Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABD87FE47F5E11F19CC836E2CE1D38B0.roa
File: ABD87FE47F5E11F19CC836E2CE1D38B0.roa (raw, json)
Hash identifier: Qhjct5Kkn4Acw+oGJGdYRmVozh6uFDnstfNyDOkwPHw=
Subject key identifier: 8C:81:04:9F:0E:59:DD:73:5F:8E:93:85:0C:71:72:3E:10:5A:BC:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1953
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABD87FE47F5E11F19CC836E2CE1D38B0.roa
Signing time: Tue 14 Jul 2026 08:33:21 +0000
ROA not before: Tue 14 Jul 2026 08:33:17 +0000
ROA not after: Fri 14 Jul 2028 08:33:17 +0000
asID: 212238
IP address blocks: 102.165.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Jul 2026 00:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6483 (0x1953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 14 08:33:17 2026 GMT
Not After : Jul 14 08:33:17 2028 GMT
Subject: CN=6a55f451-ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:7c:49:13:c2:57:55:58:ff:c3:f3:d3:00:
dc:7d:ae:db:b2:b4:d8:79:2b:56:61:e3:61:15:7b:
b1:88:40:76:89:ad:34:a8:db:b7:b6:7b:f4:bd:87:
13:12:b9:4d:a6:fc:35:9a:91:01:27:61:a5:6f:ac:
27:94:01:42:a4:9b:31:33:3c:a5:7d:d1:39:fb:90:
95:ef:31:ca:17:b1:95:1d:3b:1a:6a:57:78:06:58:
ea:ee:0d:32:23:68:51:d1:9d:82:8e:5d:1e:ea:a2:
91:11:dd:8e:72:b2:cd:5b:32:84:9f:f0:50:11:73:
11:03:a0:4c:e8:f2:75:0a:02:24:06:65:e5:f9:ae:
04:c0:24:19:2d:f6:f2:3c:0c:76:5e:c1:05:83:c2:
9b:a0:9d:99:d8:4a:01:78:8a:02:c6:26:bd:60:28:
ec:90:fc:9e:4f:c4:c3:25:f0:2f:da:e3:b9:84:fc:
e3:00:39:ac:f4:be:d4:66:08:72:25:50:c5:1c:a5:
53:60:a4:ec:58:ca:c2:b2:04:44:03:e9:10:4c:9a:
35:b8:0c:a6:9f:fd:9d:bd:07:64:6d:7b:54:80:4d:
ba:af:3d:73:4d:03:31:7d:f3:b2:72:09:d5:94:d0:
86:1c:86:7d:a6:e4:b0:f3:66:5c:91:15:ad:fd:2c:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:04:9F:0E:59:DD:73:5F:8E:93:85:0C:71:72:3E:10:5A:BC:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABD87FE47F5E11F19CC836E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.35.0/24
Signature Algorithm: sha256WithRSAEncryption
91:09:87:ca:30:94:75:a2:03:73:a2:f0:b7:33:ad:f6:0a:1a:
0f:91:5c:10:61:bd:b0:59:e5:62:6c:6e:9f:37:ce:3a:bd:58:
ef:03:e2:1f:bd:7e:c8:fe:08:b1:f8:f3:56:f3:59:f8:a5:1f:
c6:c2:63:78:2b:b4:e6:93:d0:ae:78:8c:71:d2:84:02:03:7e:
d2:8f:cb:6e:b1:e0:81:29:b6:36:00:3e:60:2c:a1:26:50:7f:
91:92:bd:dc:ed:31:8f:92:c8:f2:e2:d9:68:e3:e6:21:dd:05:
53:2f:23:93:48:30:67:40:aa:06:8c:d0:87:4b:ab:54:63:c2:
e5:1d:31:56:1c:06:1c:3b:fa:76:49:3e:96:16:fc:ac:90:13:
2d:17:09:6c:68:a2:71:cd:b8:15:e9:7b:68:50:8d:5a:bb:4b:
bd:a9:f7:a6:08:97:77:4e:02:09:ca:bd:d6:9a:29:c1:c8:ad:
07:d2:1b:99:f6:41:01:ba:c7:0d:59:09:ea:37:93:aa:e5:87:
6a:ff:7f:b2:aa:3f:f1:58:4e:0f:8b:0a:48:05:20:22:e0:47:
14:90:17:3e:15:31:d1:87:26:b5:54:79:01:6e:8b:93:75:a7:
4a:4d:85:a9:3a:4b:f7:4a:ff:5e:7f:f7:e9:e1:89:2a:af:b5:
77:97:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 13:48:37 2026 by rpki-client