Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E1D5B8C764311F1B543E4BFCE1D38B0.roa
File: 4E1D5B8C764311F1B543E4BFCE1D38B0.roa (raw, json)
Hash identifier: +cJM84PlpqtRLP964BqK6vLVhHYYIXBRvXqOpD0lQhg=
Subject key identifier: EB:64:71:58:7D:C2:35:CC:A8:AA:94:2A:F7:35:AE:CE:C0:7F:D4:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1937
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E1D5B8C764311F1B543E4BFCE1D38B0.roa
Signing time: Thu 02 Jul 2026 18:24:47 +0000
ROA not before: Thu 02 Jul 2026 18:24:43 +0000
ROA not after: Sun 02 Jul 2028 18:24:43 +0000
asID: 199741
IP address blocks: 102.165.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6455 (0x1937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 18:24:43 2026 GMT
Not After : Jul 2 18:24:43 2028 GMT
Subject: CN=6a46acef-3882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:34:bf:72:3e:12:11:bb:f6:c6:fb:d1:c4:
8f:f1:3c:85:a8:86:40:c3:bc:ac:4b:de:75:f4:44:
2a:57:ac:18:7b:57:f6:2f:78:b9:19:83:62:b8:77:
81:d3:64:46:56:65:f3:eb:88:88:24:d8:dc:4a:23:
14:60:18:ad:9f:b6:97:60:c9:a9:10:e1:aa:00:ed:
8b:3e:3b:5a:d1:a3:61:6c:aa:c1:0d:23:94:e7:4b:
37:cd:9a:44:f0:8a:f2:26:b2:a6:4f:0c:c9:52:58:
82:98:41:c6:b1:7a:34:df:d6:04:1d:50:ea:19:0f:
28:41:4c:f2:90:e7:b3:85:79:8f:12:c6:58:92:ec:
bf:ce:6e:47:b4:18:c4:22:c9:1b:21:f4:f4:28:69:
df:c2:9f:85:54:4e:6e:05:dc:26:85:bd:b5:a2:42:
5b:85:3b:04:a0:39:e5:b8:e7:b4:d5:9b:92:b2:bb:
23:33:68:56:5c:67:21:2c:d7:81:ac:ca:16:a3:e5:
bf:95:43:c6:5b:be:ec:d3:ca:da:b5:37:c5:2d:f2:
37:cf:ae:4f:70:ee:47:6e:84:61:ee:20:df:49:88:
9a:e7:6b:e9:b0:2a:c7:d4:f5:99:50:f8:22:7e:33:
5c:17:cf:94:22:36:5c:08:2d:41:cf:f1:1e:40:02:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:64:71:58:7D:C2:35:CC:A8:AA:94:2A:F7:35:AE:CE:C0:7F:D4:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E1D5B8C764311F1B543E4BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.56.0/24
Signature Algorithm: sha256WithRSAEncryption
53:29:f6:3a:12:cd:7c:12:28:49:39:62:57:a4:35:cc:0a:0a:
6d:e2:e4:a4:00:6a:bf:e2:f7:24:c6:26:d0:7c:c1:3f:8c:15:
11:6a:b4:12:a3:65:3d:a2:4f:eb:ed:0f:66:d6:3c:8b:96:ee:
36:73:ee:d5:ba:72:bb:b7:d5:c0:14:1e:15:57:35:da:fd:ff:
0c:6d:19:7b:4c:85:c7:e1:e6:f6:25:85:39:2b:3f:c6:f4:02:
39:ea:10:78:04:85:2f:90:ed:62:3c:3c:63:fc:b3:6c:20:13:
b9:3f:ce:24:b7:5a:de:08:7a:9e:55:d4:07:89:4d:71:ac:45:
a3:76:01:3f:31:e0:5b:d1:01:40:1a:71:a2:26:45:d8:e5:c3:
96:9e:47:65:46:2c:01:54:71:a9:27:aa:90:c7:3a:b1:14:d8:
14:69:f0:d5:86:cd:c0:d8:9c:24:32:4b:7a:a1:a0:14:d5:34:
71:c2:7a:05:d0:99:d4:74:1d:50:80:d0:f7:34:d0:7a:73:7a:
37:ef:de:25:ee:cd:52:2e:4e:af:12:6d:b6:e9:06:1c:0b:25:
de:85:07:18:25:e2:34:b3:93:c4:e6:c5:bf:60:63:b9:98:6e:
fe:56:dc:83:d7:26:ce:72:d8:5d:ea:67:4d:c9:e5:00:ca:ff:
26:9e:9d:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGTcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA3MDIxODI0NDNaFw0yODA3MDIxODI0NDNaMBgxFjAU
BgNVBAMTDTZhNDZhY2VmLTM4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC77zS/cj4SEbv2xvvRxI/xPIWohkDDvKxL3nX0RCpXrBh7V/YveLkZg2K4
d4HTZEZWZfPriIgk2NxKIxRgGK2ftpdgyakQ4aoA7Ys+O1rRo2FsqsENI5TnSzfN
mkTwivImsqZPDMlSWIKYQcaxejTf1gQdUOoZDyhBTPKQ57OFeY8SxliS7L/Obke0
GMQiyRsh9PQoad/Cn4VUTm4F3CaFvbWiQluFOwSgOeW457TVm5KyuyMzaFZcZyEs
14Gsyhaj5b+VQ8ZbvuzTytq1N8Ut8jfPrk9w7kduhGHuIN9JiJrna+mwKsfU9ZlQ
+CJ+M1wXz5QiNlwILUHP8R5AAjoRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU62Rx
WH3CNcyoqpQq9zWuzsB/1GcwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzRFMUQ1QjhDNzY0MzExRjFCNTQzRTRCRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTgwDQYJKoZIhvcNAQEL
BQADggEBAFMp9joSzXwSKEk5YlekNcwKCm3i5KQAar/i9yTGJtB8wT+MFRFqtBKj
ZT2iT+vtD2bWPIuW7jZz7tW6cru31cAUHhVXNdr9/wxtGXtMhcfh5vYlhTkrP8b0
AjnqEHgEhS+Q7WI8PGP8s2wgE7k/ziS3Wt4Iep5V1AeJTXGsRaN2AT8x4FvRAUAa
caImRdjlw5aeR2VGLAFUcaknqpDHOrEU2BRp8NWGzcDYnCQyS3qhoBTVNHHCegXQ
mdR0HVCA0Pc00Hpzejfv3iXuzVIuTq8SbbbpBhwLJd6FBxgl4jSzk8Tmxb9gY7mY
bv5W3IPXJs5y2F3qZ03J5QDK/yaenco=
-----END CERTIFICATE-----
Generated at Fri Jul 3 06:27:11 2026 by rpki-client