Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4CFFCC82932911F1BC0E7BAECE1D38B0.roa
File: 4CFFCC82932911F1BC0E7BAECE1D38B0.roa (raw, json)
Hash identifier: 28KuPEbl9lg0fEqYNLH73p9PesWP+yDPJpiKI03Ns0E=
Subject key identifier: E2:F0:12:4B:E7:2D:2C:E3:69:0A:E5:13:CF:50:4D:FA:7E:46:F2:DC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1998
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4CFFCC82932911F1BC0E7BAECE1D38B0.roa
Signing time: Sat 08 Aug 2026 13:01:42 +0000
ROA not before: Sat 08 Aug 2026 13:01:38 +0000
ROA not after: Tue 08 Aug 2028 13:01:38 +0000
asID: 834
IP address blocks: 102.165.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 10:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6552 (0x1998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 8 13:01:38 2026 GMT
Not After : Aug 8 13:01:38 2028 GMT
Subject: CN=6a7728b6-640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:56:01:3a:e0:0e:aa:fd:41:74:92:d5:4d:
e1:74:7e:b7:3e:d4:62:e0:3b:15:1c:f9:ee:b5:9c:
e0:ee:15:0c:ac:fa:37:8a:af:20:60:6a:94:80:93:
e0:68:9e:c3:0f:98:6c:b0:44:0c:c3:30:a7:d7:a4:
74:26:97:c6:c5:d7:e0:2d:88:04:b2:83:77:0c:ee:
1b:f1:da:21:d2:bd:10:e5:52:1e:53:3f:36:59:9b:
88:d9:12:5b:6d:4d:4e:03:f4:fa:c6:b0:3d:2a:84:
1e:56:10:91:da:1a:e9:4c:a0:7f:30:f5:84:96:ed:
48:e7:67:b8:f2:11:5f:89:bc:0f:63:7d:d6:87:76:
b3:02:16:b8:0d:8d:e0:e8:06:e4:e1:b6:68:11:06:
ae:2f:62:ab:92:3f:bf:85:27:25:4a:da:01:1d:06:
87:b4:3b:13:e6:f3:19:cb:2b:ad:b9:f8:f6:2e:90:
7e:91:24:12:d1:ca:02:66:bb:9a:80:1f:35:70:c0:
01:0c:af:f5:18:6a:b7:d4:b2:76:5e:7b:dd:81:2d:
34:22:e0:76:b4:fa:a4:9d:98:e2:d7:0c:bc:25:e1:
c6:f5:9c:2b:9a:2f:bb:b1:70:f5:3e:87:d7:5a:66:
5d:47:8d:50:03:22:3f:f3:3a:34:eb:a4:99:88:69:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F0:12:4B:E7:2D:2C:E3:69:0A:E5:13:CF:50:4D:FA:7E:46:F2:DC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4CFFCC82932911F1BC0E7BAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e5:4e:54:f9:4c:9a:c0:62:4c:24:80:49:7e:66:47:00:54:
b8:1f:e7:c5:f9:07:5b:24:d2:29:08:54:8f:85:f2:6a:c2:d5:
24:bd:b9:da:82:a0:44:96:10:bc:3a:8f:e7:2e:0f:fb:60:dc:
87:e3:80:55:3a:be:86:4a:fd:12:a7:7e:1a:d1:42:c3:8f:a1:
f1:aa:91:ea:81:1e:ae:85:83:51:bd:e5:70:cb:34:47:77:a5:
81:48:de:2a:ef:9e:3c:6e:bc:6c:97:aa:fc:d6:25:f9:da:79:
63:c9:63:ef:0e:65:ac:41:d4:44:4b:ab:83:34:ac:b0:0a:08:
13:2d:bf:21:41:c6:40:5b:81:94:84:13:1c:3f:65:75:f2:e7:
4a:45:17:34:11:7c:be:5f:a2:72:7a:05:b6:1a:1d:0a:2b:18:
ed:a0:2d:27:dc:29:f1:43:4e:d4:35:e2:11:72:ed:15:be:9b:
83:c5:ed:e5:d9:ed:8b:36:d6:65:79:f0:7c:de:2e:c4:f5:ae:
1a:1b:cb:d1:04:f7:90:3a:19:79:6b:76:0e:ed:b8:df:10:3d:
d7:01:a1:72:ad:4f:a9:9e:a4:88:44:0e:f0:04:e7:40:83:88:
9f:33:4d:a4:7c:4b:7a:08:8d:1e:d3:89:bf:6f:b1:05:8d:a5:
da:49:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 16:31:22 2026 by rpki-client