Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/CD4E82BA8B6E11F193216EB1CE1D38B0.roa
File: CD4E82BA8B6E11F193216EB1CE1D38B0.roa (raw, json)
Hash identifier: Mu9wDlrsbfgrtzH7U7DLk811yCXwYxCebqbQqCj2G48=
Subject key identifier: 7B:23:94:61:C6:5E:2D:B7:DC:EB:EA:C5:62:D2:6D:F6:A1:CF:94:85
Certificate issuer: /CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Certificate serial: 0A95
Authority key identifier: 43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/CD4E82BA8B6E11F193216EB1CE1D38B0.roa
Signing time: Wed 29 Jul 2026 16:59:03 +0000
ROA not before: Wed 29 Jul 2026 16:59:00 +0000
ROA not after: Mon 28 Mar 2033 16:59:00 +0000
asID: 328461
IP address blocks: 102.68.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2709 (0xa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E61B7AF, serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Validity
Not Before: Jul 29 16:59:00 2026 GMT
Not After : Mar 28 16:59:00 2033 GMT
Subject: CN=6a6a3157-cf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:48:4f:3d:15:99:36:f0:9d:75:7a:40:25:
30:af:55:26:9e:4c:95:3d:d4:21:d8:25:24:22:93:
ac:30:f6:7e:b0:52:c4:9c:53:40:3f:b8:fa:08:da:
3a:6c:2e:9d:91:fe:80:ed:2d:bb:54:3e:8c:9a:dc:
87:cf:d4:89:30:b2:8a:2e:36:36:01:a6:c6:16:29:
23:66:43:e0:07:b5:7a:4d:9f:06:ca:a8:d8:42:67:
fd:07:16:33:aa:5c:4f:54:30:ef:e4:61:31:c3:04:
14:23:45:45:5a:e2:14:85:63:be:64:93:9c:57:e2:
29:03:ac:03:0d:e4:02:20:9a:18:a6:89:d8:f1:d7:
56:7f:84:b9:a1:1a:c4:df:8a:12:66:02:32:4a:45:
c0:2e:e2:ff:e6:8b:87:95:80:97:78:0e:cd:32:ba:
45:dc:97:f0:65:bd:80:aa:3e:93:eb:68:17:db:81:
08:48:61:e7:a2:2f:f5:37:fe:db:67:55:2e:96:b9:
f1:d7:c0:d2:8f:75:70:ad:1f:48:6c:0b:ce:f1:bf:
f5:8b:81:7a:8d:5f:19:89:c1:ef:d0:20:4b:9e:ee:
56:34:21:b4:9b:26:e8:f0:c1:b6:7e:ce:70:99:f9:
c9:af:eb:b3:cd:b9:fe:72:a3:18:92:98:d3:e3:96:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:94:61:C6:5E:2D:B7:DC:EB:EA:C5:62:D2:6D:F6:A1:CF:94:85
X509v3 Authority Key Identifier:
keyid:43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/CD4E82BA8B6E11F193216EB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:09:65:40:25:dd:64:03:c8:7e:a7:2c:a5:5f:8c:e7:05:8b:
a3:cb:26:c4:79:70:2b:62:81:70:94:b1:77:7f:77:f8:78:c6:
22:16:a9:f8:53:26:ed:6b:28:7c:36:d9:0c:f9:be:a4:07:ea:
53:fa:90:43:66:7d:42:48:9e:d2:3b:76:34:30:a9:bd:79:a3:
0a:d5:e8:e4:d3:d1:fe:68:20:d6:dc:9e:2f:89:29:18:16:ef:
91:77:6f:1f:dc:81:1a:d8:f9:ee:f3:d3:c6:8a:38:39:64:3a:
1a:b1:c4:93:47:4b:2d:c3:ed:94:61:2d:60:2a:0f:35:e2:0c:
88:cf:4d:f5:bf:67:99:68:34:06:96:06:00:93:60:d9:68:18:
ee:60:e8:3c:b7:02:f5:2b:27:f2:7b:31:db:ff:af:b0:1a:b9:
a5:65:9e:10:85:df:86:33:7e:5c:4c:c5:bb:5b:d7:4d:a5:d4:
06:a2:47:18:26:0c:fb:fa:5d:8e:06:dc:55:1d:e4:6f:77:13:
a4:fd:bb:fe:a6:7a:c4:37:0a:93:5e:e7:91:87:88:43:64:be:
d4:3f:6b:aa:32:b4:f0:ab:8c:b0:e8:57:52:16:36:0a:73:3b:
c1:a8:92:a3:a9:41:60:12:89:86:ed:d5:43:88:82:45:d6:02:
07:d6:23:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTYxQjdBRjExMC8GA1UEBRMoNDM3NkE1NjJENEREODRENEQ2ODkyMjYzMkVCMEJC
MzQyQTZBREE2QTAeFw0yNjA3MjkxNjU5MDBaFw0zMzAzMjgxNjU5MDBaMBgxFjAU
BgNVBAMTDTZhNmEzMTU3LWNmOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC29EhPPRWZNvCddXpAJTCvVSaeTJU91CHYJSQik6ww9n6wUsScU0A/uPoI
2jpsLp2R/oDtLbtUPoya3IfP1IkwsoouNjYBpsYWKSNmQ+AHtXpNnwbKqNhCZ/0H
FjOqXE9UMO/kYTHDBBQjRUVa4hSFY75kk5xX4ikDrAMN5AIgmhimidjx11Z/hLmh
GsTfihJmAjJKRcAu4v/mi4eVgJd4Ds0yukXcl/BlvYCqPpPraBfbgQhIYeeiL/U3
/ttnVS6WufHXwNKPdXCtH0hsC87xv/WLgXqNXxmJwe/QIEue7lY0IbSbJujwwbZ+
znCZ+cmv67PNuf5yoxiSmNPjlr7FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeyOU
YcZeLbfc6+rFYtJt9qHPlIUwHwYDVR0jBBgwFoAUQ3alYtTdhNTWiSJjLrC7NCpq
2mowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2MUI3L0FBODhFNTA2NzM0NjExRTk4Nzk5ODAxRkY4QUVBMjI4L1EzYWxZ
dFRkaE5UV2lTSmpMckM3TkNwcTJtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1EzYWxZdFRkaE5UV2lTSmpMckM3TkNwcTJtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU2MUI3L0FBODhFNTA2NzM0NjExRTk4Nzk5ODAxRkY4
QUVBMjI4L0NENEU4MkJBOEI2RTExRjE5MzIxNkVCMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmRAIwDQYJKoZIhvcNAQEL
BQADggEBAA8JZUAl3WQDyH6nLKVfjOcFi6PLJsR5cCtigXCUsXd/d/h4xiIWqfhT
Ju1rKHw22Qz5vqQH6lP6kENmfUJIntI7djQwqb15owrV6OTT0f5oINbcni+JKRgW
75F3bx/cgRrY+e7z08aKODlkOhqxxJNHSy3D7ZRhLWAqDzXiDIjPTfW/Z5loNAaW
BgCTYNloGO5g6Dy3AvUrJ/J7Mdv/r7AauaVlnhCF34YzflxMxbtb102l1AaiRxgm
DPv6XY4G3FUd5G93E6T9u/6mesQ3CpNe55GHiENkvtQ/a6oytPCrjLDoV1IWNgpz
O8GokqOpQWASiYbt1UOIgkXWAgfWI/c=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:18 2026 by rpki-client