Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/2D3A58E2844A11F191A58113CF1D38B0.roa
File: 2D3A58E2844A11F191A58113CF1D38B0.roa (raw, json)
Hash identifier: B/vvT2Jfc++6xpCJZfkdlYiPhk3yse5YiJZ7AjLkKmk=
Subject key identifier: 44:38:BF:87:91:8A:76:A8:CE:02:FE:39:8A:82:BE:78:A8:9A:17:75
Certificate issuer: /CN=F36D987FRI/serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
Certificate serial: 05
Authority key identifier: D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
Authority info access: rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/2D3A58E2844A11F191A58113CF1D38B0.roa
Signing time: Mon 20 Jul 2026 14:49:15 +0000
ROA not before: Mon 20 Jul 2026 14:49:11 +0000
ROA not after: Fri 20 Jul 2029 14:49:11 +0000
asID: 328459
IP address blocks: 83.143.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FRI, serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
Validity
Not Before: Jul 20 14:49:11 2026 GMT
Not After : Jul 20 14:49:11 2029 GMT
Subject: CN=6a5e356b-0e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:84:fd:b6:b3:4e:cd:01:4e:b8:5f:a3:44:
b8:8d:65:b4:be:75:6e:d2:d1:77:a3:81:a0:2b:79:
75:5a:45:d5:a3:76:d2:b0:b1:4b:3e:9f:13:e3:94:
3b:f0:10:13:67:80:22:b2:22:a7:83:63:41:83:9d:
6d:29:de:61:cc:0b:1d:1d:84:a8:33:7e:09:f4:ea:
f7:2f:66:23:26:21:b0:a6:28:8d:d4:58:27:6a:75:
9f:d0:7e:9d:8f:63:68:d6:d7:4e:31:87:79:39:ec:
f8:eb:19:28:fc:41:7a:d2:01:73:50:9d:9f:3f:45:
89:de:b4:61:43:a6:e2:38:81:8c:28:c9:06:2f:aa:
f3:10:4d:9e:03:fa:77:8f:8b:fd:8d:6b:89:c9:b0:
ab:a3:cd:37:f5:6c:81:6d:89:12:c4:64:75:05:18:
41:9f:cd:a1:6b:43:4f:e1:01:70:61:a1:7a:78:a3:
ac:e8:64:fe:d1:92:91:98:02:28:ad:6c:d0:d5:a2:
fa:d8:27:69:ab:75:9a:ef:7c:ba:f9:9f:59:aa:ce:
4a:1b:bc:a0:c3:d0:08:6c:f5:8c:0d:de:6d:73:82:
65:5e:83:ec:61:bd:18:06:3b:5b:f6:62:43:1d:63:
f8:86:6d:47:d9:c0:f8:d0:e0:23:4c:f7:a7:59:de:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:BF:87:91:8A:76:A8:CE:02:FE:39:8A:82:BE:78:A8:9A:17:75
X509v3 Authority Key Identifier:
keyid:D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/2D3A58E2844A11F191A58113CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.143.24.0/21
Signature Algorithm: sha256WithRSAEncryption
96:3e:71:ad:83:bb:ec:24:33:13:41:89:00:0a:45:28:2f:38:
3d:0c:ef:91:8d:99:d1:61:c7:5d:13:fe:a0:f6:a4:fe:9e:8a:
