Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4862FA9E97C711F191F9F0AFCE1D38B0.roa
File: 4862FA9E97C711F191F9F0AFCE1D38B0.roa (raw, json)
Hash identifier: GY+oGzcX2RmoVD/vNSLdIyL2yIPYn8TM3ZuzkzJbsKg=
Subject key identifier: D7:21:68:AA:30:96:E0:15:31:49:46:4E:20:D3:B2:D8:67:B8:65:B2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 19A5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4862FA9E97C711F191F9F0AFCE1D38B0.roa
Signing time: Fri 14 Aug 2026 10:02:40 +0000
ROA not before: Fri 14 Aug 2026 10:02:35 +0000
ROA not after: Mon 14 Aug 2028 10:02:35 +0000
asID: 215294
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Aug 2026 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6565 (0x19a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 14 10:02:35 2026 GMT
Not After : Aug 14 10:02:35 2028 GMT
Subject: CN=6a7ee7c0-1e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:1a:e7:66:84:7f:c2:08:8a:ba:9d:66:d4:
b0:b2:b3:8a:e5:70:fc:a8:30:01:67:10:95:da:6a:
51:dd:47:1b:fe:33:b2:6e:57:cf:4c:9f:6b:b6:bc:
84:f1:61:1f:a0:70:71:e4:76:8e:47:4a:bb:e3:e4:
02:f9:ec:3b:d3:be:b2:c4:a5:07:71:32:23:5a:06:
1b:4f:53:8d:db:11:d4:c1:0d:1a:03:05:2d:b6:39:
67:35:7b:47:65:8b:e0:7a:7e:60:8a:8f:83:12:1a:
d4:7a:6f:b3:0b:49:3e:7f:93:12:4e:f0:a4:cf:47:
11:a9:fc:34:d2:f4:90:c2:21:6b:27:92:8d:3c:a4:
99:15:c1:73:fa:86:ee:eb:21:97:12:ac:51:29:4e:
c9:e2:a2:03:27:b6:98:62:5e:aa:fa:37:f9:c0:e4:
a8:ac:7d:1d:e9:11:1a:4c:e5:49:c1:ec:a3:d9:90:
21:58:93:12:db:10:d8:2c:a7:41:1d:19:6c:72:ad:
73:5a:ae:6f:a5:f7:c9:40:c4:5a:b9:15:35:ab:a0:
2c:fb:88:0e:87:e0:f1:43:28:6e:8e:ff:12:f5:2c:
e0:d5:51:6c:ee:af:3f:6f:68:63:d6:f2:3c:a8:05:
d5:35:33:b6:4d:96:cd:c6:95:c4:da:4e:e2:6d:cf:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:68:AA:30:96:E0:15:31:49:46:4E:20:D3:B2:D8:67:B8:65:B2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4862FA9E97C711F191F9F0AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
83:07:17:48:fa:c4:99:06:30:f0:6f:72:6e:99:36:f9:07:08:
4d:35:41:4b:f8:69:52:d9:a4:05:ce:ed:b5:b1:60:42:ed:01:
e8:bc:b0:1c:22:10:a6:44:cd:7e:64:03:3e:80:19:8d:e8:66:
03:a5:d7:47:c0:2d:5f:1d:bb:96:54:4d:1b:21:0f:ed:ca:08:
04:cc:62:56:47:80:06:85:a0:60:a8:a2:9b:0e:0c:20:ac:8f:
08:2e:1c:fa:13:aa:ee:c5:38:a4:02:36:f1:d8:2e:00:ce:e5:
8d:34:77:e8:36:e6:2c:03:f2:88:4f:a8:40:ee:b7:d3:7f:ce:
c6:27:b9:97:17:c3:5d:40:19:2d:7f:93:70:fe:d4:05:8c:48:
a1:d2:25:cf:93:d3:45:15:ba:d9:e0:6a:99:3d:d4:89:c4:93:
a1:da:a8:22:7e:5c:b6:e2:a6:e5:27:f1:1d:2c:59:d0:22:ab:
7b:ac:4b:33:c5:5c:50:17:71:26:1a:81:45:55:b5:6b:66:36:
6f:90:b8:ee:10:70:06:7d:ae:6e:c2:7d:6b:ae:9d:89:fe:e6:
fe:dd:a5:36:d0:07:a5:98:19:a5:49:7d:9b:dc:2e:08:2c:71:
5b:93:bc:4e:ae:e4:64:dc:42:1a:d1:bc:cc:58:64:bb:0a:f5:
52:9d:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 19:19:27 2026 by rpki-client