Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/6810F36643F111F1823505F8CE1D38B0.roa
File: 6810F36643F111F1823505F8CE1D38B0.roa (raw, json)
Hash identifier: H49ZmE70fNlQMlXanVHzm7OfawxzBuMK6YRbx0bBsww=
Subject key identifier: BF:24:B0:36:BA:7A:54:EC:C0:58:4D:65:60:45:0D:AD:73:30:8B:89
Certificate issuer: /CN=F367E157AF/serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
Certificate serial: 52
Authority key identifier: 7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/6810F36643F111F1823505F8CE1D38B0.roa
Signing time: Wed 29 Apr 2026 17:32:34 +0000
ROA not before: Wed 29 Apr 2026 17:32:29 +0000
ROA not after: Tue 29 Apr 2036 17:32:29 +0000
asID: 329580
IP address blocks: 102.202.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E157AF, serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
Validity
Not Before: Apr 29 17:32:29 2026 GMT
Not After : Apr 29 17:32:29 2036 GMT
Subject: CN=69f240b2-ef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:86:01:23:3a:ac:22:ea:5d:71:3e:82:1d:
df:64:af:37:72:95:ed:48:0b:02:dc:ba:7a:b2:fb:
60:ac:f2:5f:d1:04:f9:74:e1:43:6e:77:24:d3:82:
1d:d4:da:e4:8d:67:1a:7b:f6:a5:a7:11:12:92:f3:
30:fb:1d:22:fa:61:72:dd:78:27:25:85:fe:55:7e:
e8:11:cb:c9:da:f8:f3:a7:42:6d:10:67:56:57:20:
73:f7:71:16:fb:2d:42:14:94:30:be:99:57:5a:ff:
13:ed:24:33:44:54:04:bc:b3:9d:a0:52:90:c2:09:
6b:2e:3c:61:d3:c4:54:37:bd:0d:50:2a:64:af:69:
ba:72:4b:47:cc:a4:ff:12:55:8f:ff:98:d4:4e:b4:
fe:c9:27:0f:88:cd:b7:3e:c6:be:1f:47:ce:8a:c9:
a6:b9:94:08:1a:13:9e:c7:45:98:38:22:71:36:1c:
57:be:8a:67:f8:5f:9d:52:35:bc:06:55:b0:ce:a9:
d4:8d:6d:d3:64:0b:45:e9:68:81:ef:89:94:38:af:
e4:84:d4:9c:e0:9c:ec:dd:7a:33:fd:22:e5:63:46:
56:0e:03:fc:d3:0f:f5:da:73:19:c0:92:ea:66:a0:
5a:72:ee:3e:b2:2b:62:84:6f:f4:05:38:a7:28:3a:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:B0:36:BA:7A:54:EC:C0:58:4D:65:60:45:0D:AD:73:30:8B:89
X509v3 Authority Key Identifier:
keyid:7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/6810F36643F111F1823505F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:3b:a2:a5:35:9b:15:2a:cb:db:e5:88:dc:4f:e0:42:e7:b5:
95:65:18:76:0d:b1:41:2c:73:e3:ab:58:45:14:19:c8:a6:ed:
5a:2d:09:77:7c:e1:d9:b9:bd:92:d4:08:9c:c6:70:d2:15:93:
1f:46:56:ae:90:e2:f3:9e:64:dd:0d:da:88:a6:7e:ca:8d:40:
f6:82:80:5e:21:c4:9d:fc:1b:df:2a:f6:5f:50:4c:52:88:37:
ab:e2:71:13:0a:8d:74:5f:97:20:33:d0:92:86:4b:05:34:a9:
d9:03:5a:95:0a:26:b8:e1:14:56:ec:e4:16:07:06:80:a6:42:
22:5c:55:5a:7f:09:16:e9:55:46:9a:74:a9:3e:2c:e9:86:59:
45:41:f6:ad:c2:42:db:71:53:a5:15:48:15:82:21:74:b6:32:
d2:73:f5:e9:d9:a9:fe:78:b6:fb:a9:96:76:4f:d9:4f:63:ee:
6a:50:87:38:4c:db:58:c7:3d:33:f3:ae:5b:e8:8c:64:11:5e:
6a:3b:4a:d8:e4:c6:84:82:e0:8f:fc:8b:6b:e5:00:12:91:ac:
ef:fa:7f:4c:45:cf:be:1e:36:10:6f:d7:cb:37:ef:b7:09:9a:
1f:10:63:12:76:f1:89:cb:cf:f0:87:56:82:58:a1:06:71:83:
0b:f1:a0:d5
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBUjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
RTE1N0FGMTEwLwYDVQQFEyg3RUMxNEQ3QzQ5NzY5MERDQjBDOTMzREYzM0Q2QTY4
QjFCOTkyQThGMB4XDTI2MDQyOTE3MzIyOVoXDTM2MDQyOTE3MzIyOVowGDEWMBQG
A1UEAxMNNjlmMjQwYjItZWY1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJlzhgEjOqwi6l1xPoId32SvN3KV7UgLAty6erL7YKzyX9EE+XThQ253JNOC
HdTa5I1nGnv2pacREpLzMPsdIvphct14JyWF/lV+6BHLydr486dCbRBnVlcgc/dx
FvstQhSUML6ZV1r/E+0kM0RUBLyznaBSkMIJay48YdPEVDe9DVAqZK9punJLR8yk
/xJVj/+Y1E60/sknD4jNtz7Gvh9HzorJprmUCBoTnsdFmDgicTYcV76KZ/hfnVI1
vAZVsM6p1I1t02QLReloge+JlDiv5ITUnOCc7N16M/0i5WNGVg4D/NMP9dpzGcCS
6magWnLuPrIrYoRv9AU4pyg6ugMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBS/JLA2
unpU7MBYTWVgRQ2tczCLiTAfBgNVHSMEGDAWgBR+wU18SXaQ3LDJM98z1qaLG5kq
jzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0UxNTcvRTYyQ0E2OEEwQjM2MTFGMTlENzkwMjdDREFFNEVDOUMvZnNGTmZF
bDJrTnl3eVRQZk05YW1peHVaS284LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZnNGTmZFbDJrTnl3eVRQZk05YW1peHVaS284LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0UxNTcvRTYyQ0E2OEEwQjM2MTFGMTlENzkwMjdDREFF
NEVDOUMvNjgxMEYzNjY0M0YxMTFGMTgyMzUwNUY4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbK5DANBgkqhkiG9w0BAQsF
AAOCAQEAtzuipTWbFSrL2+WI3E/gQue1lWUYdg2xQSxz46tYRRQZyKbtWi0Jd3zh
2bm9ktQInMZw0hWTH0ZWrpDi855k3Q3aiKZ+yo1A9oKAXiHEnfwb3yr2X1BMUog3
q+JxEwqNdF+XIDPQkoZLBTSp2QNalQomuOEUVuzkFgcGgKZCIlxVWn8JFulVRpp0
qT4s6YZZRUH2rcJC23FTpRVIFYIhdLYy0nP16dmp/ni2+6mWdk/ZT2PualCHOEzb
WMc9M/OuW+iMZBFeajtK2OTGhILgj/yLa+UAEpGs7/p/TEXPvh42EG/Xyzfvtwma
HxBjEnbxicvP8IdWglihBnGDC/Gg1Q==
-----END CERTIFICATE-----
Generated at Thu May 7 22:21:59 2026 by rpki-client