Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/5C84A38E847A11F19D393BB3CE1D38B0.roa
File: 5C84A38E847A11F19D393BB3CE1D38B0.roa (raw, json)
Hash identifier: AHaUFDbGD5NxejHMZa7exucr+iFPx6p3m8Tht7NKBYE=
Subject key identifier: 5C:A3:F8:65:46:70:79:6C:36:E9:D2:D7:38:41:74:D0:3F:E7:93:FD
Certificate issuer: /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial: 04F2
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/5C84A38E847A11F19D393BB3CE1D38B0.roa
Signing time: Mon 20 Jul 2026 20:34:10 +0000
ROA not before: Tue 21 Jul 2026 20:34:06 +0000
ROA not after: Mon 21 Jul 2036 20:34:06 +0000
asID: 328611
IP address blocks: 102.216.137.0/24 maxlen: 24
102.216.138.0/24 maxlen: 24
102.216.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Validity
Not Before: Jul 21 20:34:06 2026 GMT
Not After : Jul 21 20:34:06 2036 GMT
Subject: CN=6a5e8642-a3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:50:39:0c:88:d0:08:16:46:3e:f8:55:8f:
28:40:4d:15:6d:65:47:1f:f4:aa:e2:aa:93:1a:f1:
98:89:e6:e8:07:20:6e:2b:c2:19:76:2b:c0:0d:3c:
cc:4c:49:3f:5d:5b:e6:e7:5e:e8:36:12:71:c2:15:
1d:ab:ee:a0:1f:ac:e5:4f:dd:ca:ba:0f:08:aa:f9:
cf:9f:75:c5:06:b8:de:f6:0c:19:9e:2e:be:eb:fe:
27:07:dc:02:38:ba:3f:a1:d5:f1:ee:92:2d:41:20:
97:4b:e0:a4:4e:1c:b3:42:49:3b:a1:31:1b:ed:ba:
e4:53:82:88:dc:a6:99:fe:a6:36:0b:09:a6:35:5e:
f5:c6:76:45:56:2c:b4:1d:d2:dd:14:12:a4:b8:a1:
df:12:d5:34:77:30:75:99:a2:70:69:66:29:1d:e1:
c9:53:b8:e0:d0:7f:df:d9:f8:1c:47:f7:fd:cb:c9:
f5:30:fa:6a:60:b6:27:50:d3:ea:78:34:9f:a5:95:
18:01:e6:48:62:42:ef:02:68:79:3d:34:4a:c1:74:
34:7f:da:d3:c5:04:ae:15:54:94:07:58:75:49:46:
b4:5e:2f:37:ef:4c:1f:4b:2b:d2:06:ea:91:17:7e:
21:d3:5e:44:34:fb:84:1e:8b:56:41:4a:20:ec:4d:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A3:F8:65:46:70:79:6C:36:E9:D2:D7:38:41:74:D0:3F:E7:93:FD
X509v3 Authority Key Identifier:
keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/5C84A38E847A11F19D393BB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.137.0-102.216.139.255
Signature Algorithm: sha256WithRSAEncryption
90:81:c8:db:10:fc:ed:7f:47:4a:6c:46:18:f8:fb:18:df:ca:
c7:19:e1:24:d3:4e:c0:da:3e:fe:02:89:5b:c6:39:a4:57:c2:
28:61:56:dc:f2:c8:53:48:b5:31:a0:f8:98:f7:17:8c:fb:32:
9a:3d:68:38:c8:f7:00:6f:ce:41:11:82:4b:88:9f:63:35:5b:
f2:f3:67:e3:c1:41:94:61:36:87:79:b7:88:49:b5:ad:9a:8a:
58:7e:c3:e9:52:ba:d1:58:83:84:f1:ec:50:2d:11:fa:1c:cc:
16:67:6c:b0:34:c9:c3:a6:4f:4d:da:54:f3:e0:72:fa:c9:ee:
dd:b6:dd:95:bc:94:04:e8:5c:93:0c:68:95:18:5d:21:e4:81:
38:db:fb:3e:3f:5e:56:42:4c:1b:8b:d1:a8:e8:c5:91:54:fb:
90:45:72:9c:0d:01:ba:5f:cf:51:ba:ff:56:5d:f3:50:e0:32:
1c:6a:d1:d7:61:5e:c4:fd:b2:f1:23:b3:09:ab:02:6f:cb:e3:
54:70:13:7d:2f:a1:9b:2c:4a:c0:e7:96:71:e2:59:82:97:34:
9f:4e:63:c5:9f:d8:f0:a4:83:72:ec:be:77:e5:c4:ad:ec:5a:
10:52:22:e6:e4:ba:f1:33:05:78:43:37:e0:70:af:d7:18:cf:
d5:e5:c3:c1
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM3MTJBRjExMC8GA1UEBRMoRkYwMzI4MjAwMDc4QUMzNkYwMkQ3MTAxRDAzNEI3
QkU1OTdFQTE1ODAeFw0yNjA3MjEyMDM0MDZaFw0zNjA3MjEyMDM0MDZaMBgxFjAU
BgNVBAMTDTZhNWU4NjQyLWEzYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtKVA5DIjQCBZGPvhVjyhATRVtZUcf9KriqpMa8ZiJ5ugHIG4rwhl2K8AN
PMxMST9dW+bnXug2EnHCFR2r7qAfrOVP3cq6Dwiq+c+fdcUGuN72DBmeLr7r/icH
3AI4uj+h1fHuki1BIJdL4KROHLNCSTuhMRvtuuRTgojcppn+pjYLCaY1XvXGdkVW
LLQd0t0UEqS4od8S1TR3MHWZonBpZikd4clTuODQf9/Z+BxH9/3LyfUw+mpgtidQ
0+p4NJ+llRgB5khiQu8CaHk9NErBdDR/2tPFBK4VVJQHWHVJRrReLzfvTB9LK9IG
6pEXfiHTXkQ0+4Qei1ZBSiDsTacnAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUXKP4
ZUZweWw26dLXOEF00D/nk/0wHwYDVR0jBBgwFoAU/wMoIAB4rDbwLXEB0DS3vll+
oVgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDNzEyLzY2NTc5NzA2QkY2RTExRUQ5MzNDRTQ4MkYxMjIyNDY4L193TW9J
QUI0ckRid0xYRUIwRFMzdmxsLW9WZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL193TW9JQUI0ckRid0xYRUIwRFMzdmxsLW9WZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVDNzEyLzY2NTc5NzA2QkY2RTExRUQ5MzNDRTQ4MkYx
MjIyNDY4LzVDODRBMzhFODQ3QTExRjE5RDM5M0JCM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAGbYiQMEAmbYiDANBgkq
hkiG9w0BAQsFAAOCAQEAkIHI2xD87X9HSmxGGPj7GN/KxxnhJNNOwNo+/gKJW8Y5
pFfCKGFW3PLIU0i1MaD4mPcXjPsymj1oOMj3AG/OQRGCS4ifYzVb8vNn48FBlGE2
h3m3iEm1rZqKWH7D6VK60ViDhPHsUC0R+hzMFmdssDTJw6ZPTdpU8+By+snu3bbd
lbyUBOhckwxolRhdIeSBONv7Pj9eVkJMG4vRqOjFkVT7kEVynA0Bul/PUbr/Vl3z
UOAyHGrR12FexP2y8SOzCasCb8vjVHATfS+hmyxKwOeWceJZgpc0n05jxZ/Y8KSD
cuy+d+XErexaEFIi5uS68TMFeEM34HCv1xjP1eXDwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:42 2026 by rpki-client