Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/1276AD646A6211F19EC4A6C6CE1D38B0.roa
File: 1276AD646A6211F19EC4A6C6CE1D38B0.roa (raw, json)
Hash identifier: H7W6p0/KeMOWTk3DtLdG+krMnptu7xkOg7u0jb5Kx3k=
Subject key identifier: 6B:92:17:B3:B7:56:48:90:3E:DA:5C:C0:AE:DC:34:63:D6:AB:4F:B1
Certificate issuer: /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial: 0613
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/1276AD646A6211F19EC4A6C6CE1D38B0.roa
Signing time: Wed 17 Jun 2026 15:34:48 +0000
ROA not before: Wed 17 Jun 2026 15:34:43 +0000
ROA not after: Thu 17 Jun 2038 15:34:43 +0000
asID: 37150
IP address blocks: 102.129.96.0/19 maxlen: 24
196.40.176.0/20 maxlen: 24
196.46.176.0/21 maxlen: 24
2c0f:fdf0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D70D9AF, serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Validity
Not Before: Jun 17 15:34:43 2026 GMT
Not After : Jun 17 15:34:43 2038 GMT
Subject: CN=6a32be98-adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:26:c9:4d:d1:c9:69:58:25:5b:a5:d8:72:
c6:10:72:d4:97:2f:f8:58:50:cb:ae:d1:40:fb:97:
5e:09:d0:80:ae:f5:bb:65:1e:7f:5d:a1:26:1e:0f:
52:4b:f1:31:fd:69:d6:5f:c0:90:73:97:a6:d7:3d:
a1:df:f5:c5:aa:e3:38:db:bd:1f:d1:b8:d4:74:a6:
c2:5d:62:54:30:16:b1:b6:99:df:6f:92:62:b4:1e:
45:c8:e2:d5:f0:9b:a2:96:2d:91:c6:7d:e3:5d:e4:
d2:43:1c:fa:ca:6c:19:2f:ac:40:83:7c:da:0e:3f:
e0:34:e1:fb:be:39:94:5f:5a:21:75:fb:34:c8:25:
01:d9:c9:44:31:3f:ea:4e:9f:9b:6e:a9:8e:b1:bd:
91:7a:b6:41:c6:6f:66:01:1b:48:e1:e7:36:ba:37:
18:41:7d:c6:4b:de:63:d6:23:a7:36:bb:33:b9:34:
40:ac:7d:29:06:12:ac:1f:84:6a:7e:98:46:8c:60:
8a:8c:b3:cb:6b:f0:f0:27:f7:12:d1:6e:ab:a9:ce:
a8:55:7a:39:0d:e5:12:ad:a5:17:3a:8b:60:1e:61:
79:0d:9e:ea:57:99:ce:4c:e8:4f:3a:a0:5e:26:a8:
ce:a2:b5:64:2f:84:e2:b6:1f:e4:bd:c8:35:b5:57:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:17:B3:B7:56:48:90:3E:DA:5C:C0:AE:DC:34:63:D6:AB:4F:B1
X509v3 Authority Key Identifier:
keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/1276AD646A6211F19EC4A6C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.96.0/19
196.40.176.0/20
196.46.176.0/21
IPv6:
2c0f:fdf0::/32
Signature Algorithm: sha256WithRSAEncryption
d3:6d:3a:00:71:e2:dc:1a:cb:68:33:67:78:3e:cf:de:98:41:
6c:8c:b5:82:57:c7:09:c8:26:7f:b6:64:9b:96:2d:01:d4:8e:
