Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/8524123E8CF911F19032F61CCF1D38B0.roa
File: 8524123E8CF911F19032F61CCF1D38B0.roa (raw, json)
Hash identifier: 4VLJkcFCLAMaOfrVFnm4+gkXEwX6o/HDCHabYEKY8ew=
Subject key identifier: 1F:64:09:5C:0D:56:FE:43:7F:01:16:1C:DE:5D:2E:8E:3A:FE:AC:D8
Certificate issuer: /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial: 0727
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/8524123E8CF911F19032F61CCF1D38B0.roa
Signing time: Fri 31 Jul 2026 16:04:34 +0000
ROA not before: Fri 31 Jul 2026 16:04:30 +0000
ROA not after: Fri 31 Dec 2049 16:04:30 +0000
asID: 37254
IP address blocks: 102.69.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8561AF, serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Validity
Not Before: Jul 31 16:04:30 2026 GMT
Not After : Dec 31 16:04:30 2049 GMT
Subject: CN=6a6cc792-143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:5c:6c:96:6f:0e:a8:96:f2:2d:a3:4e:80:
17:0e:a2:44:8f:af:09:09:11:9d:bc:4e:97:80:6d:
78:81:45:23:bb:67:d5:61:da:ea:f3:38:e1:a5:95:
cc:d1:dd:78:ac:db:4f:af:bc:f9:fb:31:94:82:3b:
53:b9:8d:33:00:74:41:f6:86:7d:08:f2:1f:1c:08:
1b:77:d6:ba:55:ab:68:f8:d4:b0:0c:ff:1d:3d:ee:
f2:9b:7f:a5:34:2b:52:87:c9:a4:ed:6e:9e:06:ba:
df:ec:5b:65:21:4e:e3:27:ca:55:af:81:cd:05:ca:
58:73:b1:eb:da:aa:fc:1f:71:1e:79:16:7f:54:b0:
0d:14:ff:c3:e5:10:cb:c1:3b:63:c9:96:36:3c:2f:
22:32:54:0f:d1:5d:fa:44:a2:64:8b:10:ed:0d:89:
06:30:da:eb:99:81:a0:92:4a:ac:41:b8:24:a1:13:
8a:11:de:98:ac:06:5f:60:c6:71:03:ed:92:a1:2e:
37:f3:81:0a:32:0c:1e:70:c5:eb:6a:a0:92:4a:82:
ab:5a:89:12:1c:f0:46:14:b7:fc:eb:f3:be:be:f1:
59:c1:2d:aa:0d:64:7b:95:88:5b:50:af:ac:0a:bc:
73:4c:de:89:3d:3e:13:eb:07:ba:10:5b:cb:69:f9:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:09:5C:0D:56:FE:43:7F:01:16:1C:DE:5D:2E:8E:3A:FE:AC:D8
X509v3 Authority Key Identifier:
keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/8524123E8CF911F19032F61CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:8f:fc:b1:f6:ac:25:07:28:99:c4:51:53:28:49:88:96:6d:
46:50:6b:ae:05:28:08:de:03:cd:8e:4a:08:2e:02:c7:b2:e1:
f1:7c:38:9d:7c:8e:35:97:9e:38:a7:bd:a9:04:1a:68:65:5a:
cb:5b:63:e1:e7:a0:1d:cd:3d:a8:02:fe:6a:16:12:3e:27:d7:
b1:23:8c:a6:d9:a7:8b:c8:72:ca:e4:d2:97:be:33:7d:17:be:
cd:21:b1:c4:af:7c:0b:9e:4e:d3:f0:fe:d2:d8:3d:4b:2d:32:
50:95:54:fa:46:33:d8:99:48:3c:f6:db:17:a4:3e:24:fc:16:
88:bd:2d:36:40:88:e3:65:2a:d5:92:5b:bd:83:11:ad:9a:3a:
08:f7:49:4c:4c:96:3a:bb:75:69:80:eb:f6:d6:8d:d6:21:bb:
a8:af:25:b9:8e:8c:9d:4b:41:47:3d:56:e1:13:e7:96:15:37:
9b:6d:2b:34:73:b8:83:9f:7b:fe:ad:8d:b9:7a:5e:93:2d:9c:
a9:b4:75:02:53:50:5c:77:b7:c6:49:b3:12:c0:9a:ee:a8:06:
d9:60:0d:87:ea:45:46:b2:66:b4:fb:6d:35:41:e0:f1:1a:f4:
6c:de:65:0c:ac:30:7e:98:fa:a6:97:0d:55:d9:80:47:28:c5:
4a:25:2d:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBycwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTg1NjFBRjExMC8GA1UEBRMoQkRGNkY5OUNEMDgyQzEzQkVEQTVEQTBFODk4ODhE
RDUzMkM4NjMwNzAeFw0yNjA3MzExNjA0MzBaFw00OTEyMzExNjA0MzBaMBgxFjAU
BgNVBAMTDTZhNmNjNzkyLTE0M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqjlxslm8OqJbyLaNOgBcOokSPrwkJEZ28TpeAbXiBRSO7Z9Vh2urzOOGl
lczR3Xis20+vvPn7MZSCO1O5jTMAdEH2hn0I8h8cCBt31rpVq2j41LAM/x097vKb
f6U0K1KHyaTtbp4Gut/sW2UhTuMnylWvgc0FylhzsevaqvwfcR55Fn9UsA0U/8Pl
EMvBO2PJljY8LyIyVA/RXfpEomSLEO0NiQYw2uuZgaCSSqxBuCShE4oR3pisBl9g
xnED7ZKhLjfzgQoyDB5wxetqoJJKgqtaiRIc8EYUt/zr876+8VnBLaoNZHuViFtQ
r6wKvHNM3ok9PhPrB7oQW8tp+dzVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUH2QJ
XA1W/kN/ARYc3l0ujjr+rNgwHwYDVR0jBBgwFoAUvfb5nNCCwTvtpdoOiYiN1TLI
YwcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4NTYxL0IwRDcyMEUwMUMzRjExRUNCQTIyMEQwQkQ4QTAxNENFL3ZmYjVu
TkNDd1R2dHBkb09pWWlOMVRMSVl3Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZmYjVuTkNDd1R2dHBkb09pWWlOMVRMSVl3Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU4NTYxL0IwRDcyMEUwMUMzRjExRUNCQTIyMEQwQkQ4
QTAxNENFLzg1MjQxMjNFOENGOTExRjE5MDMyRjYxQ0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmRagwDQYJKoZIhvcNAQEL
BQADggEBAH+P/LH2rCUHKJnEUVMoSYiWbUZQa64FKAjeA82OSgguAsey4fF8OJ18
jjWXnjinvakEGmhlWstbY+HnoB3NPagC/moWEj4n17EjjKbZp4vIcsrk0pe+M30X
vs0hscSvfAueTtPw/tLYPUstMlCVVPpGM9iZSDz22xekPiT8Foi9LTZAiONlKtWS
W72DEa2aOgj3SUxMljq7dWmA6/bWjdYhu6ivJbmOjJ1LQUc9VuET55YVN5ttKzRz
uIOfe/6tjbl6XpMtnKm0dQJTUFx3t8ZJsxLAmu6oBtlgDYfqRUayZrT7bTVB4PEa
9GzeZQysMH6Y+qaXDVXZgEcoxUolLZo=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:20 2026 by rpki-client