Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C3CC35546DFD11F1A1CFCF02CF1D38B0.roa
File: C3CC35546DFD11F1A1CFCF02CF1D38B0.roa (raw, json)
Hash identifier: yRfuodkE93tkwB+9ZdGYnrNkqMsWJtRkdSBBcxOpmjk=
Subject key identifier: BB:03:4A:30:FA:47:C0:7D:20:5B:96:BA:1A:1D:4F:4E:66:A9:1E:4C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1910
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C3CC35546DFD11F1A1CFCF02CF1D38B0.roa
Signing time: Mon 22 Jun 2026 05:46:51 +0000
ROA not before: Mon 22 Jun 2026 05:46:46 +0000
ROA not after: Thu 22 Jun 2028 05:46:46 +0000
asID: 834
IP address blocks: 102.165.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 24 Jun 2026 05:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6416 (0x1910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 22 05:46:46 2026 GMT
Not After : Jun 22 05:46:46 2028 GMT
Subject: CN=6a38cc4b-9a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:23:77:9a:23:bf:de:0c:eb:05:48:ac:21:
cd:95:bd:cf:3f:34:f8:64:b1:d5:62:97:39:46:55:
45:b1:f6:7b:56:41:51:6b:93:c3:2a:8e:d8:2e:35:
83:56:af:63:cf:c3:55:4d:54:8b:bb:37:ef:6a:6e:
38:24:ce:b7:d5:3a:7d:06:35:4c:c2:9b:f6:ca:48:
33:b3:f9:8d:a7:ef:69:2e:bb:47:bc:5c:f3:92:20:
31:a4:71:43:3a:3a:96:b6:8a:5c:c1:b4:2e:b5:42:
5b:f0:6a:59:3b:27:d0:e2:f6:10:db:38:bd:4c:da:
7e:0b:90:6f:0e:c7:34:9f:97:1a:75:58:5d:f9:f5:
b6:f5:54:6b:19:ef:34:2f:48:65:4e:b0:20:a6:f2:
b6:ec:f1:70:0a:90:6f:ca:be:8b:20:03:f6:4f:43:
36:8a:ce:03:94:df:10:db:a1:21:29:dd:0d:15:c6:
f6:cf:85:8f:db:52:4e:7c:55:56:71:79:09:58:a2:
1f:5c:f5:45:df:5d:b5:5b:36:d4:d7:c2:82:08:e4:
e3:4a:50:d9:c3:95:8a:7f:79:89:1e:9d:81:e6:ac:
a2:b0:fa:9d:a2:b0:8d:cb:88:19:18:2b:53:be:23:
2f:15:8b:a6:8a:fc:8b:77:71:69:09:63:9e:c1:07:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:03:4A:30:FA:47:C0:7D:20:5B:96:BA:1A:1D:4F:4E:66:A9:1E:4C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C3CC35546DFD11F1A1CFCF02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.47.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:22:50:35:12:36:76:6d:bd:0f:00:a1:2e:66:1d:0e:34:41:
2c:de:f4:de:a5:8d:ae:d8:a5:9d:d7:51:d9:43:d8:e3:e0:3b:
16:57:0c:26:54:60:6a:36:ab:f8:f0:fd:f9:e9:34:5c:49:c2:
14:79:65:b2:a7:bd:2a:fe:5a:aa:8f:35:2c:3c:7c:29:e5:51:
bb:99:c0:b7:56:be:a7:0e:f2:31:57:4f:61:5d:73:d6:ae:42:
bd:4c:33:74:68:4f:04:4a:52:61:16:8b:cd:9f:6f:b4:f8:c1:
8f:63:df:ff:69:95:b5:49:b8:30:86:93:30:02:7f:58:f5:80:
9a:45:4f:41:0d:29:b2:6d:9c:6b:0d:10:1f:98:92:0f:63:40:
31:ec:52:7a:1e:c6:a4:71:02:84:b2:fe:16:28:cb:49:73:b9:
cb:7c:09:5f:71:04:93:f6:58:47:3d:30:8c:b4:82:72:ff:cb:
08:80:aa:13:53:ed:7c:a2:44:d6:95:99:65:84:e6:35:a4:1e:
dc:7a:86:f6:76:7d:c4:99:33:2c:f1:24:03:5a:f8:30:1d:25:
c9:d2:da:bc:9f:b0:b4:28:c5:5b:2a:b2:24:3c:1c:9d:4d:32:
20:c9:4f:fe:b1:3c:6a:e6:f8:27:9d:7c:32:a6:bc:6b:fb:ff:
23:2c:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 23:39:07 2026 by rpki-client