9b:1b:ff:06:ad:d0:e6:96:db:06:1d:18:66:47:9a:25:a3:11:
87:4b:1f:9d:00:b5:a8:cb:b9:d7:60:d8:14:77:76:1f:07:77:
44:7a:cb:4c:01:34:b6:11:a9:27:d9:7f:95:d5:29:77:b1:ce:
40:dd:b9:75:76:67:d8:b7:ae:f0:05:dc:24:ab:5c:9a:f7:fc:
fb:48:08:ec:bc:bd:ab:f3:2a:c1:8c:8e:8f:21:b2:a7:b4:eb:
e5:c4:03:f5:85:83:67:aa:9e:0a:6b:80:76:0d:58:55:b4:d1:
50:5d:61:15:82:15:80:0d:34:88:0e:d9:b5:f2:3b:da:a6:de:
d7:fd:5c:d4:05:17:a6:ef:ac:10:5d:17:5f:fd:57:ae:b0:f5:
e8:8b:18:76:98:a5:83:8e:87:df:79:26:3b:ff:f4:5e:49:56:
14:fc:b8:93:b8:a0:cd:ae:6c:18:c8:c5:95:7a:3a:f0:fc:ab:
26:f9:8a:fe:b8:f4:da:cd:a6:e2:14:47:00:87:59:69:d0:1e:
74:41:e8:2d:da:38:13:48:56:09:93:24:6b:ab:10:5a:33:1d:
f6:f6:08:67
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBBTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
OTg3RlJJMTEwLwYDVQQFEyhEMzRBMTlFNjMxMDY5NjRCRDAyQ0IyRDhBRDE4MDdE
RjlBNkIxOTAxMB4XDTI2MDcyMDE0NDkxMVoXDTI5MDcyMDE0NDkxMVowGDEWMBQG
A1UEAxMNNmE1ZTM1NmItMGUyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnghP22s07NAU64X6NEuI1ltL51btLRd6OBoCt5dVpF1aN20rCxSz6fE+OU
O/AQE2eAIrIip4NjQYOdbSneYcwLHR2EqDN+CfTq9y9mIyYhsKYojdRYJ2p1n9B+
nY9jaNbXTjGHeTns+OsZKPxBetIBc1Cdnz9Fid60YUOm4jiBjCjJBi+q8xBNngP6
d4+L/Y1ricmwq6PNN/VsgW2JEsRkdQUYQZ/NoWtDT+EBcGGhenijrOhk/tGSkZgC
KK1s0NWi+tgnaat1mu98uvmfWarOShu8oMPQCGz1jA3ebXOCZV6D7GG9GAY7W/Zi
Qx1j+IZtR9nA+NDgI0z3p1neM2ECAwEAAaOCAqIwggKeMB0GA1UdDgQWBBREOL+H
kYp2qM4C/jmKgr54qJoXdTAfBgNVHSMEGDAWgBTTShnmMQaWS9AsstitGAffmmsZ
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDk4N0YvMTM0QzY5OTY4NDQyMTFGMUE1NzQ2NkU1Q0UxRDM4QjAvMDBvWjVq
RUdsa3ZRTExMWXJSZ0gzNXByR1FFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
MDBvWjVqRUdsa3ZRTExMWXJSZ0gzNXByR1FFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDk4N0YvMTM0QzY5OTY4NDQyMTFGMUE1NzQ2NkU1Q0UxRDM4
QjAvMkQzQTU4RTI4NDRBMTFGMTkxQTU4MTEzQ0YxRDM4QjAucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1OPGDANBgkqhkiG9w0BAQsFAAOC
AQEAlj5xrYO77CQzE0GJAApFKC84PQzvkY2Z0WHHXRP+oPak/p6Kmxv/Bq3Q5pbb
Bh0YZkeaJaMRh0sfnQC1qMu512DYFHd2Hwd3RHrLTAE0thGpJ9l/ldUpd7HOQN25
dXZn2Leu8AXcJKtcmvf8+0gI7Ly9q/MqwYyOjyGyp7Tr5cQD9YWDZ6qeCmuAdg1Y
VbTRUF1hFYIVgA00iA7ZtfI72qbe1/1c1AUXpu+sEF0XX/1XrrD16IsYdpilg46H
33kmO//0XklWFPy4k7igza5sGMjFlXo68PyrJvmK/rj02s2m4hRHAIdZadAedEHo
Ldo4E0hWCZMka6sQWjMd9vYIZw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:32 2026 by rpki-client