Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22FB606C534211F183A61DA8CE1D38B0.roa
File: 22FB606C534211F183A61DA8CE1D38B0.roa (raw, json)
Hash identifier: YCu694WB8UuZVMDDXe9/aSTTZCmF4W3kUCQwtx0rVto=
Subject key identifier: 5C:67:A5:B4:6A:FD:D2:C7:24:02:B8:21:99:96:04:1E:F1:A0:EE:5A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 188A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22FB606C534211F183A61DA8CE1D38B0.roa
Signing time: Tue 19 May 2026 05:18:15 +0000
ROA not before: Tue 19 May 2026 05:18:10 +0000
ROA not after: Fri 19 May 2028 05:18:10 +0000
asID: 834
IP address blocks: 102.165.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 21 May 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6282 (0x188a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 19 05:18:10 2026 GMT
Not After : May 19 05:18:10 2028 GMT
Subject: CN=6a0bf297-0c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:87:23:ef:89:c0:ef:4e:6d:8b:ca:f1:ec:
5a:2a:0a:d8:2a:57:12:59:9b:89:0c:66:fb:b6:f4:
aa:0f:e1:38:8c:04:a4:a0:f2:27:bc:5d:0f:d8:35:
df:b7:63:32:5d:a5:86:bb:71:c6:64:43:76:4c:d5:
35:6d:2a:76:3d:b1:04:8d:98:b7:10:ff:b3:8e:82:
28:15:b2:d7:61:dc:54:8a:8c:75:a3:f5:21:32:74:
b1:36:c5:1b:61:75:46:11:d8:12:a2:84:9e:cd:b2:
7f:5f:14:18:87:24:1f:9e:fe:0d:2b:f3:75:4e:b9:
56:86:62:aa:34:db:5d:fb:f3:41:69:26:07:95:97:
2d:d2:aa:74:de:15:84:8c:2f:4f:42:75:be:d6:2f:
8b:a4:f3:c6:63:0f:f6:cd:59:69:2d:6c:91:e5:26:
56:0b:3b:39:a6:06:b9:a3:21:ed:fa:02:25:39:b7:
2b:77:ff:9b:f9:bf:3d:ed:8b:13:8b:44:28:3b:40:
f1:c3:79:01:05:6b:62:c2:58:72:70:f2:c8:ac:eb:
0a:1c:ad:da:8e:0e:5c:c8:a4:80:e5:54:db:60:f0:
78:11:c9:cc:3c:3f:b3:87:95:98:b4:ef:81:f4:f8:
e7:a2:93:d4:10:1f:79:65:78:52:2a:e4:09:26:f0:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:A5:B4:6A:FD:D2:C7:24:02:B8:21:99:96:04:1E:F1:A0:EE:5A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22FB606C534211F183A61DA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9e:5b:33:ee:12:f7:95:fb:51:ab:46:6a:18:a8:e6:d6:bd:
cb:21:70:99:b9:79:44:6c:fe:54:74:8f:75:65:59:27:fa:87:
2e:3f:f7:98:73:ca:7f:3f:b6:13:1d:c6:05:c1:fc:b1:de:64:
a5:ab:c0:ff:68:49:6a:d0:81:d5:a3:5d:b8:08:9b:64:d9:46:
77:d3:cf:d3:b4:83:ac:ff:4c:21:c7:f3:3c:ee:90:af:43:ff:
29:e5:6f:0e:e8:b4:cc:4a:c0:da:f0:17:67:dc:bc:93:ff:ed:
66:c6:ac:cb:fd:21:ce:12:d6:6a:35:81:f5:c2:bf:a6:c2:04:
5e:88:c9:e8:4d:e9:74:c8:e3:aa:4d:fa:d2:04:34:47:db:ac:
66:ff:f9:1b:1e:07:90:55:77:1f:19:9a:82:d0:bf:7a:5e:66:
ba:c9:37:72:0c:e9:62:e5:f3:ce:39:ca:fb:71:6c:29:66:48:
5e:81:35:e0:b6:71:30:b0:a9:aa:51:df:bf:66:38:5c:d3:ec:
b2:34:0e:53:a3:ad:e4:c1:11:e7:8f:ec:7b:e6:1f:a9:9c:82:
bc:e9:96:9b:18:4c:f5:e8:63:4d:bb:60:b8:c3:45:0c:47:74:
5c:7f:0d:ef:21:2d:fc:15:51:f2:87:eb:a7:32:eb:94:b9:45:
cc:68:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 10:20:05 2026 by rpki-client