Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/A1D222A8755811F19E5F6DAFCE1D38B0.roa
File: A1D222A8755811F19E5F6DAFCE1D38B0.roa (raw, json)
Hash identifier: 8lf/svP1VF+sA26loOVd0lxvdI5wOxWStMGhERk0FVI=
Subject key identifier: 51:E9:8D:A9:42:5D:91:5F:10:CB:DB:5C:F3:83:F3:3F:59:D9:F1:26
Certificate issuer: /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial: 0138
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/A1D222A8755811F19E5F6DAFCE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:24:56 +0000
ROA not before: Wed 01 Jul 2026 14:24:51 +0000
ROA not after: Thu 01 Jul 2027 14:24:51 +0000
asID: 329530
IP address blocks: 102.202.72.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Validity
Not Before: Jul 1 14:24:51 2026 GMT
Not After : Jul 1 14:24:51 2027 GMT
Subject: CN=6a452338-acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:27:86:71:dc:e9:41:9f:37:c7:1d:3e:5d:
6a:9e:7d:fe:4b:28:c1:d6:d4:91:4b:89:a9:bb:49:
cb:fc:4d:e3:ed:71:85:73:65:c8:98:6b:1d:91:8c:
af:4f:47:8a:d6:24:3f:bd:c4:e7:c4:08:5c:67:72:
5b:a9:df:9d:ce:af:74:a0:7b:0a:b9:d1:80:8e:db:
0a:82:a9:f9:ae:11:b3:d1:e6:38:59:5e:11:23:98:
64:2c:69:09:b1:e6:40:b8:a2:d2:ae:02:e9:b0:67:
c9:82:ce:c0:15:1d:c3:57:38:a5:af:a3:42:72:fe:
58:0a:a8:76:5f:16:8e:04:bd:9d:d0:97:6a:65:58:
8d:7f:25:11:08:9c:3b:22:27:77:a3:6b:48:cc:c5:
fb:1f:54:ef:b3:1d:5e:c5:c9:6f:0f:68:7e:66:71:
ad:98:67:a9:71:20:16:95:aa:0a:62:e2:fc:80:9e:
fb:9a:f4:1b:80:19:88:15:6c:2d:8f:e1:c6:14:aa:
bf:1c:7d:57:e9:b7:65:c2:16:4f:7e:bf:a3:1f:5f:
0a:9c:b2:b5:18:c8:7e:03:19:ce:b3:04:a5:6a:e8:
1d:6b:fa:8a:c0:25:af:b3:f8:11:aa:d2:b4:fb:66:
1e:bf:c5:42:6a:f4:06:fa:82:9d:10:d6:7c:8b:27:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:8D:A9:42:5D:91:5F:10:CB:DB:5C:F3:83:F3:3F:59:D9:F1:26
X509v3 Authority Key Identifier:
keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/A1D222A8755811F19E5F6DAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.72.0/22
Signature Algorithm: sha256WithRSAEncryption
97:be:87:75:02:72:0a:75:52:71:c9:4b:53:f0:80:33:c8:bb:
37:cd:d1:d2:6f:a6:6d:e9:02:ec:ce:71:8a:92:42:39:3a:55:
49:48:a7:4d:84:c7:4a:43:7a:be:8a:cf:72:82:b1:3c:7d:f6:
e9:8e:bf:34:8d:98:b7:07:31:df:89:41:80:a1:52:47:14:fa:
af:64:7e:c4:35:c7:97:67:40:3c:c5:1e:42:21:98:5d:24:9d:
da:4d:14:35:d5:5d:08:c9:0c:8e:c2:56:69:71:7b:fc:c3:aa:
51:8f:92:6e:ba:5e:dc:93:e8:e8:77:5d:92:bd:de:51:13:dd:
bc:97:db:86:b2:86:c8:d4:ea:57:e2:9d:14:13:92:b3:a4:2a:
2b:23:d7:1a:b2:57:4a:c0:cb:4c:61:64:f8:c2:4b:6c:8c:f4:
7c:32:f0:30:c5:37:7b:db:43:a5:f9:61:95:1e:fd:95:65:a7:
62:2a:f1:12:e1:a7:a4:46:33:82:1b:92:0c:8a:fa:8d:51:3e:
b1:69:15:18:36:88:21:74:25:df:dc:73:27:07:a5:bd:46:0e:
18:f1:af:26:39:e3:f7:52:f0:bd:0b:4b:ec:14:7c:81:c5:07:
b5:2b:4c:3f:86:ae:5d:7e:b5:f2:89:92:b1:3e:a2:d7:d1:e2:
eb:0b:bf:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICATgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjgwQzlBRjExMC8GA1UEBRMoNTczOUU5RDI5MzJBRDg1QkNDMjI0MDgxM0JGM0FC
Mzk0Mjg0MzAyMDAeFw0yNjA3MDExNDI0NTFaFw0yNzA3MDExNDI0NTFaMBgxFjAU
BgNVBAMTDTZhNDUyMzM4LWFjZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCttieGcdzpQZ83xx0+XWqeff5LKMHW1JFLiam7Scv8TePtcYVzZciYax2R
jK9PR4rWJD+9xOfECFxnclup353Or3Sgewq50YCO2wqCqfmuEbPR5jhZXhEjmGQs
aQmx5kC4otKuAumwZ8mCzsAVHcNXOKWvo0Jy/lgKqHZfFo4EvZ3Ql2plWI1/JREI
nDsiJ3eja0jMxfsfVO+zHV7FyW8PaH5mca2YZ6lxIBaVqgpi4vyAnvua9BuAGYgV
bC2P4cYUqr8cfVfpt2XCFk9+v6MfXwqcsrUYyH4DGc6zBKVq6B1r+orAJa+z+BGq
0rT7Zh6/xUJq9Ab6gp0Q1nyLJ7nBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUemN
qUJdkV8Qy9tc84PzP1nZ8SYwHwYDVR0jBBgwFoAUVznp0pMq2FvMIkCBO/OrOUKE
MCAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4MEM5Lzg5MjkxNkQwODk1OTExRjBCMEY2NDBDMURBRTRFQzlDL1Z6bnAw
cE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Z6bnAwcE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI4MEM5Lzg5MjkxNkQwODk1OTExRjBCMEY2NDBDMURB
RTRFQzlDL0ExRDIyMkE4NzU1ODExRjE5RTVGNkRBRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmykgwDQYJKoZIhvcNAQEL
BQADggEBAJe+h3UCcgp1UnHJS1PwgDPIuzfN0dJvpm3pAuzOcYqSQjk6VUlIp02E
x0pDer6Kz3KCsTx99umOvzSNmLcHMd+JQYChUkcU+q9kfsQ1x5dnQDzFHkIhmF0k
ndpNFDXVXQjJDI7CVmlxe/zDqlGPkm66XtyT6Oh3XZK93lET3byX24ayhsjU6lfi
nRQTkrOkKisj1xqyV0rAy0xhZPjCS2yM9Hwy8DDFN3vbQ6X5YZUe/ZVlp2Iq8RLh
p6RGM4IbkgyK+o1RPrFpFRg2iCF0Jd/ccycHpb1GDhjxryY54/dS8L0LS+wUfIHF
B7UrTD+Grl1+tfKJkrE+otfR4usLv28=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:16 2026 by rpki-client