Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/236038E22F2111F1ABA97FDCDAE4EC9C.roa
File: 236038E22F2111F1ABA97FDCDAE4EC9C.roa (raw, json)
Hash identifier: /fXSDdgXAZHchD7Bw+CEXuaFvELqIQ5EDW9YEXaYM5g=
Subject key identifier: A5:92:E8:38:C6:59:E8:3A:52:C3:0D:1A:6B:27:88:9C:C9:FB:F4:5A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17F5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/236038E22F2111F1ABA97FDCDAE4EC9C.roa
Signing time: Fri 03 Apr 2026 05:51:20 +0000
ROA not before: Fri 03 Apr 2026 05:51:15 +0000
ROA not after: Mon 03 Apr 2028 05:51:15 +0000
asID: 834
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 01:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6133 (0x17f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 3 05:51:15 2026 GMT
Not After : Apr 3 05:51:15 2028 GMT
Subject: CN=69cf5558-4b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:76:8c:ab:59:0e:87:68:52:49:fa:49:8a:
b0:4c:2f:e3:d3:c0:8e:5e:42:95:42:0e:d4:32:7b:
68:40:30:d2:cc:5d:7c:d8:4f:5e:f3:c5:f7:ed:51:
17:33:e7:c2:24:51:ae:e3:37:a3:0b:d3:54:5a:ca:
b5:bb:0d:1b:e2:e7:10:b3:73:06:f4:71:b0:cc:6c:
27:a2:b1:2b:47:d3:2d:f5:59:55:15:65:e4:c9:ab:
35:9b:d1:83:12:12:63:46:bb:14:c4:5a:38:e3:a6:
ff:b8:e4:fe:70:c0:4c:9f:f2:f7:c4:a6:99:09:48:
6b:11:22:c9:23:2c:dd:c9:ab:46:dd:a1:b7:fc:75:
94:8d:d0:2e:8d:54:2b:e2:b9:52:27:7d:36:46:95:
93:00:a9:32:df:52:c1:0b:79:ac:a5:0d:6a:08:ff:
e1:f5:85:0d:9d:fc:d9:3c:7e:1d:7a:93:5e:62:24:
c5:f9:af:ef:ac:70:78:15:c2:a1:7c:7b:cf:78:01:
19:6a:f1:ce:d1:e7:7b:6a:42:19:b6:6f:27:08:96:
04:2f:1c:f3:03:66:46:29:4f:05:41:45:69:14:99:
dc:18:03:a4:3b:0c:cc:3c:d6:3e:51:f7:e0:33:21:
6a:3f:e2:2c:35:a4:2c:f8:0f:80:b2:59:f5:1d:29:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:E8:38:C6:59:E8:3A:52:C3:0D:1A:6B:27:88:9C:C9:FB:F4:5A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/236038E22F2111F1ABA97FDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f5:9b:76:0f:64:01:8e:58:df:23:e4:b7:91:10:0f:52:32:
12:4f:bd:fc:16:af:c6:40:af:7f:2f:6e:3c:00:a0:f1:cb:cc:
3f:1b:bf:85:d5:39:58:3e:10:81:84:bf:76:c7:6e:85:bf:08:
4f:eb:04:e5:6f:b7:4d:22:15:b5:ed:02:3e:15:e0:a6:db:ff:
c6:f4:88:b8:22:97:1f:68:65:34:b0:24:a5:df:10:24:a5:e3:
d4:11:8a:02:3d:76:aa:b4:91:b3:0a:a4:3a:bf:4c:b1:21:60:
04:25:41:8a:95:d4:b0:e3:c1:5c:3c:85:99:14:5f:2c:d0:9e:
3a:d7:c3:b0:b6:2d:30:c1:21:cd:d4:7b:16:b8:51:12:a5:4b:
ca:da:ba:bf:c4:3f:26:ac:2f:c5:1c:29:be:d8:73:d2:c9:4b:
38:fa:ae:0e:9c:f0:cb:47:0d:49:1b:ea:8a:92:ef:0d:40:88:
23:43:3f:a1:df:86:da:e5:b3:89:52:01:2b:99:f5:ef:8b:e8:
71:ae:dd:65:77:3d:42:d9:5a:bd:6d:d0:ad:52:9c:f1:e8:86:
57:e0:d4:de:c8:9e:c9:cd:99:91:3a:cc:c9:bd:18:c9:e1:d1:
16:75:cb:14:8c:b8:39:96:1b:1b:d5:c7:92:fa:8b:f1:f9:97:
6d:e5:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:13:04 2026 by rpki-client