77:e9:e4:b7:34:98:3d:af:0c:f4:75:d5:c6:4f:bd:48:0a:b3:
3c:d4:3e:f9:09:a1:a7:08:5d:15:14:0f:31:c7:b8:f6:cf:40:
17:73:ce:2e:c8:87:19:61:9b:26:92:67:a6:fe:b8:d1:3d:c6:
f8:d2:e8:cb:d7:2f:10:8a:57:ef:a1:1f:eb:f8:c4:b1:8d:0c:
55:e9:bc:d6:c9:60:e7:47:51:71:9d:60:3a:4e:be:37:20:65:
22:0c:43:fa:1c:06:a6:ca:20:35:eb:0b:f7:25:7e:47:9e:5d:
56:39:8c:f7:a6:26:c1:4c:8b:47:01:d1:6f:d9:b2:98:e8:76:
53:9f:2c:c7:ea:6f:13:11:35:dc:8d:f7:87:72:03:eb:93:54:
99:fa:3e:bd:67:76:51:7d:fb:54:05:dd:b0:ff:41:b8:89:96:
19:e6:0c:80:6d:03:da:26:fb:7b:5c:28:29:3b:48:8a:2d:6f:
4c:64:2b:01:89:9f:57:60:55:bf:3f:d4:6e:6d:4b:a8:b7:db:
09:7f:8e:76:9f:dc:7f:9a:86:cb:0c:e8:6c:8d:69:4e:65:c9:
33:35:be:37
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDcwRDlBRjExMC8GA1UEBRMoQ0Q3NEVEMzY1ODMzNENBMjgxMzJENjk2RUY3MEU5
MENBM0Y2NjdDMzAeFw0yNjA2MTcxNTM0NDNaFw0zODA2MTcxNTM0NDNaMBgxFjAU
BgNVBAMTDTZhMzJiZTk4LWFkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrHybJTdHJaVglW6XYcsYQctSXL/hYUMuu0UD7l14J0ICu9btlHn9doSYe
D1JL8TH9adZfwJBzl6bXPaHf9cWq4zjbvR/RuNR0psJdYlQwFrG2md9vkmK0HkXI
4tXwm6KWLZHGfeNd5NJDHPrKbBkvrECDfNoOP+A04fu+OZRfWiF1+zTIJQHZyUQx
P+pOn5tuqY6xvZF6tkHGb2YBG0jh5za6NxhBfcZL3mPWI6c2uzO5NECsfSkGEqwf
hGp+mEaMYIqMs8tr8PAn9xLRbqupzqhVejkN5RKtpRc6i2AeYXkNnupXmc5M6E86
oF4mqM6itWQvhOK2H+S9yDW1V1KVAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQUa5IX
s7dWSJA+2lzArtw0Y9arT7EwHwYDVR0jBBgwFoAUzXTtNlgzTKKBMtaW73DpDKP2
Z8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ3MEQ5LzNBMzRCMzQ4Qzc4NTExRUM5NDMyQkU5OEYxMjIyNDY4L3pYVHRO
bGd6VEtLQk10YVc3M0RwREtQMlo4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pYVHRObGd6VEtLQk10YVc3M0RwREtQMlo4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQ3MEQ5LzNBMzRCMzQ4Qzc4NTExRUM5NDMyQkU5OEYx
MjIyNDY4LzEyNzZBRDY0NkE2MjExRjE5RUM0QTZDNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAVmgWADBATEKLADBAPELrAw
DQQCAAIwBwMFACwP/fAwDQYJKoZIhvcNAQELBQADggEBANNtOgBx4tway2gzZ3g+
z96YQWyMtYJXxwnIJn+2ZJuWLQHUjnfp5Lc0mD2vDPR11cZPvUgKszzUPvkJoacI
XRUUDzHHuPbPQBdzzi7IhxlhmyaSZ6b+uNE9xvjS6MvXLxCKV++hH+v4xLGNDFXp
vNbJYOdHUXGdYDpOvjcgZSIMQ/ocBqbKIDXrC/clfkeeXVY5jPemJsFMi0cB0W/Z
spjodlOfLMfqbxMRNdyN94dyA+uTVJn6Pr1ndlF9+1QF3bD/QbiJlhnmDIBtA9om
+3tcKCk7SIotb0xkKwGJn1dgVb8/1G5tS6i32wl/jnaf3H+ahssM6GyNaU5lyTM1
vjc=
-----END CERTIFICATE-----
Generated at Mon Jun 22 00:59:23 2026 by rpki-client