Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFC2181E43B811F1B2DDE6AACE1D38B0.roa
File: EFC2181E43B811F1B2DDE6AACE1D38B0.roa (raw, json)
Hash identifier: WQHUxuSRyqhgH5sVy5eEYEp5XODTjRtd82DYn7InllI=
Subject key identifier: FF:1F:0E:60:CE:56:00:22:57:D0:80:C6:52:00:08:D3:26:E6:49:B2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 183B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFC2181E43B811F1B2DDE6AACE1D38B0.roa
Signing time: Wed 29 Apr 2026 10:48:20 +0000
ROA not before: Wed 29 Apr 2026 10:48:16 +0000
ROA not after: Sat 29 Apr 2028 10:48:16 +0000
asID: 402215
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 01 May 2026 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6203 (0x183b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 29 10:48:16 2026 GMT
Not After : Apr 29 10:48:16 2028 GMT
Subject: CN=69f1e1f4-8c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:14:56:1d:ed:40:fd:87:e1:18:f4:42:cb:
44:53:ef:5d:44:1b:e6:78:cc:b0:64:ba:0a:16:63:
77:c5:88:25:e0:be:c3:d5:20:ee:18:3d:91:5e:32:
1a:94:cd:59:d7:60:f5:02:20:ef:81:7f:e2:81:35:
89:9d:75:e1:8d:bb:69:f4:23:27:1d:9f:be:f3:0e:
00:1e:73:c7:81:0c:e3:af:6b:33:ae:00:55:ec:c0:
70:fe:10:08:db:22:f4:39:90:71:5f:5f:a2:94:b8:
6e:ca:c4:52:b4:1a:09:be:c6:dd:42:19:e2:ac:c3:
91:ad:b4:0f:54:e5:62:7a:1e:2e:ad:4e:0c:7a:50:
78:a6:b2:ea:af:f2:09:67:5a:f2:3c:f0:43:2f:18:
ca:72:e7:63:50:41:9d:16:a9:fa:2b:04:f9:00:92:
06:d0:b6:31:ef:56:7f:77:66:24:38:b5:3b:27:6c:
a8:73:92:1b:b3:8d:7e:ec:fe:bc:41:0e:ec:a8:bb:
e8:f9:99:d9:e6:0d:51:14:32:67:ac:30:f9:03:1d:
02:2e:b5:7f:87:9e:9a:52:96:86:0b:a2:fa:a5:e2:
da:94:81:2d:d8:9d:f5:96:9a:c9:5d:ad:51:ee:72:
3e:b9:33:08:7d:00:0b:9e:68:7d:33:03:69:2f:1c:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:0E:60:CE:56:00:22:57:D0:80:C6:52:00:08:D3:26:E6:49:B2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFC2181E43B811F1B2DDE6AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0b:d1:a8:24:a3:e2:84:73:59:73:a8:74:b9:3f:f8:41:f9:
43:2a:23:69:3c:2e:e1:cc:be:14:55:c3:77:df:6b:6a:45:e9:
19:75:82:0e:ad:dd:74:4c:85:67:db:18:c3:17:a4:8f:13:08:
83:b3:b2:b4:31:88:dc:5e:28:9a:0b:37:38:ae:79:24:2f:63:
86:f1:17:fa:7f:b4:6b:84:26:6c:cf:a8:d1:c3:25:ca:c6:c8:
d5:8e:fa:aa:a1:11:92:21:1a:86:5b:5e:b4:65:1a:a5:64:bb:
47:39:21:95:a0:c0:db:dc:5c:19:9f:5f:82:2a:33:76:71:4e:
a7:22:70:3a:0f:e2:b0:63:16:3d:45:29:4a:8b:c6:e9:81:b7:
e8:d5:9f:cd:23:dc:14:68:ad:47:6f:0e:cb:17:7f:23:52:c7:
c9:a1:eb:7f:9a:81:9d:5b:31:ed:11:78:1e:fd:48:5d:03:3d:
d2:6c:a6:0a:59:0f:78:31:bf:86:3a:a8:6b:ca:89:ef:be:a5:
ea:0a:30:3d:64:21:15:e6:46:94:cd:1f:8d:11:3d:93:67:b9:
92:ee:56:d6:6d:cb:c9:8d:8c:fe:cc:e3:74:75:7e:70:86:fc:
ad:1d:05:f4:cb:33:ce:50:2f:dc:dd:49:71:93:38:92:33:23:
1e:de:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 23:37:58 2026 by rpki-client