Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/3D55216081AE11F19AE998BECE1D38B0.roa
File: 3D55216081AE11F19AE998BECE1D38B0.roa (raw, json)
Hash identifier: tEb4cIz3DQXZxgjEItHyqv4eB8KzPNyX/c919+r53Mw=
Subject key identifier: BC:21:88:5F:76:D1:D8:F6:E2:58:76:6D:17:67:21:61:50:32:6C:32
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 0385
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/3D55216081AE11F19AE998BECE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:07:58 +0000
ROA not before: Fri 17 Jul 2026 07:07:52 +0000
ROA not after: Fri 06 Jul 2029 07:07:52 +0000
asID: 37577
IP address blocks: 102.180.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 04:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Jul 17 07:07:52 2026 GMT
Not After : Jul 6 07:07:52 2029 GMT
Subject: CN=6a59d4ce-cedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:ce:49:3f:af:55:0c:84:4d:9f:c1:fd:0c:
e3:f9:bc:a5:5e:68:c7:27:77:fb:cb:ff:f7:d7:c0:
c8:47:00:59:8f:d2:be:5c:51:e0:8b:28:ab:c8:04:
a3:df:54:6d:e4:ed:e6:39:6f:1b:00:9b:34:b6:9c:
e2:fd:5f:37:01:d0:45:e1:cb:69:7e:81:89:1c:05:
9a:61:cf:12:cf:d9:84:af:2b:a4:40:78:81:84:5d:
55:a2:81:6b:1d:55:3a:d3:cf:b6:ba:df:14:42:75:
5d:bf:48:3d:03:a0:6a:31:dd:42:dd:25:78:e6:9f:
88:a2:a7:69:9e:6f:42:44:13:64:c8:dc:db:38:a9:
4f:f7:b6:5e:82:09:82:ce:60:f4:40:23:68:67:6a:
ce:41:7f:d6:1a:b9:5c:4c:e0:b5:33:45:d2:b0:23:
4c:82:40:5f:e2:62:02:7d:73:30:53:ce:de:f6:ab:
b1:30:67:cb:65:40:75:a9:4f:e8:2b:35:df:ed:72:
41:00:f7:93:e4:33:11:c5:8a:0d:92:d8:97:02:00:
e2:8f:5a:d4:16:01:f1:15:25:51:e4:06:4b:66:d1:
3d:de:57:be:3a:8a:c5:77:a1:36:55:4c:00:03:f9:
c8:40:7b:6a:95:1e:0a:04:9d:4a:4a:f8:29:b6:a0:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:88:5F:76:D1:D8:F6:E2:58:76:6D:17:67:21:61:50:32:6C:32
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/3D55216081AE11F19AE998BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.180.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:ea:fb:4b:eb:71:f6:b4:bf:fc:97:44:e5:0b:3a:cf:00:27:
b8:76:11:ee:0a:89:b8:3f:f3:b1:d9:14:d2:28:e4:b4:58:5a:
11:d9:df:f2:7e:87:66:6c:1f:36:96:08:c9:a3:4f:cb:e5:88:
fc:9a:b7:d0:7a:72:18:47:68:f8:c2:f8:c3:e0:a9:44:02:7f:
22:3a:00:99:bb:bb:eb:1a:73:68:cc:7e:b2:3f:34:08:94:84:
8f:b4:30:70:f3:30:48:8e:9c:da:09:59:03:54:ef:1b:65:f6:
1d:d5:e7:a5:30:8b:1b:5e:fa:e6:62:eb:da:7f:63:d8:bf:07:
55:b6:b1:f5:ba:78:6e:26:39:ee:7c:13:a5:c0:40:a0:95:77:
ff:28:00:00:e0:6c:73:a2:b0:08:fc:14:03:8d:55:d0:d4:97:
d3:f2:45:5e:66:08:9a:9b:41:16:50:bd:99:26:25:c2:6b:f1:
82:df:a9:58:de:e9:5b:1f:a9:33:ab:53:b3:e3:16:03:01:ae:
d6:a3:6f:d9:bb:da:76:be:e5:54:38:bd:56:d9:63:aa:b2:f3:
ab:05:df:c5:10:3c:f4:06:d7:15:3b:7d:2c:17:8a:6a:a3:d5:
f5:1e:56:74:cb:60:85:e9:59:29:76:13:5d:c1:87:93:c7:0a:
42:35:e3:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4
MjUxNEMwNDIwRjAeFw0yNjA3MTcwNzA3NTJaFw0yOTA3MDYwNzA3NTJaMBgxFjAU
BgNVBAMTDTZhNTlkNGNlLWNlZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWLc5JP69VDIRNn8H9DOP5vKVeaMcnd/vL//fXwMhHAFmP0r5cUeCLKKvI
BKPfVG3k7eY5bxsAmzS2nOL9XzcB0EXhy2l+gYkcBZphzxLP2YSvK6RAeIGEXVWi
gWsdVTrTz7a63xRCdV2/SD0DoGox3ULdJXjmn4iip2meb0JEE2TI3Ns4qU/3tl6C
CYLOYPRAI2hnas5Bf9YauVxM4LUzRdKwI0yCQF/iYgJ9czBTzt72q7EwZ8tlQHWp
T+grNd/tckEA95PkMxHFig2S2JcCAOKPWtQWAfEVJVHkBktm0T3eV746isV3oTZV
TAAD+chAe2qVHgoEnUpK+Cm2oLOzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvCGI
X3bR2PbiWHZtF2chYVAybDIwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA
Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1
NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3
NTQxMkU2LzNENTUyMTYwODFBRTExRjE5QUU5OThCRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmtOQwDQYJKoZIhvcNAQEL
BQADggEBALbq+0vrcfa0v/yXROULOs8AJ7h2Ee4Kibg/87HZFNIo5LRYWhHZ3/J+
h2ZsHzaWCMmjT8vliPyat9B6chhHaPjC+MPgqUQCfyI6AJm7u+sac2jMfrI/NAiU
hI+0MHDzMEiOnNoJWQNU7xtl9h3V56Uwixte+uZi69p/Y9i/B1W2sfW6eG4mOe58
E6XAQKCVd/8oAADgbHOisAj8FAONVdDUl9PyRV5mCJqbQRZQvZkmJcJr8YLfqVje
6VsfqTOrU7PjFgMBrtajb9m72na+5VQ4vVbZY6qy86sF38UQPPQG1xU7fSwXimqj
1fUeVnTLYIXpWSl2E13Bh5PHCkI14+k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:54 2026 by rpki-client