Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/9A6AFA5A84CE11F18F4BCAC7CE1D38B0.roa
File: 9A6AFA5A84CE11F18F4BCAC7CE1D38B0.roa (raw, json)
Hash identifier: HbydX0TZgtY86+ewYxUC2PcQH5zRR4aLrPke2f3YWS4=
Subject key identifier: 8C:21:EB:01:A5:99:AD:BD:68:F6:1E:D2:6A:84:AB:60:22:BF:10:E0
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 080D
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/9A6AFA5A84CE11F18F4BCAC7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:37:12 +0000
ROA not before: Tue 21 Jul 2026 06:37:08 +0000
ROA not after: Mon 21 Jul 2036 06:37:08 +0000
asID: 37053
IP address blocks: 102.212.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Jul 21 06:37:08 2026 GMT
Not After : Jul 21 06:37:08 2036 GMT
Subject: CN=6a5f1398-24d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:14:a4:19:7f:91:d8:a7:d1:7a:b4:9d:0d:
ed:3c:90:ba:f2:ef:1a:2a:a1:ff:4b:3b:d2:b1:68:
e6:32:4f:66:c2:93:40:e2:29:e6:5f:a1:b8:7f:dc:
70:46:09:7b:f1:8e:73:2f:6b:c0:b7:d1:8f:6b:e9:
a2:77:71:a2:90:9e:84:44:ed:7a:95:bc:a8:ec:84:
f0:b2:78:87:71:f7:71:9e:05:9b:2d:b1:ac:c0:d5:
93:ce:3e:57:b1:0f:00:ee:c0:cd:ca:dd:29:d2:22:
65:1b:28:3f:ab:ec:09:00:55:4f:94:95:5f:d2:b2:
0f:0c:4a:93:bf:f8:f1:2e:fe:ef:d9:4f:f1:b0:41:
50:d2:08:b7:86:99:b1:8d:0d:0e:e5:14:bf:70:5c:
ee:00:a7:3d:ce:53:9c:5d:22:7c:2b:e0:f5:ff:26:
db:4f:7e:c0:c8:19:1f:39:85:46:06:35:c4:f9:f1:
b5:cf:b2:c2:9c:ab:2a:f5:ab:fb:a5:17:02:69:09:
0a:a2:87:2e:ac:00:32:7c:25:1c:46:ec:28:23:15:
28:31:56:e4:79:0b:43:2f:fa:f5:24:72:93:92:12:
f8:c0:81:62:84:58:6d:fb:15:31:65:39:d2:f0:e6:
3e:5e:b8:98:1d:cb:64:75:ac:4c:e3:be:6f:28:ed:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:EB:01:A5:99:AD:BD:68:F6:1E:D2:6A:84:AB:60:22:BF:10:E0
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/9A6AFA5A84CE11F18F4BCAC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.192.0/22
Signature Algorithm: sha256WithRSAEncryption
72:67:02:86:1b:be:fd:a8:62:1c:90:8e:34:af:9b:23:6a:6d:
19:a0:3d:36:f3:92:ac:7f:fb:cf:e1:9a:de:73:7d:33:fd:e2:
05:93:7b:7d:20:56:80:f7:c8:72:cf:e8:2b:bf:0d:3d:1d:5d:
de:12:b2:a7:81:f7:54:a4:97:84:ad:92:99:79:a2:47:de:b7:
c6:51:04:fb:e7:88:36:dd:08:66:d0:d6:5e:1f:a2:85:0b:df:
c0:ae:79:01:64:e8:81:c5:15:8e:49:6d:3a:0b:d2:e7:2a:16:
65:d8:8b:e3:af:c6:3f:5c:71:8b:c2:a8:46:b2:92:e0:a5:c5:
7d:c8:91:06:6b:1a:5c:50:24:7b:6f:8a:7b:f3:b5:4a:b2:b7:
56:b3:b5:09:5d:89:76:2e:9b:d0:b5:4b:90:bf:4e:e8:38:12:
e3:0f:a7:23:46:c9:a2:86:23:06:d1:3b:ec:2b:b8:02:63:e5:
45:c1:45:6a:93:2e:d2:62:81:a4:6c:72:db:e2:99:87:0d:49:
4c:22:2b:78:b8:58:c7:39:c9:50:be:34:d3:d4:3a:68:73:4a:
89:99:a5:d0:3d:62:17:1e:06:03:90:34:ed:36:82:af:0b:9c:
c4:20:a6:40:c4:22:5d:a9:60:62:7a:fb:9d:b4:87:cc:39:f9:
df:f4:11:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB
MjE1RjI0NzU0MTAeFw0yNjA3MjEwNjM3MDhaFw0zNjA3MjEwNjM3MDhaMBgxFjAU
BgNVBAMTDTZhNWYxMzk4LTI0ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfixSkGX+R2KfRerSdDe08kLry7xoqof9LO9KxaOYyT2bCk0DiKeZfobh/
3HBGCXvxjnMva8C30Y9r6aJ3caKQnoRE7XqVvKjshPCyeIdx93GeBZstsazA1ZPO
PlexDwDuwM3K3SnSImUbKD+r7AkAVU+UlV/Ssg8MSpO/+PEu/u/ZT/GwQVDSCLeG
mbGNDQ7lFL9wXO4Apz3OU5xdInwr4PX/JttPfsDIGR85hUYGNcT58bXPssKcqyr1
q/ulFwJpCQqihy6sADJ8JRxG7CgjFSgxVuR5C0Mv+vUkcpOSEvjAgWKEWG37FTFl
OdLw5j5euJgdy2R1rEzjvm8o7eQjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjCHr
AaWZrb1o9h7SaoSrYCK/EOAwHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k
dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn
Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4
QUVBMjI4LzlBNkFGQTVBODRDRTExRjE4RjRCQ0FDN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1MAwDQYJKoZIhvcNAQEL
BQADggEBAHJnAoYbvv2oYhyQjjSvmyNqbRmgPTbzkqx/+8/hmt5zfTP94gWTe30g
VoD3yHLP6Cu/DT0dXd4SsqeB91Skl4Stkpl5okfet8ZRBPvniDbdCGbQ1l4fooUL
38CueQFk6IHFFY5JbToL0ucqFmXYi+Ovxj9ccYvCqEaykuClxX3IkQZrGlxQJHtv
invztUqyt1aztQldiXYum9C1S5C/Tug4EuMPpyNGyaKGIwbRO+wruAJj5UXBRWqT
LtJigaRsctvimYcNSUwiK3i4WMc5yVC+NNPUOmhzSomZpdA9YhceBgOQNO02gq8L
nMQgpkDEIl2pYGJ6+520h8w5+d/0EZw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:32 2026 by rpki-client