Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/89F59F52899911F1A7AD9101CF1D38B0.roa
File: 89F59F52899911F1A7AD9101CF1D38B0.roa (raw, json)
Hash identifier: YNpVGkQy1GoFTog1cBsr5YOO00CSd9CWUy+PPCH4u+s=
Subject key identifier: 5C:B1:DF:54:E0:F9:D1:55:46:84:EC:E0:B2:7E:AE:36:82:AA:0A:67
Certificate issuer: /CN=F36F1706AF/serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Certificate serial: 04
Authority key identifier: C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/89F59F52899911F1A7AD9101CF1D38B0.roa
Signing time: Mon 27 Jul 2026 08:59:57 +0000
ROA not before: Mon 27 Jul 2026 08:59:53 +0000
ROA not after: Sat 27 Jul 2030 08:59:53 +0000
asID: 327724
IP address blocks: 102.209.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1706AF, serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Validity
Not Before: Jul 27 08:59:53 2026 GMT
Not After : Jul 27 08:59:53 2030 GMT
Subject: CN=6a671e0c-59c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:17:a9:df:5f:d5:cc:c9:aa:ce:5a:3d:5b:
db:72:0e:a4:f5:64:4c:8c:b8:b7:5a:7d:88:97:e4:
7a:38:1c:cc:ec:50:43:30:df:26:7b:e1:85:2b:c0:
6d:68:23:4c:2f:84:d5:ea:33:48:c1:d1:9c:70:ca:
f0:c2:3b:33:47:a4:f0:3e:e4:13:93:bc:1d:b3:df:
81:41:2b:16:fe:94:d6:c3:0d:d0:b6:ef:21:d1:42:
71:df:2f:bd:a4:47:d1:9c:a2:16:8b:9c:8d:1e:ab:
a7:28:bb:c0:54:39:0f:dc:18:29:7f:97:e6:04:1c:
6f:e7:cb:b5:37:2f:7f:73:fa:36:20:fe:49:b3:dc:
4f:54:21:a7:df:14:5c:af:95:08:d1:8e:58:e0:71:
a4:cf:38:ca:bd:69:b9:73:7d:3d:a4:9e:c1:3f:f0:
fd:d0:fa:b8:30:eb:01:d6:18:0d:a8:bd:0f:1b:23:
69:74:ec:70:1e:c4:8b:e9:3e:55:e6:4c:02:05:bc:
ac:39:16:6e:c3:37:38:4b:1c:fa:35:7a:9c:0b:4e:
50:83:da:5e:14:2a:fd:3c:0d:d6:35:47:54:d4:22:
2c:e8:95:67:09:b4:c3:bb:96:0c:f0:34:22:06:cf:
9c:d8:3f:04:f2:48:b7:ab:04:42:d2:64:18:f1:39:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B1:DF:54:E0:F9:D1:55:46:84:EC:E0:B2:7E:AE:36:82:AA:0A:67
X509v3 Authority Key Identifier:
keyid:C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/89F59F52899911F1A7AD9101CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.200.0/22
Signature Algorithm: sha256WithRSAEncryption
71:b0:44:ec:5f:db:0b:a8:6a:4a:0e:3f:e4:48:ed:f7:ca:fc:
62:f6:bc:34:b8:59:27:02:92:6a:92:8b:d7:e4:76:25:4d:f8:
b1:96:1c:76:82:da:e3:23:f0:bb:30:8b:04:15:f0:27:15:db:
42:69:ec:c1:91:d7:c2:c9:1c:04:26:c0:02:56:d2:b3:cd:c8:
96:3d:5c:6c:4c:cd:ad:dc:a1:fe:c7:65:48:a7:a3:4b:5b:95:
88:d6:f7:fe:3f:06:e8:d2:07:50:ba:73:60:f6:dc:8c:a5:d9:
59:8f:34:30:fc:bf:16:6e:2c:9c:a3:98:65:42:34:be:b5:04:
d1:2a:07:19:97:26:00:2a:13:b4:30:af:f7:46:94:29:2b:e1:
4c:91:12:58:11:41:f1:c4:c7:14:d4:f7:91:2c:b9:0a:0a:57:
ca:d9:d5:de:af:96:1b:7b:86:24:99:6e:2c:7c:e1:7e:14:c6:
ec:24:35:69:1c:27:af:01:d6:5a:36:09:1f:63:16:8e:b5:bb:
af:13:41:25:ae:42:0a:f1:8b:a1:f4:1e:33:a2:35:cb:ce:61:
c0:05:d9:1a:fc:bb:89:f8:4c:51:11:79:e2:81:f9:5c:34:9c:
bf:ff:3c:75:fc:73:ff:c6:c6:58:47:26:28:92:88:5a:bb:c0:
80:be:6f:8b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MTcwNkFGMTEwLwYDVQQFEyhDM0I1MDA2RTUxMTQ5QkI4Q0FDNDUxMjUzOEQ1QzU0
ODkxOTgwNTExMB4XDTI2MDcyNzA4NTk1M1oXDTMwMDcyNzA4NTk1M1owGDEWMBQG
A1UEAxMNNmE2NzFlMGMtNTljODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKJ2F6nfX9XMyarOWj1b23IOpPVkTIy4t1p9iJfkejgczOxQQzDfJnvhhSvA
bWgjTC+E1eozSMHRnHDK8MI7M0ek8D7kE5O8HbPfgUErFv6U1sMN0LbvIdFCcd8v
vaRH0ZyiFoucjR6rpyi7wFQ5D9wYKX+X5gQcb+fLtTcvf3P6NiD+SbPcT1Qhp98U
XK+VCNGOWOBxpM84yr1puXN9PaSewT/w/dD6uDDrAdYYDai9DxsjaXTscB7Ei+k+
VeZMAgW8rDkWbsM3OEsc+jV6nAtOUIPaXhQq/TwN1jVHVNQiLOiVZwm0w7uWDPA0
IgbPnNg/BPJIt6sEQtJkGPE5ayUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRcsd9U
4PnRVUaE7OCyfq42gqoKZzAfBgNVHSMEGDAWgBTDtQBuURSbuMrEUSU41cVIkZgF
ETAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjE3MDYvRDE5RkNDMjI4OTk2MTFGMTg2RkI4NUYxQ0UxRDM4QjAvdzdVQWJs
RVVtN2pLeEZFbE9OWEZTSkdZQlJFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdzdVQWJsRVVtN2pLeEZFbE9OWEZTSkdZQlJFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjE3MDYvRDE5RkNDMjI4OTk2MTFGMTg2RkI4NUYxQ0Ux
RDM4QjAvODlGNTlGNTI4OTk5MTFGMUE3QUQ5MTAxQ0YxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbRyDANBgkqhkiG9w0BAQsF
AAOCAQEAcbBE7F/bC6hqSg4/5Ejt98r8Yva8NLhZJwKSapKL1+R2JU34sZYcdoLa
4yPwuzCLBBXwJxXbQmnswZHXwskcBCbAAlbSs83Ilj1cbEzNrdyh/sdlSKejS1uV
iNb3/j8G6NIHULpzYPbcjKXZWY80MPy/Fm4snKOYZUI0vrUE0SoHGZcmACoTtDCv
90aUKSvhTJESWBFB8cTHFNT3kSy5CgpXytnV3q+WG3uGJJluLHzhfhTG7CQ1aRwn
rwHWWjYJH2MWjrW7rxNBJa5CCvGLofQeM6I1y85hwAXZGvy7ifhMURF54oH5XDSc
v/88dfxz/8bGWEcmKJKIWrvAgL5viw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:53 2026 by rpki-client