Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/42D1AB66708F11F19031F516CF1D38B0.roa
File: 42D1AB66708F11F19031F516CF1D38B0.roa (raw, json)
Hash identifier: Zb1p98m0ViAkNrzIFyuvBX8Z2Ph7xSavwuUeOgVqSLg=
Subject key identifier: 7A:F5:C3:8B:A3:99:B2:0E:59:75:81:2C:B6:83:3F:8A:5D:E2:A3:B1
Certificate issuer: /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial: 0549
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/42D1AB66708F11F19031F516CF1D38B0.roa
Signing time: Thu 25 Jun 2026 12:13:23 +0000
ROA not before: Thu 25 Jun 2026 12:13:16 +0000
ROA not after: Mon 30 Jun 2036 12:13:16 +0000
asID: 37204
IP address blocks: 102.213.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Validity
Not Before: Jun 25 12:13:16 2026 GMT
Not After : Jun 30 12:13:16 2036 GMT
Subject: CN=6a3d1b63-3faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:d8:82:3a:77:b0:6b:6a:58:38:c8:f8:66:
f9:0e:17:f5:19:79:d6:34:7c:c7:57:a9:f6:d9:14:
f6:b9:9c:6e:db:46:fb:65:a6:6e:98:d0:96:24:03:
01:f7:03:a8:cc:79:18:20:80:e1:bf:f5:01:49:9f:
06:26:5b:03:d6:5e:41:f7:f6:71:5d:2b:6a:a0:66:
a5:2e:d2:98:e4:96:30:68:9a:2a:71:63:0a:c5:14:
51:ad:ca:75:42:c7:d5:2b:73:a8:58:b8:93:66:26:
10:40:a9:5d:f4:5a:5d:23:37:6a:63:a8:16:5f:0f:
a7:35:3a:56:c1:9e:0d:4d:be:cc:32:7d:f2:9b:3a:
93:b9:f8:e6:01:15:c7:95:d3:ab:fd:fd:2d:5a:05:
1a:b7:84:cc:75:6c:79:4f:f7:97:e8:12:36:f3:57:
71:5b:66:74:aa:88:e1:0b:43:80:5a:1b:0e:56:f3:
83:3e:59:a5:66:3e:3f:3f:2d:f1:3f:12:6e:03:fa:
ea:ba:c8:a9:d5:1c:2b:53:56:c2:b2:29:85:79:de:
1f:51:4e:1e:a5:71:16:f7:5c:17:c5:0c:f7:1b:ca:
84:cd:d0:f5:5e:f4:44:5b:ed:fa:02:ec:57:bc:d4:
67:8e:21:25:75:92:1a:e1:f3:ad:ac:0f:c7:92:3d:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:C3:8B:A3:99:B2:0E:59:75:81:2C:B6:83:3F:8A:5D:E2:A3:B1
X509v3 Authority Key Identifier:
keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/42D1AB66708F11F19031F516CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:e3:7b:fd:99:36:04:04:e0:f0:41:15:ed:f7:f2:81:86:a1:
4f:ad:f4:a6:c8:5a:e9:f9:f9:dc:16:3a:e0:ad:2b:47:9d:36:
5f:69:5d:84:2d:eb:35:26:99:b2:b9:e8:f6:a1:ce:c2:e9:45:
dd:b9:09:f5:29:08:5f:77:57:30:72:ab:56:0b:21:91:00:2c:
4b:db:9f:eb:d1:b2:72:eb:5b:66:aa:7b:37:fd:4e:39:ac:03:
89:a2:b3:0e:ab:3e:6a:bf:29:64:96:a8:43:e5:77:0f:0f:e2:
e4:3f:56:bc:dc:5e:59:6a:cb:c8:32:70:01:13:eb:06:98:26:
3e:9a:93:e7:ee:56:43:0e:a4:b1:3c:65:92:db:73:79:89:1a:
34:16:90:2a:d7:b5:b8:3f:6e:e1:dc:d6:30:fa:6e:46:c1:5f:
9c:e1:da:04:57:91:c4:71:03:b1:81:e3:d7:11:82:0a:f6:c8:
34:9f:1d:85:d5:3d:26:12:61:c5:56:cd:b2:f2:83:c9:73:a0:
89:4d:9d:d1:10:ff:de:a2:fb:de:60:ce:f6:68:17:d6:c3:30:
5e:6b:47:6c:eb:f5:0d:61:49:eb:7c:98:78:da:c6:85:4d:05:
ec:f7:bd:f1:e6:67:20:a7:7d:8a:3a:74:f8:52:41:0d:2a:f1:
be:97:e5:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA2QjhBRjExMC8GA1UEBRMoODA3MzgyMzYyNEFFQzFGNkFDMUFCMDY5RDk3OEU2
NUQ5RjcyMDU2QjAeFw0yNjA2MjUxMjEzMTZaFw0zNjA2MzAxMjEzMTZaMBgxFjAU
BgNVBAMTDTZhM2QxYjYzLTNmYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrV9iCOnewa2pYOMj4ZvkOF/UZedY0fMdXqfbZFPa5nG7bRvtlpm6Y0JYk
AwH3A6jMeRgggOG/9QFJnwYmWwPWXkH39nFdK2qgZqUu0pjkljBomipxYwrFFFGt
ynVCx9Urc6hYuJNmJhBAqV30Wl0jN2pjqBZfD6c1OlbBng1NvswyffKbOpO5+OYB
FceV06v9/S1aBRq3hMx1bHlP95foEjbzV3FbZnSqiOELQ4BaGw5W84M+WaVmPj8/
LfE/Em4D+uq6yKnVHCtTVsKyKYV53h9RTh6lcRb3XBfFDPcbyoTN0PVe9ERb7foC
7Fe81GeOISV1khrh862sD8eSPUNbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUevXD
i6OZsg5ZdYEstoM/il3io7EwHwYDVR0jBBgwFoAUgHOCNiSuwfasGrBp2XjmXZ9y
BWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYxMjIyNDY4L2dIT0NO
aVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dIT0NOaVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYx
MjIyNDY4LzQyRDFBQjY2NzA4RjExRjE5MDMxRjUxNkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1SgwDQYJKoZIhvcNAQEL
BQADggEBAHzje/2ZNgQE4PBBFe338oGGoU+t9KbIWun5+dwWOuCtK0edNl9pXYQt
6zUmmbK56PahzsLpRd25CfUpCF93VzByq1YLIZEALEvbn+vRsnLrW2aqezf9Tjms
A4misw6rPmq/KWSWqEPldw8P4uQ/VrzcXllqy8gycAET6waYJj6ak+fuVkMOpLE8
ZZLbc3mJGjQWkCrXtbg/buHc1jD6bkbBX5zh2gRXkcRxA7GB49cRggr2yDSfHYXV
PSYSYcVWzbLyg8lzoIlNndEQ/96i+95gzvZoF9bDMF5rR2zr9Q1hSet8mHjaxoVN
Bez3vfHmZyCnfYo6dPhSQQ0q8b6X5XQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:51 2026 by rpki-client