Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/B483DD5260AD11F186FE20D2CE1D38B0.roa
File: B483DD5260AD11F186FE20D2CE1D38B0.roa (raw, json)
Hash identifier: N08HMzaJrPQG98yF1dW42tjXRI8KTIgg1jSIS0yuaAc=
Subject key identifier: 53:9F:76:DF:BA:40:58:A1:6D:BD:82:FE:BB:05:CF:65:7A:FE:4C:24
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 0644
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/B483DD5260AD11F186FE20D2CE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:11:00 +0000
ROA not before: Fri 05 Jun 2026 07:10:55 +0000
ROA not after: Wed 31 Dec 2042 07:10:55 +0000
asID: 23889
IP address blocks: 102.112.0.0/13 maxlen: 24
196.20.128.0/17 maxlen: 24
196.192.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Validity
Not Before: Jun 5 07:10:55 2026 GMT
Not After : Dec 31 07:10:55 2042 GMT
Subject: CN=6a227684-6183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:00:65:75:1b:6c:2e:3e:f6:91:06:05:5f:
b0:83:95:6b:c3:93:6e:63:4c:a6:43:c2:71:93:4f:
f3:55:ce:df:63:ea:a3:8a:8a:9b:8a:c0:e8:38:e8:
da:f6:69:d9:8d:65:2d:51:b8:b7:88:17:f0:e6:3a:
82:65:8c:b0:18:28:b3:69:cb:af:23:2d:36:56:45:
88:0c:7b:9a:06:b5:0a:e2:f5:5a:d0:8f:9a:46:02:
1c:fd:2e:59:5d:12:a5:f7:63:02:0a:02:67:c6:62:
65:c3:19:1a:cb:f9:05:cb:3b:6f:d0:f9:43:f3:f4:
bf:15:55:cd:9d:e3:42:ed:94:44:05:39:49:3a:6c:
46:7f:26:00:30:8a:19:a8:97:ba:16:b5:9c:54:24:
db:41:ac:d1:57:ef:06:c3:cc:5c:9e:b6:30:0e:c8:
ec:d1:f4:8d:06:cb:33:96:28:a9:d3:9b:17:cb:0c:
41:e0:66:8a:a3:59:64:7e:0a:9f:bb:b4:a3:65:ab:
6f:2f:72:6b:ca:da:0f:04:32:03:ea:5d:8c:d0:33:
94:f6:17:0c:31:bd:2b:85:ba:23:c6:13:36:84:43:
2e:3a:fa:93:6e:e2:5a:89:04:49:24:9b:fd:91:40:
5a:6a:ad:dd:ca:f6:2a:05:ae:5c:f1:e7:1b:f5:f2:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:76:DF:BA:40:58:A1:6D:BD:82:FE:BB:05:CF:65:7A:FE:4C:24
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/B483DD5260AD11F186FE20D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.112.0.0/13
196.20.128.0/17
196.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:d2:d4:0d:94:0e:fb:e6:06:3e:b8:7e:d1:0f:f0:84:fd:ad:
75:83:b0:6f:db:f5:58:9b:9c:56:00:f5:28:e2:d5:7f:41:a2:
1e:a0:83:08:1e:8f:fe:5e:9a:d0:d3:00:b8:54:2a:94:ec:60:
79:ef:0b:60:00:cd:9a:ae:a6:a0:4a:06:ee:44:e3:27:7b:b2:
b8:b8:57:e5:cc:fe:6b:e4:35:a1:f9:04:d4:c3:a3:a9:70:b0:
27:68:43:f7:62:31:31:57:8a:1d:0d:b1:bb:68:d7:55:df:99:
43:85:9e:6d:ff:0a:fd:fe:67:3f:2d:18:9d:9a:8e:ba:af:02:
19:09:04:b3:48:69:a1:49:a3:fa:eb:77:37:ff:24:c5:21:78:
a2:af:ab:cc:01:92:82:24:c6:87:b1:d0:0d:64:4f:ab:1a:20:
b6:0f:e2:2e:12:2d:bd:ca:be:c9:7e:c4:30:8c:ec:d0:52:5c:
6f:5d:f7:b7:16:fe:3d:df:a2:52:b3:e1:bb:c5:ff:5c:53:7b:
64:30:d0:93:1b:ac:46:25:4b:66:fd:aa:f7:dc:20:6b:1b:dc:
6c:8f:dd:9b:05:9a:cb:cf:e6:d7:d3:5c:8a:67:c5:53:59:78:
5b:2d:29:d6:38:fa:1c:62:29:cf:c7:b4:ae:1f:86:30:7e:84:
4d:1c:fc:05
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDM5MzBBRjExMC8GA1UEBRMoMzVDRjA2N0RDMjZFRTQ4OTVGNEIxNkFEOUJEMzAw
RkVBQkMzQTM1MzAeFw0yNjA2MDUwNzEwNTVaFw00MjEyMzEwNzEwNTVaMBgxFjAU
BgNVBAMTDTZhMjI3Njg0LTYxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxMABldRtsLj72kQYFX7CDlWvDk25jTKZDwnGTT/NVzt9j6qOKipuKwOg4
6Nr2admNZS1RuLeIF/DmOoJljLAYKLNpy68jLTZWRYgMe5oGtQri9VrQj5pGAhz9
LlldEqX3YwIKAmfGYmXDGRrL+QXLO2/Q+UPz9L8VVc2d40LtlEQFOUk6bEZ/JgAw
ihmol7oWtZxUJNtBrNFX7wbDzFyetjAOyOzR9I0GyzOWKKnTmxfLDEHgZoqjWWR+
Cp+7tKNlq28vcmvK2g8EMgPqXYzQM5T2FwwxvSuFuiPGEzaEQy46+pNu4lqJBEkk
m/2RQFpqrd3K9ioFrlzx5xv18m1JAgMBAAGjggKwMIICrDAdBgNVHQ4EFgQUU592
37pAWKFtvYL+uwXPZXr+TCQwHwYDVR0jBBgwFoAUNc8GfcJu5IlfSxatm9MA/qvD
o1MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzOTMwLzYzQzQ2RUM4QTBGMzExRUM5NDZFREE5NDVBNDBENTc3L05jOEdm
Y0p1NUlsZlN4YXRtOU1BX3F2RG8xTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05jOEdmY0p1NUlsZlN4YXRtOU1BX3F2RG8xTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQzOTMwLzYzQzQ2RUM4QTBGMzExRUM5NDZFREE5NDVB
NDBENTc3L0I0ODNERDUyNjBBRDExRjE4NkZFMjBEMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgABMBEDAwNmcAMEB8QUgAMEBMTAADAN
BgkqhkiG9w0BAQsFAAOCAQEAa9LUDZQO++YGPrh+0Q/whP2tdYOwb9v1WJucVgD1
KOLVf0GiHqCDCB6P/l6a0NMAuFQqlOxgee8LYADNmq6moEoG7kTjJ3uyuLhX5cz+
a+Q1ofkE1MOjqXCwJ2hD92IxMVeKHQ2xu2jXVd+ZQ4Webf8K/f5nPy0YnZqOuq8C
GQkEs0hpoUmj+ut3N/8kxSF4oq+rzAGSgiTGh7HQDWRPqxogtg/iLhItvcq+yX7E
MIzs0FJcb133txb+Pd+iUrPhu8X/XFN7ZDDQkxusRiVLZv2q99wgaxvcbI/dmwWa
y8/m19NcimfFU1l4Wy0p1jj6HGIpz8e0rh+GMH6ETRz8BQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:30 2026 by rpki-client