Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B87615DE1D4011F1831184D5DAE4EC9C.roa
File: B87615DE1D4011F1831184D5DAE4EC9C.roa (raw, json)
Hash identifier: 3gblUevQ79QmapUZDfNOC6Mt3fiAhtx1OP7farj4lDA=
Subject key identifier: 27:E7:01:3F:53:CD:5E:AC:6B:73:2A:93:09:9E:DF:AE:7D:0E:78:95
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17C8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B87615DE1D4011F1831184D5DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 11:52:04 +0000
ROA not before: Wed 11 Mar 2026 11:51:58 +0000
ROA not after: Sat 11 Mar 2028 11:51:58 +0000
asID: 29802
IP address blocks: 102.165.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 01:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6088 (0x17c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 11 11:51:58 2026 GMT
Not After : Mar 11 11:51:58 2028 GMT
Subject: CN=69b15764-2e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:03:ac:ec:43:48:6e:bf:d8:6e:cc:ae:03:
8c:8b:56:ea:d9:b4:a1:b0:44:8a:df:41:1b:09:c4:
46:f5:60:ce:e4:14:36:c2:18:4f:d8:49:6b:1a:d4:
75:86:4f:36:7a:c3:ab:f5:43:71:8f:33:21:2e:6e:
7e:11:4c:ab:ee:10:0a:ce:a8:c6:ee:6c:b7:f5:d5:
95:39:a7:b7:a0:a9:dc:40:1a:95:62:0b:5a:33:e3:
71:c1:b8:85:e3:13:c6:73:fe:38:19:c5:d4:6e:c1:
f5:aa:b8:a1:da:04:ca:b9:16:0c:19:48:b3:f3:38:
48:af:7d:24:68:a2:bd:eb:46:37:da:39:d7:d0:a9:
51:65:d5:93:77:d6:3b:81:e2:db:59:c1:86:eb:0c:
1f:ec:51:82:62:ab:c3:ad:d5:48:5c:a2:d8:fd:8b:
4b:b5:5b:6b:ca:05:f2:7a:0e:8e:c6:2b:fe:ff:97:
76:00:f7:52:82:b2:75:3b:0e:7f:a1:d1:be:97:5c:
6e:c1:ab:14:a3:4f:e4:a9:4f:38:5a:5a:47:b7:2a:
44:81:a7:f7:ae:e1:6b:cc:47:86:56:01:f1:59:64:
5d:61:ea:95:13:64:d0:a3:ba:0b:e3:8e:2a:41:94:
ce:21:ff:08:41:01:66:25:ad:dd:53:3a:e0:25:6d:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:01:3F:53:CD:5E:AC:6B:73:2A:93:09:9E:DF:AE:7D:0E:78:95
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B87615DE1D4011F1831184D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:40:0c:89:ad:c8:33:24:89:52:3a:55:f8:9f:eb:45:e4:89:
77:2d:69:b9:2c:db:77:4e:90:88:d2:a7:bc:e6:40:15:62:12:
68:7f:92:96:19:fa:b5:c8:3b:03:c0:56:73:ba:f5:41:46:32:
e9:03:8d:f8:aa:3c:99:af:59:da:75:7e:ef:07:3c:fd:ee:eb:
50:f3:01:6b:89:fb:e2:e5:c2:fd:72:06:4b:85:a6:40:00:bf:
13:99:dd:b0:e3:e3:7a:b2:f2:d1:c0:26:22:27:8c:85:d0:f7:
64:27:12:a4:b1:70:a0:c2:66:66:3a:5e:ec:d4:a5:38:cc:c3:
42:28:f8:98:a5:24:45:82:0d:c0:f0:7f:3d:25:2a:5a:e1:8d:
6d:f0:f5:31:e8:2a:f9:ee:1f:d2:c2:ea:5a:9c:35:52:34:ca:
67:c6:23:93:8f:ad:2e:b7:69:a0:3e:6c:bf:84:38:95:a6:a9:
9a:6d:f9:39:45:43:dd:4a:23:ce:db:12:d2:5b:0c:07:3f:f5:
2a:1b:b6:2e:fc:4b:5c:e6:12:63:dd:21:47:2e:3f:69:a2:bc:
03:32:a9:bf:6a:ce:ab:c1:50:d0:91:17:85:fc:ed:e8:d3:2e:
d5:8e:67:72:c3:91:44:1a:16:fd:55:2c:75:ec:04:78:b8:af:
b2:60:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:23:35 2026 by rpki-client