Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/062ACA4C276711F19A5B6589DAE4EC9C.roa
File: 062ACA4C276711F19A5B6589DAE4EC9C.roa (raw, json)
Hash identifier: 5P1G99+XCokiFg1thL2VFdUqsgMy1RdNQcsG4XQ7TBk=
Subject key identifier: 86:D6:CD:47:F3:EE:7A:70:36:D5:B2:0F:58:26:70:70:6B:13:22:EE
Certificate issuer: /CN=F36A1387AF/serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Certificate serial: 0294
Authority key identifier: A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/062ACA4C276711F19A5B6589DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 09:51:27 +0000
ROA not before: Tue 24 Mar 2026 09:51:22 +0000
ROA not after: Thu 01 Mar 2040 09:51:22 +0000
asID: 329437
IP address blocks: 102.204.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1387AF, serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Validity
Not Before: Mar 24 09:51:22 2026 GMT
Not After : Mar 1 09:51:22 2040 GMT
Subject: CN=69c25e9f-6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:3f:c3:b0:27:1e:41:47:e8:75:c3:f0:a5:
72:70:3a:47:33:cb:c5:50:fd:b9:5e:00:67:6b:f6:
0d:cd:56:fa:55:5a:0b:e8:03:91:24:09:a7:a0:ed:
a0:d1:12:3a:ff:0c:e0:bf:6b:5e:2d:47:87:52:4e:
e4:a7:4d:84:2e:a4:b0:86:3e:23:81:1c:a9:e3:0c:
2d:88:e0:a9:c2:9c:41:aa:0e:5a:1c:3f:29:3a:f8:
c2:31:b3:cc:2c:4a:4c:d6:56:8b:cc:ca:ca:a4:4e:
7d:e9:f1:4b:f2:7f:a8:34:a6:b1:27:b5:38:2c:91:
04:2e:aa:18:7e:17:30:0f:52:2b:d7:12:6d:36:14:
62:da:b1:d0:08:7c:18:2f:a9:e8:27:5a:c8:51:fb:
7e:64:7f:dd:9d:21:8b:e7:bf:70:ab:9b:57:f3:10:
8b:19:fc:18:cb:80:1c:b2:20:03:da:f1:35:39:a0:
c7:20:8e:c7:e5:18:21:60:1e:f5:7f:b2:ba:a0:ab:
dc:5a:fc:24:53:06:3b:d0:6f:af:56:15:76:78:5e:
03:8b:86:e7:6b:04:06:a3:59:db:a1:d9:15:5a:76:
9e:9c:c9:e5:23:ed:f8:8c:9d:50:11:f6:1a:2a:18:
88:0e:38:69:9e:be:d5:58:02:bc:0f:6c:12:a3:2a:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:CD:47:F3:EE:7A:70:36:D5:B2:0F:58:26:70:70:6B:13:22:EE
X509v3 Authority Key Identifier:
keyid:A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/062ACA4C276711F19A5B6589DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.91.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dc:ec:5b:ee:c2:ef:f0:42:57:9c:b4:11:e3:0f:83:82:4b:
1a:73:30:1e:70:ca:a8:fa:78:69:06:50:19:ee:3f:42:1c:a8:
52:bf:ee:1e:1a:cb:1e:1d:96:d2:77:30:de:e6:6f:3c:a6:f0:
60:ca:c4:2a:66:7a:64:fc:ef:48:e9:a9:33:57:12:31:79:fb:
54:c0:c3:61:55:d4:c8:23:01:94:3d:57:09:0e:ab:48:49:3f:
bb:60:39:32:bb:11:b0:f0:cd:e3:0b:83:d3:28:d3:5a:07:cc:
a5:9d:1c:42:00:6e:2b:d7:69:1d:c2:03:bc:8a:8a:33:f6:60:
6a:39:71:04:6f:1d:5d:e0:af:6e:8e:14:41:e4:87:f9:9a:5e:
81:a3:22:8b:7a:c0:38:13:7f:c9:9e:e4:42:4a:90:3f:84:ce:
54:81:5c:d0:8b:bf:ae:d3:dd:1e:49:93:bc:88:5d:ce:87:84:
35:aa:02:b4:0a:7d:3d:c1:87:70:29:97:d7:f2:7c:66:b0:8c:
25:c5:70:d0:a3:56:3c:ec:c3:fa:4b:0a:ab:2c:88:e2:69:40:
12:15:48:7e:c8:08:86:44:21:21:f1:e6:28:1e:04:0c:76:00:
3b:3f:f7:05:9b:cb:5a:f8:f6:f1:ca:a0:ce:41:36:5a:c3:05:
b7:04:57:45
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICApQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTEzODdBRjExMC8GA1UEBRMoQTc3NzZBMUJFNTVBQTk4QzU3MDVGRDc3OUM4NERE
MDEwNkZFQzU4MjAeFw0yNjAzMjQwOTUxMjJaFw00MDAzMDEwOTUxMjJaMBgxFjAU
BgNVBAMTDTY5YzI1ZTlmLTZlNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8lT/DsCceQUfodcPwpXJwOkczy8VQ/bleAGdr9g3NVvpVWgvoA5EkCaeg
7aDREjr/DOC/a14tR4dSTuSnTYQupLCGPiOBHKnjDC2I4KnCnEGqDlocPyk6+MIx
s8wsSkzWVovMysqkTn3p8Uvyf6g0prEntTgskQQuqhh+FzAPUivXEm02FGLasdAI
fBgvqegnWshR+35kf92dIYvnv3Crm1fzEIsZ/BjLgByyIAPa8TU5oMcgjsflGCFg
HvV/srqgq9xa/CRTBjvQb69WFXZ4XgOLhudrBAajWduh2RVadp6cyeUj7fiMnVAR
9hoqGIgOOGmevtVYArwPbBKjKss/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhtbN
R/PuenA21bIPWCZwcGsTIu4wHwYDVR0jBBgwFoAUp3dqG+VaqYxXBf13nITdAQb+
xYIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExMzg3Lzk4NzJEQkQ2MzY0ODExRUZBRkY4OTA4MDc2MkU5NTFBL3AzZHFH
LVZhcVl4WEJmMTNuSVRkQVFiLXhZSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3AzZHFHLVZhcVl4WEJmMTNuSVRkQVFiLXhZSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExMzg3Lzk4NzJEQkQ2MzY0ODExRUZBRkY4OTA4MDc2
MkU5NTFBLzA2MkFDQTRDMjc2NzExRjE5QTVCNjU4OURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmzFswDQYJKoZIhvcNAQEL
BQADggEBAEPc7Fvuwu/wQlectBHjD4OCSxpzMB5wyqj6eGkGUBnuP0IcqFK/7h4a
yx4dltJ3MN7mbzym8GDKxCpmemT870jpqTNXEjF5+1TAw2FV1MgjAZQ9VwkOq0hJ
P7tgOTK7EbDwzeMLg9Mo01oHzKWdHEIAbivXaR3CA7yKijP2YGo5cQRvHV3gr26O
FEHkh/maXoGjIot6wDgTf8me5EJKkD+EzlSBXNCLv67T3R5Jk7yIXc6HhDWqArQK
fT3Bh3Apl9fyfGawjCXFcNCjVjzsw/pLCqssiOJpQBIVSH7ICIZEISHx5igeBAx2
ADs/9wWby1r49vHKoM5BNlrDBbcEV0U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:26:00 2026 by rpki-client