Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/5156704C8D7511F1B90CF51ACF1D38B0.roa
File: 5156704C8D7511F1B90CF51ACF1D38B0.roa (raw, json)
Hash identifier: 3A2ssmGFuuN+MJD7vHz6VAcC5JTqcWYRQfIkL36SqRI=
Subject key identifier: 83:5E:01:CE:D7:A4:AC:B3:2B:F9:52:3F:3B:65:1D:9C:8E:B5:66:B2
Certificate issuer: /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial: 0635
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/5156704C8D7511F1B90CF51ACF1D38B0.roa
Signing time: Sat 01 Aug 2026 06:50:44 +0000
ROA not before: Sat 01 Aug 2026 06:50:39 +0000
ROA not after: Thu 13 May 2032 06:50:39 +0000
asID: 328510
IP address blocks: 102.38.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Validity
Not Before: Aug 1 06:50:39 2026 GMT
Not After : May 13 06:50:39 2032 GMT
Subject: CN=6a6d9744-57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:25:cb:9c:00:c1:ce:54:6e:61:42:09:32:
8d:e5:83:5f:db:79:7b:24:5e:d1:e4:03:33:74:e8:
f9:c5:eb:f6:b9:ba:34:65:a4:ae:64:65:a3:a3:38:
82:e5:dd:18:cc:81:db:a1:63:ce:51:85:07:91:72:
f0:3e:5b:70:91:cd:d9:02:77:26:6f:36:3a:db:b0:
e5:cd:49:ce:f5:eb:6d:60:08:91:65:fa:2b:20:f9:
ff:6c:11:0d:66:6b:d6:d1:1a:52:8c:81:6e:c5:2f:
38:23:81:be:10:cd:36:16:11:ee:32:fc:b9:af:a1:
71:08:b6:c9:07:0e:fc:e0:e8:6b:b2:7e:49:a0:ae:
87:cd:2c:4d:56:f5:cb:82:4d:59:4c:14:05:bc:fe:
cd:d5:f0:53:98:5b:60:c0:b9:54:5b:44:1b:38:88:
8f:a5:b1:c9:c4:04:fb:d9:57:62:db:19:62:3d:55:
7a:9a:ab:2a:e0:9d:88:9a:6a:2a:8a:4b:ff:7e:b6:
fb:0d:6c:42:87:c9:52:02:40:1f:50:4b:ae:76:da:
a2:57:81:93:c2:34:6b:da:ee:33:20:b5:25:7b:0a:
da:0e:66:d6:ba:dc:3c:de:98:5b:17:ce:4c:6d:39:
d7:ff:b4:a9:d7:4e:29:d1:86:1f:b7:6e:08:02:ea:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:01:CE:D7:A4:AC:B3:2B:F9:52:3F:3B:65:1D:9C:8E:B5:66:B2
X509v3 Authority Key Identifier:
keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/5156704C8D7511F1B90CF51ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.38.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:0c:cc:68:83:c7:73:78:0b:d2:56:96:8c:5b:94:2a:64:78:
33:06:60:b2:9e:1b:fb:11:4c:25:a0:76:1c:a1:9f:17:08:c6:
64:0d:b7:c4:93:be:05:69:11:4b:1c:93:45:6b:cf:cb:ba:40:
d8:93:0d:83:04:6f:f1:34:da:17:9b:2c:8f:6b:4d:04:ce:a5:
a6:2f:8a:d9:2f:b7:f6:5e:d6:a0:c6:ab:36:06:bc:64:83:f5:
46:dc:94:20:13:de:d3:e2:21:3c:c1:7f:ca:d3:bb:6e:a7:44:
e0:78:6b:f8:06:3d:a6:73:36:27:ab:67:e5:95:71:0e:1d:17:
9b:8e:ff:3f:7a:fe:9f:cb:17:fe:75:d5:85:d6:ac:89:1c:eb:
78:bd:9a:36:09:eb:3c:28:0a:5c:5d:7d:10:c9:b1:ee:42:5c:
72:09:1a:30:10:b2:0e:16:0f:ff:27:96:8f:e0:fb:f4:b5:b0:
9d:2c:11:b3:2b:1a:cd:e4:4f:79:af:71:de:2e:ed:21:20:a6:
59:16:19:92:81:f7:a4:d5:c9:38:54:01:f2:86:57:05:da:16:
aa:ee:96:3c:2d:c0:46:fc:2c:46:a5:98:4d:5b:a9:e6:c3:15:
88:3a:cd:97:c5:12:f3:b8:b5:ef:1e:91:5f:93:f6:34:69:69:
be:ac:a5:43
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTk0RDdBRjExMC8GA1UEBRMoNkY4MEMwQTE5MDc2ODBEOTc5MDBERjQ1MUNENTU0
RDdGQURCQ0M2NjAeFw0yNjA4MDEwNjUwMzlaFw0zMjA1MTMwNjUwMzlaMBgxFjAU
BgNVBAMTDTZhNmQ5NzQ0LTU3ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCbSXLnADBzlRuYUIJMo3lg1/beXskXtHkAzN06PnF6/a5ujRlpK5kZaOj
OILl3RjMgduhY85RhQeRcvA+W3CRzdkCdyZvNjrbsOXNSc71621gCJFl+isg+f9s
EQ1ma9bRGlKMgW7FLzgjgb4QzTYWEe4y/LmvoXEItskHDvzg6GuyfkmgrofNLE1W
9cuCTVlMFAW8/s3V8FOYW2DAuVRbRBs4iI+lscnEBPvZV2LbGWI9VXqaqyrgnYia
aiqKS/9+tvsNbEKHyVICQB9QS6522qJXgZPCNGva7jMgtSV7CtoOZta63DzemFsX
zkxtOdf/tKnXTinRhh+3bggC6jZLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUg14B
ztekrLMr+VI/O2UdnI61ZrIwHwYDVR0jBBgwFoAUb4DAoZB2gNl5AN9FHNVU1/rb
zGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU5NEQ3LzQyRDQyNzA4RDI4NTExRUM5MkVEOTdBRkYxMjIyNDY4L2I0REFv
WkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2I0REFvWkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU5NEQ3LzQyRDQyNzA4RDI4NTExRUM5MkVEOTdBRkYx
MjIyNDY4LzUxNTY3MDRDOEQ3NTExRjFCOTBDRjUxQUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZmJkAwDQYJKoZIhvcNAQEL
BQADggEBAB8MzGiDx3N4C9JWloxblCpkeDMGYLKeG/sRTCWgdhyhnxcIxmQNt8ST
vgVpEUsck0Vrz8u6QNiTDYMEb/E02hebLI9rTQTOpaYvitkvt/Ze1qDGqzYGvGSD
9UbclCAT3tPiITzBf8rTu26nROB4a/gGPaZzNierZ+WVcQ4dF5uO/z96/p/LF/51
1YXWrIkc63i9mjYJ6zwoClxdfRDJse5CXHIJGjAQsg4WD/8nlo/g+/S1sJ0sEbMr
Gs3kT3mvcd4u7SEgplkWGZKB96TVyThUAfKGVwXaFqruljwtwEb8LEalmE1bqebD
FYg6zZfFEvO4te8ekV+T9jRpab6spUM=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:36:14 2026 by rpki-client