Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B60C991A7A9E11F18FB71FC4CE1D38B0.roa
File: B60C991A7A9E11F18FB71FC4CE1D38B0.roa (raw, json)
Hash identifier: mCh6LHwdGoKd7rzI0WG/Iq9k4kRJ6Ixm5y7BJ6sCF7w=
Subject key identifier: 93:19:8A:7C:61:EC:4A:C2:F0:05:EA:9B:63:49:8D:1E:8C:4B:18:33
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1945
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B60C991A7A9E11F18FB71FC4CE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:29:11 +0000
ROA not before: Wed 08 Jul 2026 07:29:06 +0000
ROA not after: Sat 08 Jul 2028 07:29:06 +0000
asID: 40244
IP address blocks: 102.165.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6469 (0x1945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 8 07:29:06 2026 GMT
Not After : Jul 8 07:29:06 2028 GMT
Subject: CN=6a4dfc46-9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:69:e5:e5:76:8f:8d:0b:82:23:8e:c7:07:
6b:df:bb:fc:d0:b1:b2:94:d4:ea:71:a0:a3:2b:64:
a4:50:b9:8c:57:d1:32:bc:d8:6b:2b:9f:f8:d9:53:
ba:b0:6f:54:3a:8a:98:f0:cb:d9:dd:5b:8b:fc:3e:
8e:ee:9d:9f:55:4e:d4:a5:7e:24:79:8a:83:41:22:
a4:1c:08:44:87:f8:29:ed:cf:43:8a:2e:fc:30:ad:
dc:ab:fa:fd:68:ae:16:f0:56:7c:30:01:58:b5:a8:
84:0f:f1:d3:5f:be:85:3c:58:68:d5:50:3d:50:c0:
7a:66:15:da:24:1e:14:23:43:98:87:25:82:05:08:
87:c7:d1:03:40:f3:c6:77:df:85:9c:5b:07:66:ce:
13:e9:74:97:bb:40:4e:4e:37:4d:1e:3f:ca:03:ec:
05:64:19:e7:07:c2:b5:89:26:43:3a:c1:6a:79:f3:
3e:cc:cb:bf:48:36:b1:28:53:13:fe:11:ed:b3:dd:
f3:15:19:ae:0c:a0:9a:59:ea:52:1e:2b:b9:47:46:
2d:fb:7b:91:ff:42:9b:27:f4:0a:d6:81:bd:50:73:
17:8f:0b:6a:13:28:3d:cd:28:c6:c2:11:bc:94:64:
a5:1d:6d:7d:86:e7:6d:f7:0a:94:0a:84:ce:17:0f:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:8A:7C:61:EC:4A:C2:F0:05:EA:9B:63:49:8D:1E:8C:4B:18:33
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B60C991A7A9E11F18FB71FC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ac:ba:1e:59:a0:e1:66:d9:66:ef:9f:aa:18:a8:b9:f7:f2:
e8:c4:2e:8e:ea:e4:0a:bc:4c:42:75:62:50:5f:73:ef:2c:41:
2c:8b:48:2f:48:4a:c1:99:71:6c:05:a1:38:b7:76:76:c9:7f:
24:56:6f:2d:df:1c:e6:ce:82:d0:65:36:86:90:43:f6:3c:01:
06:3b:73:cb:3a:a1:42:0a:f1:e4:30:6a:b2:d1:c4:49:d2:9b:
f9:74:ce:6b:16:eb:98:54:e1:f0:8e:89:a1:55:b6:e1:69:85:
fc:b4:c5:00:67:8f:c5:98:bf:6e:54:57:cb:88:86:20:4a:e2:
aa:44:91:62:8b:14:46:4c:e2:89:c2:42:5e:26:4d:e1:85:e7:
77:73:95:6d:27:21:1b:b6:7f:2f:d7:c5:a5:5a:75:b1:64:d0:
29:d0:23:d3:f7:5f:ad:f1:b2:69:0d:21:50:71:13:0e:6e:0e:
cc:cd:cd:1a:2b:68:45:0f:b4:ec:39:f2:a8:d1:2c:31:bb:02:
0a:c0:21:87:2f:eb:01:9f:64:e2:1d:de:f1:21:96:f9:c0:ed:
b4:5f:26:9e:8e:ed:c6:1f:9b:ba:d8:08:01:ae:04:2c:b1:9b:
06:be:b8:c1:b4:fb:27:49:ba:34:c0:fe:90:ca:94:d8:56:6c:
18:9e:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 10:29:03 2026 by rpki-client