtJGd0eMNAKjdto7VITpBPupL9lMAZ04IIoTJx
j7t/dGpnk3Bi/uSHsak7ruCNU15nrUsnYKLlVNtUwp1hzIRUvHf6TfK/2xNfFCCL
diP6/k1ldbGEjJVjgVWcHynuTQ3c/y3uBa78/1FKUsLj01xeQlC7Qz8U/WbKs0fP
RGg+eesG72WUaQu1/cQ7ORRfeylvvAUH+tNJJaPqEiyZJrYUKmRJ/rP2N0PvgaS4
r/HlfnftM/VqeA8WzFwWkCprxQbxHaU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:52 2026 by rpki-client