Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68F694E83A8211F1A1C655C6CE1D38B0.roa
File: 68F694E83A8211F1A1C655C6CE1D38B0.roa (raw, json)
Hash identifier: NgxPXfa6kiBbxDUz2a11mHF3MCeP0LmTs/fc4kNJ4ag=
Subject key identifier: 36:FC:6F:4C:26:19:7E:66:37:D2:C4:44:05:0D:89:F5:FB:A5:0E:9E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 181B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68F694E83A8211F1A1C655C6CE1D38B0.roa
Signing time: Fri 17 Apr 2026 17:25:21 +0000
ROA not before: Fri 17 Apr 2026 17:25:16 +0000
ROA not after: Sat 15 Apr 2028 17:25:16 +0000
asID: 395470
IP address blocks: 102.165.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Apr 2026 01:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6171 (0x181b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 17 17:25:16 2026 GMT
Not After : Apr 15 17:25:16 2028 GMT
Subject: CN=69e26d01-8c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:1a:32:3e:29:92:a5:f9:1c:1a:8c:ca:db:
45:cd:75:01:31:56:f0:01:a4:50:e7:92:62:5e:cd:
5d:59:b5:b9:14:52:5a:66:0c:6c:42:7f:a7:6a:da:
9b:b8:5c:9b:7c:72:26:e9:10:81:08:60:74:07:74:
6e:72:cc:63:81:36:ad:cb:4f:84:52:5e:2e:ac:7f:
04:be:e4:fe:4f:04:6b:00:4f:24:c0:df:3b:bb:fd:
8d:15:91:b1:95:da:4f:5a:f4:07:55:80:ac:29:b7:
29:92:d6:70:c1:b4:c4:c4:d7:df:58:3c:b8:bf:d2:
47:1e:17:9e:10:c1:c2:89:41:f8:6f:74:17:bb:fe:
22:4c:da:7d:86:d6:ee:12:c3:66:05:31:10:5b:2a:
3f:05:aa:79:f7:7b:94:5e:15:08:b3:40:81:6e:52:
67:bc:10:31:48:11:dd:98:ea:5a:76:9f:a1:c8:cd:
38:88:ce:ec:3c:3d:d4:29:7d:a9:41:b5:53:20:7a:
cc:0b:ba:0b:bc:56:15:5f:42:4c:6d:1a:9c:9a:72:
e2:2d:6b:2a:cf:3d:da:ec:a4:9a:f9:6c:5a:7b:99:
44:36:c4:73:d9:68:3e:bb:e8:f7:d5:6f:02:fe:56:
62:5e:b7:86:a0:06:cf:c7:cf:a2:62:34:36:8d:9d:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FC:6F:4C:26:19:7E:66:37:D2:C4:44:05:0D:89:F5:FB:A5:0E:9E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68F694E83A8211F1A1C655C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.24.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6d:ed:e7:e4:85:8a:ca:27:da:f3:54:6b:55:30:65:59:fe:
a4:87:ae:21:c1:a6:22:95:7c:cb:8f:e5:b8:54:58:f8:a5:be:
ab:27:74:ff:a8:fb:4f:eb:e5:b5:1d:c5:9b:74:1f:05:f6:44:
82:f0:94:0a:a9:71:29:65:c8:14:34:56:fb:ff:36:50:45:d3:
c8:10:78:a4:0c:41:4f:df:8d:a6:83:a0:e3:22:73:3c:61:f2:
50:a2:f4:60:4f:06:29:ec:96:47:36:92:ee:34:62:22:56:b1:
a4:fb:b2:a7:99:7c:ab:37:96:01:9e:7c:80:93:83:20:b7:89:
39:dc:f9:7a:9f:3f:89:29:1b:c2:4d:c2:0e:3c:97:21:7e:5c:
62:b8:0d:b2:bb:21:88:d9:c9:ba:69:ac:51:9b:c4:1d:de:54:
83:a3:92:a8:0d:40:76:e9:d9:43:05:17:2f:81:b6:58:63:7c:
81:49:88:90:e9:38:f7:21:17:46:a6:10:06:8d:e1:66:78:f5:
25:38:c3:6d:a5:46:72:31:26:5a:41:16:36:69:08:c0:6c:d9:
ae:9d:c0:86:91:6c:ba:e1:b2:92:a4:23:98:df:9b:5b:a5:00:
af:78:bc:2a:ef:a4:9b:ed:d3:64:33:39:59:54:fd:d3:3d:4a:
17:55:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 17:35:37 2026 by rpki-client