Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/52818A4C6EE911F1951A0915CF1D38B0.roa
File: 52818A4C6EE911F1951A0915CF1D38B0.roa (raw, json)
Hash identifier: IsvOLEG7cttLXFIDVXA459piIwMRJstTEXgm/LGnP90=
Subject key identifier: EE:85:F0:82:B9:42:85:34:0C:D8:5F:5E:E0:F3:2F:8F:F8:0D:E7:51
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 06DC
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/52818A4C6EE911F1951A0915CF1D38B0.roa
Signing time: Tue 23 Jun 2026 09:53:02 +0000
ROA not before: Tue 23 Jun 2026 09:52:57 +0000
ROA not after: Mon 23 Jun 2036 09:52:57 +0000
asID: 15399
IP address blocks: 102.202.60.0/22 maxlen: 22
102.203.120.0/22 maxlen: 22
102.206.16.0/22 maxlen: 22
102.206.20.0/22 maxlen: 22
102.207.28.0/22 maxlen: 22
102.208.152.0/22 maxlen: 22
102.209.36.0/22 maxlen: 22
102.209.92.0/22 maxlen: 22
102.209.132.0/22 maxlen: 22
102.210.84.0/22 maxlen: 22
102.210.180.0/22 maxlen: 22
102.211.32.0/22 maxlen: 22
102.211.88.0/22 maxlen: 22
102.211.248.0/22 maxlen: 22
102.212.112.0/22 maxlen: 22
102.212.116.0/22 maxlen: 22
102.213.36.0/22 maxlen: 22
102.214.48.0/22 maxlen: 22
102.215.28.0/22 maxlen: 22
102.215.148.0/22 maxlen: 22
102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
2c0f:e958::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF, serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Jun 23 09:52:57 2026 GMT
Not After : Jun 23 09:52:57 2036 GMT
Subject: CN=6a3a577e-8f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:8d:bd:f9:55:2b:a1:2a:cd:c3:4f:55:2f:
10:0f:01:7e:5e:2b:ed:44:55:b4:59:6f:0f:a0:1e:
be:ec:10:99:31:b0:ad:88:c3:04:a7:2e:3f:0a:75:
40:a9:15:31:0e:1d:ca:78:35:8e:44:fc:88:39:f9:
7c:c5:fd:4c:b7:22:4a:80:56:41:4b:5b:f7:1c:37:
fb:4d:7e:ab:39:47:4a:cc:6e:fd:8e:0b:7f:1c:ce:
60:94:ee:f4:76:23:0f:aa:ed:7f:02:aa:a7:fb:3e:
3d:1c:63:ea:6e:ba:40:af:29:f8:6e:be:d7:c2:f9:
46:b1:59:68:f4:bc:76:4a:51:07:b3:3c:04:9e:d0:
9e:63:ca:9c:92:60:ee:f8:e9:4c:8d:64:8f:32:43:
c7:2a:ec:72:c6:d2:3e:a2:a3:e3:50:9c:97:a1:b8:
63:55:c1:c6:1f:64:ee:ea:79:6f:d0:09:15:dd:06:
92:a9:b0:40:fa:d1:8f:72:b5:b2:16:f8:06:cf:63:
7d:14:b8:eb:8d:0c:39:a2:77:1e:2e:1b:7e:1e:1e:
65:98:71:92:da:36:b7:01:d9:10:b0:20:18:6d:42:
21:d9:35:99:a1:13:6b:d9:4f:c0:42:9b:e1:d8:f8:
54:41:b8:c0:26:d1:ee:57:76:2d:6f:b0:d0:f6:1a:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:F0:82:B9:42:85:34:0C:D8:5F:5E:E0:F3:2F:8F:F8:0D:E7:51
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/52818A4C6EE911F1951A0915CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.60.0/22
102.203.120.0/22
102.206.16.0/21
102.207.28.0/22
102.208.152.0/22
102.209.36.0/22
102.209.92.0/22
102.209.132.0/22
102.210.84.0/22
102.210.180.0/22
102.211.32.0/22
102.211.88.0/22
102.211.248.0/22
102.212.112.0/21
102.213.36.0/22
102.214.48.0/22
102.215.28.0/22
102.215.148.0/22
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
IPv6:
2c0f:e958::/32
Signature Algorithm: sha256WithRSAEncryption
c2:4c:8d:83:3c:2c:89:3f:1c:e0:ce:71:f1:e2:f1:0f:b3:7e:
b3:fd:36:3c:8c:16:66:26:2b:d0:56:c3:1a:63:b3:a5:4b:c1:
cb:86:df:38:7b:3c:c1:83:1b:be:e7:78:d3:78:c2:a1:39:4e:
aa:9f:49:23:2a:51:a1:0b:64:04:ed:03:bd:e1:c9:d8:c0:3d:
02:2b:ea:05:23:b0:91:fe:67:ea:73:a5:6e:a5:54:66:7b:1e:
a0:39:c1:bf:00:70:49:c6:99:b5:39:b1:96:6a:40:eb:28:9c:
4c:61:23:02:6e:a5:3f:5d:7c:53:47:14:db:ec:c8:0a:0f:c3:
28:93:3b:90:1a:f8:36:01:b6:93:3b:d5:6f:a5:16:95:17:be:
07:09:2c:c6:b9:55:a4:37:29:45:02:ca:00:c6:5f:85:f8:8b:
ea:4f:84:14:a3:e3:a8:3d:2e:06:d5:df:e6:c4:9b:96:9a:54:
22:95:25:5d:16:2c:34:de:8a:ad:79:a6:52:4b:af:20:66:4a:
fc:9e:00:4e:e2:10:41:b5:fa:23:8a:0e:8b:85:3e:f2:d7:fe:
06:bd:7c:d6:da:79:e7:f0:73:2b:99:66:01:c2:f5:02:ae:96:
fa:35:43:50:cc:4a:60:28:be:66:eb:16:7b:4f:17:13:be:cc:
9f:4b:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:29 2026 by rpki-client