Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E814452C6EF311F19C7027D5CE1D38B0.roa
File: E814452C6EF311F19C7027D5CE1D38B0.roa (raw, json)
Hash identifier: 3M88Q7Dyj6vgWIr//+oZHMpf/SaoS9DZYTc7AgQfJ6k=
Subject key identifier: FE:F8:67:68:9B:B0:CA:70:3B:79:0D:14:66:A2:3A:85:0B:09:E3:92
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 191A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E814452C6EF311F19C7027D5CE1D38B0.roa
Signing time: Tue 23 Jun 2026 11:08:48 +0000
ROA not before: Tue 23 Jun 2026 11:08:43 +0000
ROA not after: Fri 23 Jun 2028 11:08:43 +0000
asID: 270353
IP address blocks: 102.165.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 11:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 23 11:08:43 2026 GMT
Not After : Jun 23 11:08:43 2028 GMT
Subject: CN=6a3a6940-ef2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:c4:1a:93:82:ba:44:fe:29:fc:cd:86:30:
ab:a7:9b:cd:87:0f:31:59:a1:c6:87:00:c2:3b:5b:
96:64:4c:f3:72:da:ac:f4:09:42:54:0f:f9:16:99:
63:bf:7d:e5:31:ab:22:fb:68:15:74:79:b9:d9:d2:
44:62:34:c7:b1:58:a5:07:10:d7:24:03:99:bf:3a:
9c:fa:7b:4a:c4:32:06:68:8f:2c:2f:ee:a1:c5:08:
9c:ab:ef:36:5a:e6:7c:93:1c:02:a6:c3:9b:d1:b1:
e6:71:ac:6f:8b:2b:80:68:5c:9a:9e:4f:fe:97:1e:
e7:f8:4a:4f:a3:df:41:23:05:ca:1a:0c:66:8b:c7:
5f:51:f9:66:73:2d:8c:97:bb:27:bf:19:df:ef:63:
3e:d8:e0:11:20:85:28:1a:68:a9:da:6d:5c:45:90:
13:62:1b:60:5e:05:05:79:94:c5:61:55:8c:ee:ae:
da:6b:d0:69:bb:67:5f:cc:d0:f3:56:e4:c0:4a:f5:
96:a8:be:2b:47:ea:a2:ab:bc:fe:1d:42:09:a9:00:
34:67:1c:a8:d2:07:68:bb:03:f5:11:3c:1d:d3:6b:
8f:2a:7e:b4:58:b5:71:e7:0e:51:b7:9a:28:5d:02:
dc:3d:25:ba:43:79:b3:6c:5d:86:67:01:6c:6f:0f:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:67:68:9B:B0:CA:70:3B:79:0D:14:66:A2:3A:85:0B:09:E3:92
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E814452C6EF311F19C7027D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:5c:c7:13:ea:20:54:01:47:d5:dd:47:03:89:f5:ec:cb:5c:
bb:b0:33:05:35:36:81:1d:13:9f:8a:79:b4:a9:5c:38:b5:e8:
42:24:7d:77:24:1b:ac:c7:f7:28:1a:2c:84:f9:25:b0:4a:27:
35:e6:93:de:fb:8b:54:80:7b:fb:aa:d6:1e:3f:5e:ab:aa:6a:
c6:0c:47:c1:ac:bc:96:05:f2:69:e9:40:2e:3a:58:34:3f:99:
f8:f3:ae:5a:e4:8a:19:bb:1f:75:0f:bd:34:66:f1:6a:91:a9:
38:5e:62:f1:1e:af:9e:9a:9b:aa:eb:24:0d:23:38:49:91:ad:
fa:41:ea:49:84:54:d3:52:15:54:b5:1e:9e:15:19:34:43:ea:
43:ee:50:86:2a:fe:01:b5:21:c7:8d:3b:13:39:5d:29:9d:0e:
91:82:71:89:99:39:08:c9:13:63:b1:36:d0:8a:06:92:b7:4b:
54:3e:22:4e:be:3a:59:c8:a1:6b:48:e9:99:45:b6:62:50:c0:
55:69:dd:cb:3a:76:6f:b1:e7:f5:8b:3e:41:63:cc:49:1d:29:
4b:b6:be:2e:79:29:64:47:2b:c4:8c:79:01:15:a1:a0:9b:9c:
7f:2f:c9:a2:4b:2e:16:30:e2:06:07:db:4c:36:89:d5:b1:b0:
ca:c2:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:07:57 2026 by rpki-client