Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BE86D3A1C4C11F1BF91A5C6DAE4EC9C.roa
File: 4BE86D3A1C4C11F1BF91A5C6DAE4EC9C.roa (raw, json)
Hash identifier: qqhj2i84zIROrF9i7RhGGfarUZZmV4bzf6iqSrz7c14=
Subject key identifier: 23:90:EF:85:64:C2:75:91:A8:4C:81:1F:E6:64:72:40:7B:9F:4D:01
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17B0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BE86D3A1C4C11F1BF91A5C6DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 06:42:25 +0000
ROA not before: Tue 10 Mar 2026 06:42:19 +0000
ROA not after: Fri 10 Mar 2028 06:42:19 +0000
asID: 29802
IP address blocks: 102.165.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 01:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6064 (0x17b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 06:42:19 2026 GMT
Not After : Mar 10 06:42:19 2028 GMT
Subject: CN=69afbd51-9d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:a5:11:a9:81:6d:84:83:04:c7:27:f9:e1:
6b:d8:ae:41:be:f0:19:72:d0:b1:fe:4f:09:c4:cf:
b9:8d:bc:dc:fe:a3:b1:38:4a:fa:3e:52:d2:42:96:
7a:9a:86:cb:a0:ad:cb:7a:e8:69:c4:78:8c:b0:c6:
81:ac:aa:80:b5:94:40:74:82:9c:6c:29:c1:2a:5d:
e3:f4:e7:5d:58:d5:ae:7a:5f:6f:e7:39:d6:9a:fe:
98:39:78:79:4b:1a:a6:26:5c:60:a2:08:31:c7:4d:
2f:35:37:83:4c:7e:a1:46:54:8e:e0:7e:e2:0c:da:
49:fc:84:49:3a:00:95:50:e0:a9:ef:da:db:dc:6a:
d6:a0:f0:a5:22:9c:21:45:04:3b:69:cf:b2:38:2f:
5f:e8:fc:88:2d:c2:4d:3d:f2:c5:81:eb:e1:bb:5d:
c2:25:19:c9:f4:ca:35:b2:19:c6:5d:0b:ef:11:53:
1e:a0:f7:8f:28:9b:7b:50:76:3f:10:51:22:83:5d:
52:04:13:be:88:b3:43:db:85:22:e5:66:f3:b9:d8:
8a:11:91:f1:2a:0a:de:c9:51:d7:8c:d5:b5:2f:bd:
15:60:9a:2d:d0:8b:2a:a7:76:b9:cf:90:b3:4d:e1:
d7:d4:fc:92:b9:49:cd:76:19:a1:65:c8:6c:a4:83:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:EF:85:64:C2:75:91:A8:4C:81:1F:E6:64:72:40:7B:9F:4D:01
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BE86D3A1C4C11F1BF91A5C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.7.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2d:21:c4:86:c9:cf:4f:10:cf:2a:cb:d6:a8:e0:29:20:19:
7e:65:5d:5e:c2:06:f7:4e:cf:3d:65:81:c6:cf:1b:d9:6a:76:
d8:05:a5:28:15:f7:fd:44:41:2d:41:29:49:36:44:5d:d9:94:
73:d6:89:e0:3e:2b:69:8a:7d:67:d7:0c:5d:21:86:99:4d:fc:
80:54:98:86:53:28:9f:2d:61:a9:97:9a:db:3b:de:74:eb:e9:
83:78:d7:f8:9c:bb:1f:e5:d1:48:10:75:1f:6a:5d:ca:5f:b0:
16:c7:72:2e:10:45:52:68:7f:db:ab:cd:86:3c:e8:79:1b:1d:
61:3c:0d:e4:5c:37:07:90:3d:9f:ba:2e:34:3c:5c:54:54:a6:
75:13:2d:7a:ae:9e:af:6d:3d:8c:da:c7:b4:43:aa:70:fb:85:
90:0c:b9:f0:2e:db:d4:8d:ce:e4:8d:6e:55:df:6d:03:ca:44:
7d:24:73:85:f7:2f:c4:2b:b0:18:98:3e:a3:ff:87:8a:44:93:
a1:88:54:9b:9a:92:d5:d3:b5:2e:2b:5b:1f:58:c2:4d:2f:20:
2b:c7:b7:62:8b:f5:7c:72:f9:90:57:42:e8:71:2c:27:3f:93:
ed:24:99:47:da:ec:6e:94:d4:eb:3f:11:38:92:07:34:a5:2e:
8d:a5:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:17:11 2026 by rpki-client