Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADD872A4656411F1B04AEAFACE1D38B0.roa
File: ADD872A4656411F1B04AEAFACE1D38B0.roa (raw, json)
Hash identifier: AMID/6wC95PuYc8SINrXuKSSXenxBfANf2heQwwgvtQ=
Subject key identifier: F3:96:BC:93:D4:AB:08:A1:99:28:EF:D8:A8:91:7E:F0:8C:88:08:2D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18D7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADD872A4656411F1B04AEAFACE1D38B0.roa
Signing time: Thu 11 Jun 2026 07:10:52 +0000
ROA not before: Thu 11 Jun 2026 07:10:47 +0000
ROA not after: Sun 11 Jun 2028 07:10:47 +0000
asID: 9009
IP address blocks: 102.165.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6359 (0x18d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 07:10:47 2026 GMT
Not After : Jun 11 07:10:47 2028 GMT
Subject: CN=6a2a5f7b-229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:3d:b7:63:7d:cf:c1:bd:ff:1d:b6:41:e6:
27:09:0e:76:cd:bf:15:af:c6:ba:8d:f3:0d:b9:84:
71:10:3b:d5:64:bc:93:2c:cf:74:ab:0c:cf:26:26:
57:4a:6b:41:31:cc:06:56:70:c0:92:58:b4:6f:a3:
56:c7:a2:b9:17:34:93:d0:8e:c0:e9:26:6f:42:be:
5d:ab:6f:6f:7c:22:2d:f2:44:f3:e6:b2:78:06:b2:
05:1f:b3:03:c0:45:a4:7a:b7:e3:80:01:cc:42:0e:
c9:f3:f4:f4:e5:ff:5d:37:3c:36:03:8c:76:f5:66:
f9:9e:d6:7f:df:37:5b:a8:8f:45:c9:e9:45:69:0e:
a6:63:44:4b:89:36:14:67:6c:a1:e8:cb:25:8a:e0:
f0:27:04:ec:0f:b7:fb:47:aa:cf:68:a9:73:60:53:
17:1e:3b:4d:3f:1e:dc:f3:09:7e:bd:21:be:b1:e4:
02:ef:f6:5e:c8:ee:1f:e9:f9:e1:76:5e:e6:8f:7c:
d1:87:15:a3:15:7f:63:93:10:11:33:dd:d1:f1:10:
65:94:1c:3c:91:cc:82:37:87:1a:09:a1:2d:7b:e3:
fb:09:eb:3f:e2:4c:77:6e:54:43:e3:89:4d:bc:c2:
61:61:54:d8:04:71:7a:63:43:2b:ee:87:8c:85:55:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:BC:93:D4:AB:08:A1:99:28:EF:D8:A8:91:7E:F0:8C:88:08:2D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADD872A4656411F1B04AEAFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e6:bd:6f:84:2a:03:d2:b7:33:d9:0c:f9:bd:f3:3d:f8:f1:
52:4e:61:97:35:e9:9c:d7:44:f6:58:fe:ed:8c:66:d7:9b:19:
07:87:74:e3:e2:49:98:b3:a2:8e:66:91:c9:1d:12:54:d6:1c:
5c:3f:88:a6:8a:fc:5d:a5:ba:de:df:dc:b7:c2:ec:7f:de:d1:
35:bf:7b:5e:9f:c0:05:d6:8f:f4:cc:f6:96:a7:5a:2f:b6:ab:
04:e8:11:bf:3c:5f:6a:cf:ba:31:6f:56:41:54:41:ca:af:46:
ef:36:0e:1b:55:58:b0:57:77:6e:61:0e:a5:74:c3:c0:75:57:
3e:61:31:c2:6f:8a:d8:0a:12:ca:dc:bd:90:0e:3e:c3:a7:c7:
8c:73:69:d2:54:6b:36:76:ec:6a:2e:ee:db:13:a5:b7:55:76:
89:ce:36:0a:58:50:c0:dc:7e:b7:a1:db:f7:e8:3a:b8:58:26:
8e:77:2c:4e:16:52:ec:6b:a2:62:07:fd:06:b5:3c:dc:97:40:
77:c3:56:73:97:61:8a:84:d8:ce:96:91:2d:49:da:61:38:89:
1e:85:24:59:c7:ea:79:78:b6:a5:c6:9e:f6:e2:75:60:a2:58:
cf:40:4c:dc:0a:94:2a:73:22:f3:d0:6c:7a:37:30:2a:af:74:
9b:6d:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:47 2026 by rpki-client