Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32EC66AC503A11F18386B9BBCE1D38B0.roa
File: 32EC66AC503A11F18386B9BBCE1D38B0.roa (raw, json)
Hash identifier: 9Un0Wo5xz1ykg1dPpJUw5rOZctTEjXm106l6ONKoWgI=
Subject key identifier: FC:24:D2:C6:15:2E:B4:5C:4C:8B:3E:BF:B0:8B:A8:19:51:2B:65:2F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1874
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32EC66AC503A11F18386B9BBCE1D38B0.roa
Signing time: Fri 15 May 2026 08:43:52 +0000
ROA not before: Fri 15 May 2026 08:43:47 +0000
ROA not after: Mon 15 May 2028 08:43:47 +0000
asID: 834
IP address blocks: 102.165.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 19 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6260 (0x1874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 15 08:43:47 2026 GMT
Not After : May 15 08:43:47 2028 GMT
Subject: CN=6a06dcc8-ad1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:d5:1e:6a:a6:92:08:88:17:fe:f5:1e:a9:
0d:26:f8:61:9e:d9:1c:1a:45:b9:b2:8c:4b:52:ed:
48:26:6e:65:41:a3:87:27:41:f1:eb:af:57:22:d4:
70:ee:5c:09:0e:4d:51:01:f3:48:5a:27:87:eb:a0:
1c:19:47:da:93:c6:83:e0:b5:f3:5f:37:27:85:66:
52:36:c9:5c:e3:6d:92:f4:d9:a4:70:86:12:25:33:
0c:a6:13:fb:70:d7:e6:99:e0:90:61:2e:e7:cb:28:
59:04:ec:78:4c:a5:9d:d7:a3:7f:f9:cb:7b:69:00:
82:ea:a1:a8:7f:31:a7:2e:2e:4b:6c:bc:0c:75:d2:
5f:03:a2:39:7d:3e:77:8e:1d:19:2a:4d:02:98:50:
72:63:57:cb:38:84:9d:2c:0d:c5:cf:e9:2f:ec:cd:
69:9c:5c:30:8b:ce:80:33:17:45:e5:f6:97:a5:8c:
2a:eb:1b:5c:4f:af:0b:12:3d:72:b7:ed:d7:e7:60:
34:e5:2e:19:e3:23:fd:ce:3b:c3:27:f5:d0:3c:e7:
8c:b9:1f:cf:94:0f:75:a0:c3:2a:3c:cb:f2:20:f5:
b5:df:6d:74:96:e3:e7:43:09:f1:43:1b:79:ac:ae:
b3:f5:d4:8b:6c:92:f2:bb:f7:d1:76:ce:1a:63:f0:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:D2:C6:15:2E:B4:5C:4C:8B:3E:BF:B0:8B:A8:19:51:2B:65:2F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32EC66AC503A11F18386B9BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d8:e4:8c:d2:05:11:a9:ee:5b:87:64:c0:ef:53:14:7a:95:
c9:53:c9:1d:05:02:da:4b:81:b8:bc:a6:10:b7:e0:a0:fc:a8:
7f:09:8a:37:8d:b5:6f:90:ae:6a:0e:15:4b:6f:70:55:e9:9e:
eb:0d:02:96:1c:ed:90:15:c5:e6:64:df:c6:76:eb:86:ee:6f:
69:a0:ed:ce:c9:46:0b:b3:f0:cb:19:6d:4c:1f:c2:53:14:4c:
66:bc:73:0a:b5:dd:05:99:0b:fe:f7:30:97:96:05:d7:37:7a:
58:d8:16:b2:05:0d:da:66:98:79:69:74:16:ab:8f:4a:88:4f:
a8:2d:26:68:f4:10:49:ba:ee:5b:d8:8a:b5:fd:e9:48:a1:90:
5e:47:aa:fb:83:3e:ea:d3:1d:3a:97:03:91:bd:0f:18:3a:0a:
cf:35:fc:86:9d:f4:ad:b8:1c:bc:64:b2:3f:99:93:b4:12:e2:
5f:b6:93:69:99:28:3b:e0:cc:99:4f:c2:9e:c7:86:6b:dc:5a:
fc:f4:44:2f:0e:ef:03:a3:36:f0:17:a7:05:67:9a:c3:02:af:
c4:8a:36:3b:79:a4:20:b9:fb:2b:c8:de:2c:0f:46:66:77:6b:
df:7b:0c:c1:cc:4a:ea:ff:6c:22:e3:51:90:26:7c:77:a2:d8:
10:ba:31:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGHQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA1MTUwODQzNDdaFw0yODA1MTUwODQzNDdaMBgxFjAU
BgNVBAMTDTZhMDZkY2M4LWFkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg0dUeaqaSCIgX/vUeqQ0m+GGe2RwaRbmyjEtS7UgmbmVBo4cnQfHrr1ci
1HDuXAkOTVEB80haJ4froBwZR9qTxoPgtfNfNyeFZlI2yVzjbZL02aRwhhIlMwym
E/tw1+aZ4JBhLufLKFkE7HhMpZ3Xo3/5y3tpAILqoah/MacuLktsvAx10l8Dojl9
PneOHRkqTQKYUHJjV8s4hJ0sDcXP6S/szWmcXDCLzoAzF0Xl9peljCrrG1xPrwsS
PXK37dfnYDTlLhnjI/3OO8Mn9dA854y5H8+UD3Wgwyo8y/Ig9bXfbXSW4+dDCfFD
G3msrrP11ItskvK799F2zhpj8Kw/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/CTS
xhUutFxMiz6/sIuoGVErZS8wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzMyRUM2NkFDNTAzQTExRjE4Mzg2QjlCQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQAwDQYJKoZIhvcNAQEL
BQADggEBAAbY5IzSBRGp7luHZMDvUxR6lclTyR0FAtpLgbi8phC34KD8qH8JijeN
tW+QrmoOFUtvcFXpnusNApYc7ZAVxeZk38Z264bub2mg7c7JRguz8MsZbUwfwlMU
TGa8cwq13QWZC/73MJeWBdc3eljYFrIFDdpmmHlpdBarj0qIT6gtJmj0EEm67lvY
irX96UihkF5HqvuDPurTHTqXA5G9Dxg6Cs81/Iad9K24HLxksj+Zk7QS4l+2k2mZ
KDvgzJlPwp7HhmvcWvz0RC8O7wOjNvAXpwVnmsMCr8SKNjt5pCC5+yvI3iwPRmZ3
a997DMHMSur/bCLjUZAmfHei2BC6MZs=
-----END CERTIFICATE-----
Generated at Sun May 17 20:45:10 2026 by rpki-client