Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/A104B9E26ED911F1996895B6CE1D38B0.roa
File: A104B9E26ED911F1996895B6CE1D38B0.roa (raw, json)
Hash identifier: 1zsdJY465Xz/ObwV+v28QHRsAQ+DwcvWszitsFW7O/Y=
Subject key identifier: C6:9C:A5:FE:36:ED:3F:15:C2:24:A8:34:50:31:24:54:96:B1:08:7B
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 0715
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/A104B9E26ED911F1996895B6CE1D38B0.roa
Signing time: Tue 23 Jun 2026 08:00:42 +0000
ROA not before: Tue 23 Jun 2026 08:00:37 +0000
ROA not after: Mon 23 Jun 2036 08:00:37 +0000
asID: 328585
IP address blocks: 102.216.192.0/24 maxlen: 24
102.216.193.0/24 maxlen: 24
102.216.194.0/24 maxlen: 24
102.216.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Jun 23 08:00:37 2026 GMT
Not After : Jun 23 08:00:37 2036 GMT
Subject: CN=6a3a3d2a-2fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:bc:8f:b3:8e:35:9d:8c:ef:f6:9c:1d:1f:
d9:06:96:26:68:ed:d9:5b:10:7c:27:f4:b4:67:c1:
a2:fc:6a:2d:aa:5e:9e:b6:d5:52:c1:cb:b9:3e:ba:
f4:6e:b0:69:ea:ed:ad:45:89:0c:67:44:cf:8e:9d:
26:93:67:69:ac:a8:6d:fb:74:33:17:96:4a:ac:f6:
db:d6:46:d4:cb:af:86:ba:8e:dd:50:bb:17:77:ac:
9d:05:ec:35:11:83:94:7d:44:43:18:55:53:01:74:
85:75:9a:50:38:a4:7c:1d:53:10:8d:9d:46:2c:de:
84:26:68:30:32:14:9f:1d:65:a0:b6:92:f2:2b:e3:
4d:1d:5b:9d:01:ee:3d:5a:cb:9b:78:96:18:9a:51:
e1:8d:7d:f4:d4:97:13:47:d6:bb:2c:26:80:f5:db:
e2:ea:94:8f:52:78:77:74:73:b6:11:97:f0:d7:72:
b1:27:33:06:f7:29:5b:70:c1:47:c5:16:93:d6:fb:
33:77:04:dc:35:35:2d:0e:db:34:31:52:f4:19:9d:
e1:92:cd:8c:b1:f5:ad:d4:b1:80:b4:5a:e9:7e:2b:
b9:d5:cc:fc:7f:6e:c2:d2:e1:e3:20:08:e3:c1:34:
9a:ca:74:45:21:84:23:67:1e:40:38:f4:3e:0d:b1:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:A5:FE:36:ED:3F:15:C2:24:A8:34:50:31:24:54:96:B1:08:7B
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/A104B9E26ED911F1996895B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.192.0/22
Signature Algorithm: sha256WithRSAEncryption
84:5e:f5:9f:11:68:b0:17:a8:b3:10:f5:83:dc:65:b2:d8:d5:
7e:43:cc:a0:64:44:00:c9:14:e9:84:3a:34:d3:09:11:c3:b5:
ca:e0:d9:45:b4:8a:25:0c:e3:6c:80:e6:17:0c:9c:c0:54:dd:
30:99:bb:58:d3:dd:e6:8c:fd:13:70:b8:5e:36:c5:1a:48:b7:
33:1f:3e:ea:84:72:00:86:69:2c:83:9d:37:58:ec:d1:d8:18:
65:ca:f0:68:19:ad:fb:f4:c3:b3:e5:55:71:5f:b4:ee:e6:bf:
07:49:44:16:2b:34:61:bb:7a:2d:5f:70:f8:1a:22:9f:de:d0:
e6:d8:b7:cc:22:f4:ed:06:2a:d0:61:62:f6:c2:37:62:08:9e:
04:85:29:87:25:dd:0d:83:d6:14:37:1e:9f:a8:7f:2f:d4:b2:
1e:db:43:8e:b9:34:89:3b:ad:3e:6d:eb:ee:2a:ea:e7:dd:90:
d0:07:ff:e6:6a:0f:a4:30:0e:0e:fb:69:cc:db:30:9e:ac:86:
6a:a9:ec:55:7c:89:97:78:5b:3d:69:e4:c9:f5:99:f5:02:72:
9d:a6:19:b0:ae:ca:c3:48:dd:e7:fc:a0:bf:e6:70:82:9b:19:
e2:77:f2:7a:d8:ab:b3:bb:eb:34:41:ed:4b:58:25:9e:db:bb:
8d:d3:14:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjE1MUVBRjExMC8GA1UEBRMoRUE5NTkxMzU1MTgyN0JBNkQ2NTNCQTg2QUU5M0E0
RUUxRjU4Q0Q1RDAeFw0yNjA2MjMwODAwMzdaFw0zNjA2MjMwODAwMzdaMBgxFjAU
BgNVBAMTDTZhM2EzZDJhLTJmYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjlLyPs441nYzv9pwdH9kGliZo7dlbEHwn9LRnwaL8ai2qXp621VLBy7k+
uvRusGnq7a1FiQxnRM+OnSaTZ2msqG37dDMXlkqs9tvWRtTLr4a6jt1Quxd3rJ0F
7DURg5R9REMYVVMBdIV1mlA4pHwdUxCNnUYs3oQmaDAyFJ8dZaC2kvIr400dW50B
7j1ay5t4lhiaUeGNffTUlxNH1rssJoD12+LqlI9SeHd0c7YRl/DXcrEnMwb3KVtw
wUfFFpPW+zN3BNw1NS0O2zQxUvQZneGSzYyx9a3UsYC0Wul+K7nVzPx/bsLS4eMg
COPBNJrKdEUhhCNnHkA49D4NsdLPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxpyl
/jbtPxXCJKg0UDEkVJaxCHswHwYDVR0jBBgwFoAU6pWRNVGCe6bWU7qGrpOk7h9Y
zV0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxNTFFL0Y5OENEQjdDMUExOTExRUM5MzkzNDUyREQ4QTAxNENFLzZwV1JO
VkdDZTZiV1U3cUdycE9rN2g5WXpWMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZwV1JOVkdDZTZiV1U3cUdycE9rN2g5WXpWMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYxNTFFL0Y5OENEQjdDMUExOTExRUM5MzkzNDUyREQ4
QTAxNENFL0ExMDRCOUUyNkVEOTExRjE5OTY4OTVCNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2MAwDQYJKoZIhvcNAQEL
BQADggEBAIRe9Z8RaLAXqLMQ9YPcZbLY1X5DzKBkRADJFOmEOjTTCRHDtcrg2UW0
iiUM42yA5hcMnMBU3TCZu1jT3eaM/RNwuF42xRpItzMfPuqEcgCGaSyDnTdY7NHY
GGXK8GgZrfv0w7PlVXFftO7mvwdJRBYrNGG7ei1fcPgaIp/e0ObYt8wi9O0GKtBh
YvbCN2IIngSFKYcl3Q2D1hQ3Hp+ofy/Ush7bQ465NIk7rT5t6+4q6ufdkNAH/+Zq
D6QwDg77aczbMJ6shmqp7FV8iZd4Wz1p5Mn1mfUCcp2mGbCuysNI3ef8oL/mcIKb
GeJ38nrYq7O76zRB7UtYJZ7bu43TFJ8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:24 2026 by rpki-client