Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/F34CABAC899011F1990DBFCCCE1D38B0.roa
File: F34CABAC899011F1990DBFCCCE1D38B0.roa (raw, json)
Hash identifier: QLCFdcp0U6K+uipbYurxt9ALPdLqdppOnWWlizx/0bY=
Subject key identifier: B1:07:ED:DD:83:91:BE:8E:5F:B0:B3:58:47:DF:5E:DE:7C:B8:E7:E7
Certificate issuer: /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial: 061A
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/F34CABAC899011F1990DBFCCCE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:58:28 +0000
ROA not before: Mon 27 Jul 2026 07:58:24 +0000
ROA not after: Mon 31 May 2032 07:58:24 +0000
asID: 329058
IP address blocks: 102.215.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCD8DAF, serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Validity
Not Before: Jul 27 07:58:24 2026 GMT
Not After : May 31 07:58:24 2032 GMT
Subject: CN=6a670fa4-f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:17:cc:6b:9d:c3:f0:b4:25:7a:74:0f:42:
ae:3d:5a:8c:ac:3f:c6:4c:d8:e7:a8:21:f8:8b:ce:
2c:71:73:c7:0e:5e:8a:81:73:06:11:90:0d:2b:13:
de:5a:2e:e5:6b:68:cb:b9:2c:d5:86:91:46:5b:bd:
8d:d6:02:bc:fa:7e:aa:da:dd:be:47:2a:dc:74:4b:
6c:65:c0:74:6c:af:bd:b4:f6:18:59:e8:1a:44:3a:
9e:85:57:78:14:ca:d4:0c:82:7d:93:78:85:08:13:
ac:18:6d:ca:8d:13:ef:82:1d:bc:9f:42:d2:f6:de:
94:77:ac:24:d0:5e:53:90:6f:f9:84:64:61:65:a1:
c6:d9:62:1e:84:a0:5e:1c:cd:de:1a:0b:06:d2:0b:
c8:90:b4:76:d4:dc:7c:51:bb:9c:0a:d3:98:2a:d3:
d5:0f:9b:03:7e:93:37:b4:64:31:91:ec:c3:cc:a4:
46:48:11:52:86:a0:e9:f7:ad:06:b4:ff:e4:8d:ef:
1e:99:51:0f:7c:c9:a1:47:6d:78:4a:f9:cd:17:6e:
1e:55:0f:47:e4:49:99:bd:be:94:70:4b:ac:e8:6d:
1e:d8:d1:78:6e:0c:45:a9:cf:84:21:ad:39:3e:f8:
90:ef:c9:0d:f2:73:10:0f:cc:aa:ca:ec:1e:ae:ff:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:ED:DD:83:91:BE:8E:5F:B0:B3:58:47:DF:5E:DE:7C:B8:E7:E7
X509v3 Authority Key Identifier:
keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/F34CABAC899011F1990DBFCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:bd:63:70:e3:18:dc:63:f3:b6:09:bc:c1:70:ed:25:e8:6d:
d1:af:ca:07:14:f1:3f:fc:f7:c8:45:7b:4a:41:de:fa:c6:07:
fa:89:93:c9:b3:fb:3d:e8:7c:e4:68:38:09:0f:1d:0a:ae:4b:
67:5e:2f:0f:6c:4e:53:8d:b6:d8:14:db:17:7f:d4:c8:60:ef:
05:0b:ea:5a:44:34:10:be:06:1c:08:79:57:b8:d2:c7:0c:70:
60:84:aa:3f:80:ee:4b:42:87:16:11:77:1f:89:c1:38:a8:f8:
93:2b:22:78:9a:0c:cd:1d:17:87:df:6b:9a:a5:2c:93:76:2b:
17:ee:7a:e6:87:49:7b:89:3c:57:b2:9c:4a:e1:d2:f7:66:c3:
bf:1a:fb:c5:2e:95:04:1c:c3:17:f6:ec:ba:fd:ec:8f:b3:27:
9e:83:b2:0f:45:a3:94:1b:cf:48:54:d6:8a:e7:14:c0:39:43:
f6:13:94:d6:6a:93:a5:a3:5a:ce:e1:c0:32:ad:f8:27:96:10:
28:e0:e4:99:81:e9:b6:42:98:a3:10:cd:54:dc:5e:b7:3f:f8:
4f:81:27:52:0c:2b:c2:61:ed:2f:ac:5b:3d:23:27:6f:1c:e3:
8b:88:3e:32:ee:f4:6a:3c:c5:0f:66:97:b8:62:2d:d2:de:67:
20:14:72:d1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBhowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkNEOERBRjExMC8GA1UEBRMoRjlEQ0Y4RTQ4Njc0OUU5QTc0M0ZFNDczRUJBRDgx
NEQxQ0VDNUZBOTAeFw0yNjA3MjcwNzU4MjRaFw0zMjA1MzEwNzU4MjRaMBgxFjAU
BgNVBAMTDTZhNjcwZmE0LWYyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgLRfMa53D8LQlenQPQq49WoysP8ZM2OeoIfiLzixxc8cOXoqBcwYRkA0r
E95aLuVraMu5LNWGkUZbvY3WArz6fqra3b5HKtx0S2xlwHRsr7209hhZ6BpEOp6F
V3gUytQMgn2TeIUIE6wYbcqNE++CHbyfQtL23pR3rCTQXlOQb/mEZGFlocbZYh6E
oF4czd4aCwbSC8iQtHbU3HxRu5wK05gq09UPmwN+kze0ZDGR7MPMpEZIEVKGoOn3
rQa0/+SN7x6ZUQ98yaFHbXhK+c0Xbh5VD0fkSZm9vpRwS6zobR7Y0XhuDEWpz4Qh
rTk++JDvyQ3ycxAPzKrK7B6u/+xhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsQft
3YORvo5fsLNYR99e3ny45+cwHwYDVR0jBBgwFoAU+dz45IZ0npp0P+Rz662BTRzs
X6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDRDhELzJFQjlGN0M0RTBFMTExRUM5MzlERURENkYxMjIyNDY4Ly1kejQ1
SVowbnBwMFAtUno2NjJCVFJ6c1g2ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1kejQ1SVowbnBwMFAtUno2NjJCVFJ6c1g2ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZDRDhELzJFQjlGN0M0RTBFMTExRUM5MzlERURENkYx
MjIyNDY4L0YzNENBQkFDODk5MDExRjE5OTBEQkZDQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1/QwDQYJKoZIhvcNAQEL
BQADggEBAKe9Y3DjGNxj87YJvMFw7SXobdGvygcU8T/898hFe0pB3vrGB/qJk8mz
+z3ofORoOAkPHQquS2deLw9sTlONttgU2xd/1Mhg7wUL6lpENBC+BhwIeVe40scM
cGCEqj+A7ktChxYRdx+JwTio+JMrIniaDM0dF4ffa5qlLJN2KxfueuaHSXuJPFey
nErh0vdmw78a+8UulQQcwxf27Lr97I+zJ56Dsg9Fo5Qbz0hU1ornFMA5Q/YTlNZq
k6WjWs7hwDKt+CeWECjg5JmB6bZCmKMQzVTcXrc/+E+BJ1IMK8Jh7S+sWz0jJ28c
44uIPjLu9Go8xQ9ml7hiLdLeZyAUctE=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:10 2026 by rpki-client