Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CABBCE2A51F011F1A51D0BA2CE1D38B0.roa
File: CABBCE2A51F011F1A51D0BA2CE1D38B0.roa (raw, json)
Hash identifier: k0WOBSSAD85xHkljjXuy1TpfAUOf/l7uyHSVrwf02W0=
Subject key identifier: FE:63:AD:50:F0:9E:94:81:44:3B:30:A0:ED:AB:99:1A:E7:90:10:69
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1885
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CABBCE2A51F011F1A51D0BA2CE1D38B0.roa
Signing time: Sun 17 May 2026 13:03:26 +0000
ROA not before: Sun 17 May 2026 13:03:22 +0000
ROA not after: Thu 17 May 2029 13:03:22 +0000
asID: 834
IP address blocks: 102.165.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 19 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6277 (0x1885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 17 13:03:22 2026 GMT
Not After : May 17 13:03:22 2029 GMT
Subject: CN=6a09bc9e-8920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:28:ad:e2:fa:14:09:07:2a:1f:ad:48:ee:
d6:74:85:26:5d:70:35:e1:27:9c:65:53:5c:41:b4:
8a:1a:6e:85:cd:03:1b:20:08:29:a1:7d:90:27:56:
92:94:9d:22:e7:4a:ab:14:67:09:b0:f8:ab:70:bc:
84:1b:ba:5e:39:79:95:5a:9d:fd:c7:a9:d5:4f:62:
5c:c7:2f:31:1d:39:5e:a5:5f:95:cd:89:f1:ce:6e:
07:f9:83:2e:f5:07:69:f0:6a:88:43:fc:21:54:66:
54:c0:a5:9f:78:e5:90:48:b7:ec:2d:6e:4c:d0:c7:
b4:aa:c2:45:10:62:1e:87:69:9c:02:88:6b:01:f4:
80:b8:3b:c0:0e:1a:d8:7f:10:58:90:00:b6:2a:fa:
c5:b4:b9:76:c8:3b:8a:cb:9a:fa:e8:b5:fb:40:6f:
5f:81:b8:5d:d4:74:e0:12:a8:74:1a:0a:05:f4:55:
75:d1:fe:4e:47:27:e4:dd:88:73:6d:f1:97:57:b8:
fe:45:da:0a:b3:0a:90:e7:96:64:dc:52:3d:d7:9d:
0c:2c:8b:8e:8d:9c:b7:c2:24:2c:0c:c0:f6:2a:09:
55:c8:e1:8d:7d:40:3f:1c:35:e9:35:14:32:16:fa:
b5:f8:88:87:f9:29:b1:d3:c7:87:eb:f0:c5:c0:c5:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:63:AD:50:F0:9E:94:81:44:3B:30:A0:ED:AB:99:1A:E7:90:10:69
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CABBCE2A51F011F1A51D0BA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.0.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f9:a0:3f:ce:1b:f7:f5:2d:d2:2c:3e:b6:c3:1e:01:97:b4:
de:22:b1:33:47:06:91:23:71:bd:3e:e8:02:13:3d:60:78:fb:
7f:03:35:04:9e:c2:f0:13:ef:f9:88:e6:87:7d:11:fa:9f:59:
c5:9c:b1:db:9b:b2:66:48:11:07:2f:bb:d4:54:5d:7a:29:08:
58:1e:72:68:ae:e2:3b:02:2b:cc:c8:be:3f:78:cc:d5:00:3e:
8b:5c:f7:e8:51:5e:e2:b2:e2:16:c1:4c:80:0f:c7:c8:41:f2:
05:b9:b9:a3:a7:83:01:db:3b:5b:ba:fa:b6:e4:37:65:74:f6:
ea:f1:8e:e6:39:5b:96:09:06:0a:90:ef:ab:07:ad:f5:96:33:
25:67:90:1e:43:b2:01:fe:d0:ea:d7:36:29:fe:06:b1:29:2f:
55:91:84:4b:e5:70:a7:7c:9e:91:00:f9:51:04:11:ff:17:aa:
94:5f:f5:99:76:8b:b9:07:75:e3:b3:1b:0a:61:e8:3f:4d:e9:
d4:24:f1:48:ca:8d:0c:16:10:76:be:db:25:5b:c8:ac:24:f7:
0f:47:39:9b:30:40:c4:b8:09:11:60:6d:be:64:91:eb:ab:9a:
7c:6e:7b:b8:73:23:ae:b2:f6:5c:88:8b:33:58:90:5e:31:42:
03:f1:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 20:43:32 2026 by rpki-client