Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/470BB1C66A2311F1B3AAD9D0CE1D38B0.roa
File: 470BB1C66A2311F1B3AAD9D0CE1D38B0.roa (raw, json)
Hash identifier: 3M6LxrpYMIjBXsDC/yD9qpFC3gQ8ZR0LIosDDsOIYTg=
Subject key identifier: AB:4B:A2:4A:45:2B:35:CE:31:6B:33:6F:20:ED:DA:19:1C:08:DE:D0
Certificate issuer: /CN=F36B8F68AF/serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Certificate serial: ED
Authority key identifier: D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/470BB1C66A2311F1B3AAD9D0CE1D38B0.roa
Signing time: Wed 17 Jun 2026 08:05:18 +0000
ROA not before: Wed 17 Jun 2026 08:05:13 +0000
ROA not after: Thu 17 Jun 2027 08:05:13 +0000
asID: 329635
IP address blocks: 102.204.127.0/24 maxlen: 24
2c0f:79c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B8F68AF, serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Validity
Not Before: Jun 17 08:05:13 2026 GMT
Not After : Jun 17 08:05:13 2027 GMT
Subject: CN=6a32553e-64a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:2c:4b:4c:f7:d3:3f:58:67:66:f9:ce:0c:
2c:39:5d:d9:e3:23:94:0d:45:3f:b6:ae:93:53:4a:
1a:0d:95:59:09:03:e9:56:d2:c6:05:52:a2:5c:12:
bd:5c:d5:f7:5c:c0:08:5e:fa:21:22:61:e8:02:80:
c4:fa:1c:05:93:9d:42:27:34:aa:c0:97:1c:c6:84:
f2:7f:e8:2b:9c:db:3c:1c:50:58:c7:d3:3b:6d:a2:
8f:a5:67:fa:45:ba:73:c5:cd:1d:07:c3:f1:ce:c0:
f0:82:73:43:60:b9:87:a6:6b:7b:35:db:a7:b2:d8:
4f:b3:51:5f:b9:ed:f8:c2:b5:3d:d2:d5:54:ac:82:
bf:87:2d:0b:44:d4:8c:a7:94:fb:ef:1e:ee:e5:25:
e4:c4:0c:27:b1:43:e6:ea:92:4e:45:76:e4:44:5f:
dd:be:25:e7:fb:19:cf:2c:54:0e:1a:70:91:b9:73:
06:1e:d4:31:48:99:2d:51:fc:82:66:cc:0f:68:db:
af:f3:5a:24:3f:87:6e:92:29:c4:10:25:c6:73:d4:
17:fa:ef:37:47:3f:b1:24:b2:f4:b2:f1:2c:dc:ff:
9a:56:84:e3:05:1c:f7:e8:c4:ed:33:a8:21:d3:f0:
f5:f2:f6:5d:eb:4a:24:5d:44:bf:bf:86:74:75:48:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:A2:4A:45:2B:35:CE:31:6B:33:6F:20:ED:DA:19:1C:08:DE:D0
X509v3 Authority Key Identifier:
keyid:D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/470BB1C66A2311F1B3AAD9D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.127.0/24
IPv6:
2c0f:79c0::/32
Signature Algorithm: sha256WithRSAEncryption
63:52:42:bf:a7:a0:3c:b7:bb:ac:27:c5:e6:92:93:36:7c:47:
2a:e8:b2:c1:5f:7d:82:85:ec:6c:cb:d9:d4:1c:3a:aa:5d:cb:
97:11:ac:6a:43:b3:ba:8e:16:f4:5b:79:24:c7:29:93:42:68:
a5:df:e7:e4:36:ef:65:55:76:38:63:bb:e7:b1:32:b6:17:70:
5d:e8:27:7d:28:3f:62:3d:cb:3f:b2:77:d4:90:0c:29:1f:43:
e9:43:a3:5e:c1:fb:f3:6f:8b:ad:91:2f:a8:33:84:7e:b3:d3:
06:cf:f3:d6:fd:b7:55:0f:e7:aa:36:0e:07:51:0a:8d:64:a1:
3e:e9:84:20:ab:9d:ae:88:77:3d:1f:fa:07:93:42:82:40:da:
82:0d:0b:98:24:98:93:eb:4d:cb:18:24:7d:4a:72:aa:36:e7:
f0:b5:4b:83:c2:a7:54:06:ab:88:23:90:56:f4:df:2b:01:b8:
99:a9:76:41:24:91:ca:ed:2e:f3:bd:bf:59:b5:34:11:76:28:
04:20:8d:09:42:38:67:33:4e:10:23:04:db:0d:35:89:7a:68:
ff:2e:24:ea:50:a5:d0:1e:65:22:eb:15:5f:73:0b:99:d1:ce:
5a:65:88:58:93:cf:35:fb:93:2e:51:4f:d3:a0:6c:f2:48:85:
90:72:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 00:45:52 2026 by rpki-client