Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A01FD4281C4D11F180D9CFCCDAE4EC9C.roa
File: A01FD4281C4D11F180D9CFCCDAE4EC9C.roa (raw, json)
Hash identifier: YfM99bW67JB87gK1q4VdU88Z4VxuLMDzwfTwji4lc0s=
Subject key identifier: AE:64:13:40:58:90:AC:D6:C5:96:B2:39:29:37:1A:DA:D7:40:D1:66
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17B3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A01FD4281C4D11F180D9CFCCDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 06:51:55 +0000
ROA not before: Tue 10 Mar 2026 06:51:50 +0000
ROA not after: Fri 10 Mar 2028 06:51:50 +0000
asID: 29802
IP address blocks: 102.165.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 01:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6067 (0x17b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 06:51:50 2026 GMT
Not After : Mar 10 06:51:50 2028 GMT
Subject: CN=69afbf8b-4c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:dd:15:d2:68:34:44:cc:41:66:4a:cf:2a:
f8:46:56:3c:22:f2:9c:7f:d8:1f:79:24:8e:db:4a:
77:2a:49:6d:89:21:d8:41:65:7a:4d:6e:2b:f8:d1:
fb:ee:0f:ce:95:8d:d7:ae:05:24:e1:18:d4:7a:c9:
4a:18:c0:ad:c2:db:48:d5:6d:fc:1a:e3:1f:93:e7:
04:ff:67:7a:91:84:4d:0d:99:f6:ad:3d:a9:77:c9:
ed:77:a5:69:68:7d:2c:3b:a9:a8:96:60:5a:fd:6b:
d3:53:11:fa:e4:9d:7a:f2:15:21:5c:ff:52:82:82:
3b:43:d1:71:04:de:db:10:38:fa:ec:6c:df:ac:c2:
21:44:96:fe:7c:02:67:20:47:12:9c:54:4b:48:82:
f2:2c:8a:1f:f2:c9:79:af:57:54:8b:e8:42:2a:b1:
99:49:20:5d:14:9c:a7:a6:72:f1:ad:10:0f:e8:c5:
3d:ed:59:60:1a:d1:3b:b9:87:b4:ef:98:b4:bc:9b:
12:fc:be:5b:70:22:c7:ff:f5:7b:e9:a7:32:d6:53:
b7:a9:f3:76:5b:a0:89:77:37:aa:af:ad:8b:a3:a7:
d2:f4:2b:38:19:76:15:79:81:10:cd:42:48:d5:4f:
b2:1d:30:25:b3:0c:fd:31:87:38:6b:1b:db:c9:40:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:13:40:58:90:AC:D6:C5:96:B2:39:29:37:1A:DA:D7:40:D1:66
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A01FD4281C4D11F180D9CFCCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.8.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c0:95:64:f4:8a:49:58:2b:97:d1:fd:ea:9b:a7:da:e8:6a:
39:7a:94:b0:69:e9:77:f2:d7:53:f7:6f:6f:14:c7:a8:22:b7:
eb:3b:37:82:94:c8:63:61:4e:c5:ba:cc:2f:12:8b:cf:39:4b:
0b:2a:2d:93:e1:01:7b:21:ed:88:7d:5a:9a:8c:86:65:b7:f8:
7b:e5:17:97:29:50:41:0e:17:67:30:17:8a:89:a1:57:c4:b2:
81:ab:b4:75:b7:f2:4e:f1:03:a5:e1:2c:93:27:09:8a:e1:2a:
5c:82:d1:63:5f:03:36:04:d0:60:c8:60:29:fb:06:b2:f7:90:
83:fa:aa:37:60:71:6b:0a:25:32:97:c3:b8:9d:26:3e:3f:f2:
96:69:d1:4a:19:44:a4:c2:ea:14:61:13:19:d1:b1:4c:89:87:
ec:14:e5:ad:7a:51:67:35:d4:d9:70:02:59:51:85:b1:c9:76:
9d:85:44:73:41:21:fe:30:80:38:59:2d:ed:c0:a6:00:aa:92:
49:f6:e5:8a:0b:09:b5:02:e2:90:27:19:16:74:d1:65:f4:9d:
8d:a7:64:71:a0:eb:9e:d2:18:ac:30:f3:e0:b0:be:43:d1:b2:
e6:60:db:4f:d8:74:3e:7d:7c:21:1e:07:8b:5c:69:87:3d:78:
9d:39:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:16:57 2026 by rpki-client