Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/A662608285F011F1B19268A4CE1D38B0.roa
File: A662608285F011F1B19268A4CE1D38B0.roa (raw, json)
Hash identifier: UMIy7Die2cFrodGJSjrF5fxQ8Z0dpn4wV5XE1qmScCk=
Subject key identifier: A7:A2:DB:F1:75:53:A3:C2:AD:B1:EE:73:F1:4B:67:3F:C5:38:F7:AA
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 085A
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/A662608285F011F1B19268A4CE1D38B0.roa
Signing time: Wed 22 Jul 2026 17:13:26 +0000
ROA not before: Wed 22 Jul 2026 17:13:22 +0000
ROA not after: Tue 22 Jul 2036 17:13:22 +0000
asID: 37645
IP address blocks: 102.201.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Jul 22 17:13:22 2026 GMT
Not After : Jul 22 17:13:22 2036 GMT
Subject: CN=6a60fa36-612d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:f1:9a:3e:a7:3a:3e:35:98:c9:60:68:17:
77:8e:cb:2d:e5:48:8b:c0:20:21:28:a5:b2:fe:a6:
a2:6e:a1:03:dd:cf:ef:a7:72:37:70:71:16:bc:54:
18:ee:37:12:b0:3b:49:b5:ca:9e:8b:24:7e:10:63:
6f:79:1e:7a:e0:85:bd:8e:c7:ef:4b:5a:1f:48:02:
42:ef:3b:66:33:c9:e3:0a:04:f9:dc:e4:29:78:3f:
4f:cf:35:d4:63:80:a6:15:91:e4:96:4a:ff:9b:67:
d4:26:15:6c:7f:a4:8a:8c:4a:a2:e8:43:f2:24:6c:
69:34:f4:c3:7d:23:aa:2f:ab:f2:04:ff:db:fe:85:
81:7f:4c:e0:2a:6d:eb:c8:da:90:93:3f:5a:1f:23:
b0:c6:40:68:3c:dd:a5:82:a0:6b:96:d2:e8:f6:e8:
5f:30:36:c2:fb:22:53:41:85:ea:1e:6a:bf:07:a3:
7d:d5:05:ba:6d:d7:cb:c2:7e:92:d3:38:d4:3f:29:
b9:a3:f8:7b:b4:9b:30:3a:b9:a7:39:cc:57:bd:d0:
00:7b:a4:48:d1:0f:a5:83:e3:ff:17:c2:bd:a4:8e:
10:e5:17:8d:81:70:84:c8:69:62:09:21:37:33:08:
3e:dc:c0:72:91:b4:10:64:c5:a2:95:b3:06:3f:85:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:DB:F1:75:53:A3:C2:AD:B1:EE:73:F1:4B:67:3F:C5:38:F7:AA
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/A662608285F011F1B19268A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.201.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:7a:6b:9b:8a:ae:1b:28:de:e2:80:c2:4a:87:b5:46:06:14:
1d:66:1d:b5:77:ae:85:96:f2:8e:e8:3b:88:98:24:bf:17:5b:
bc:a5:56:bb:c9:fa:29:dd:75:5c:c8:a0:26:5c:76:0c:38:e2:
38:a4:8d:cf:6e:da:b8:e5:11:74:e2:aa:92:68:74:4e:e5:cc:
18:63:95:79:ec:b0:54:5e:bd:17:91:d5:a0:51:2d:f2:43:f5:
3e:fb:5e:ab:3e:70:87:b4:a6:d2:08:ca:c2:f8:e9:92:e7:4b:
c2:89:17:f7:48:a0:c1:bd:30:3a:f5:83:81:8d:73:92:55:4b:
61:07:8b:d7:a3:f6:4c:f1:bf:7e:3d:48:53:38:a6:26:43:63:
64:c2:d3:b5:b2:7d:7c:74:90:ab:73:e3:32:a5:8b:81:21:6a:
b6:01:02:1d:b1:0f:cd:f9:4f:ad:56:a4:d1:c8:d1:7a:18:bb:
27:89:f0:fe:8d:8d:bb:20:05:1c:45:14:9b:28:00:3a:5b:d1:
75:e9:f2:f2:f6:32:ea:1d:fe:8a:a4:05:47:84:30:e0:bd:15:
fa:89:49:00:c5:77:ea:0c:08:a8:61:aa:39:a2:c1:03:76:06:
28:8f:90:18:c4:01:11:2e:2f:dc:6a:97:2d:6a:aa:66:ae:b1:
6d:76:0b:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCFowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjA3MjIxNzEzMjJaFw0zNjA3MjIxNzEzMjJaMBgxFjAU
BgNVBAMTDTZhNjBmYTM2LTYxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNpPGaPqc6PjWYyWBoF3eOyy3lSIvAICEopbL+pqJuoQPdz++ncjdwcRa8
VBjuNxKwO0m1yp6LJH4QY295Hnrghb2Ox+9LWh9IAkLvO2YzyeMKBPnc5Cl4P0/P
NdRjgKYVkeSWSv+bZ9QmFWx/pIqMSqLoQ/IkbGk09MN9I6ovq/IE/9v+hYF/TOAq
bevI2pCTP1ofI7DGQGg83aWCoGuW0uj26F8wNsL7IlNBheoear8Ho33VBbpt18vC
fpLTONQ/Kbmj+Hu0mzA6uac5zFe90AB7pEjRD6WD4/8Xwr2kjhDlF42BcITIaWIJ
ITczCD7cwHKRtBBkxaKVswY/hYLnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUp6Lb
8XVTo8Ktse5z8UtnP8U496owHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFL0E2NjI2MDgyODVGMDExRjFCMTkyNjhBNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmydQwDQYJKoZIhvcNAQEL
BQADggEBAJ56a5uKrhso3uKAwkqHtUYGFB1mHbV3roWW8o7oO4iYJL8XW7ylVrvJ
+inddVzIoCZcdgw44jikjc9u2rjlEXTiqpJodE7lzBhjlXnssFRevReR1aBRLfJD
9T77Xqs+cIe0ptIIysL46ZLnS8KJF/dIoMG9MDr1g4GNc5JVS2EHi9ej9kzxv349
SFM4piZDY2TC07WyfXx0kKtz4zKli4EharYBAh2xD835T61WpNHI0XoYuyeJ8P6N
jbsgBRxFFJsoADpb0XXp8vL2Muod/oqkBUeEMOC9FfqJSQDFd+oMCKhhqjmiwQN2
BiiPkBjEAREuL9xqly1qqmausW12C/A=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:36 2026 by rpki-client