Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2758B6667B911F1B229FFA5CE1D38B0.roa
File: F2758B6667B911F1B229FFA5CE1D38B0.roa (raw, json)
Hash identifier: ebEI+TEYt1QUyTIZvRBcZgqbwRSWMAUoC45fIpJvQpI=
Subject key identifier: 17:E6:EE:6C:67:6A:27:23:BA:A4:63:15:32:D5:44:4F:AA:1A:1F:01
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18E7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2758B6667B911F1B229FFA5CE1D38B0.roa
Signing time: Sun 14 Jun 2026 06:26:16 +0000
ROA not before: Sun 14 Jun 2026 06:26:11 +0000
ROA not after: Wed 14 Jun 2028 06:26:11 +0000
asID: 9009
IP address blocks: 102.165.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6375 (0x18e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 14 06:26:11 2026 GMT
Not After : Jun 14 06:26:11 2028 GMT
Subject: CN=6a2e4988-f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:06:ea:76:dd:f5:2f:38:e1:d0:bc:06:61:
32:cd:eb:fd:3f:42:8f:07:48:54:95:25:f9:46:d0:
90:1c:5e:99:e8:45:f6:02:33:18:68:c7:8e:42:f0:
e7:cf:b3:1a:07:20:67:83:75:40:67:7a:56:dd:e5:
16:e9:c4:4b:87:c5:54:ea:5e:37:a5:ed:d4:d0:c8:
89:3e:37:6c:b7:ac:7a:90:a6:6d:1d:2b:c1:39:fb:
7c:73:a5:02:ee:b7:bb:d5:af:85:24:4c:f2:69:2e:
f0:46:fb:53:37:b6:0a:01:64:49:ee:20:2c:47:5b:
e5:68:8c:8b:b4:3e:69:e1:b8:7d:a0:c6:f5:74:af:
f6:50:4f:9d:7f:89:27:9f:3c:5e:3d:b3:73:27:66:
24:73:bf:78:61:1f:c7:b7:00:c4:09:45:24:68:29:
21:9a:63:12:50:2d:7e:06:81:80:41:50:cb:e4:75:
22:b1:4f:9e:14:c0:db:3b:90:cd:6a:a8:5d:28:0a:
2d:f4:2a:7e:96:be:86:24:51:ec:4f:a5:6c:4e:ea:
aa:1f:7b:34:68:79:fa:5f:02:bb:c4:13:eb:c7:ac:
dd:d0:a1:d3:87:42:dc:a5:90:c0:30:24:86:9a:70:
35:4a:a8:8e:ca:3b:9d:83:0d:51:40:54:d2:16:99:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:EE:6C:67:6A:27:23:BA:A4:63:15:32:D5:44:4F:AA:1A:1F:01
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2758B6667B911F1B229FFA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:08:ba:28:cb:a5:4f:63:c2:7d:76:c6:4b:65:5f:5c:a0:2c:
a2:79:38:05:e0:46:3a:9e:ee:79:61:8e:c4:b1:d7:25:1b:f4:
80:46:bd:63:6f:02:e7:18:3d:1d:cd:3d:c4:9c:0a:fe:02:e7:
da:0f:0a:b9:21:1b:14:1f:0e:ba:fb:4f:46:fd:b0:ba:60:0f:
1d:09:70:1f:41:3b:14:3b:91:74:33:bc:9f:af:f3:41:d0:e9:
fb:9e:f9:ae:47:eb:ce:11:60:ba:fa:1d:0c:ac:6f:56:48:98:
85:fa:9d:e8:b2:43:81:db:16:af:57:fb:a2:25:ee:5e:a8:77:
c0:49:ea:bd:22:51:d1:36:25:a0:9f:90:b6:91:04:f9:e4:71:
e1:69:7f:b2:e3:1b:95:0a:7c:f1:67:41:60:2a:c1:3e:72:41:
3f:65:67:40:6d:e2:e3:4f:0b:f4:3d:a0:70:5e:9a:0e:cd:f5:
88:70:5c:92:70:34:ab:7a:00:9d:59:65:60:c7:14:6c:be:6b:
f7:d4:4d:63:c5:fc:7d:65:3d:5d:36:17:ee:18:91:4b:f7:7e:
89:4a:8c:2a:88:9e:e7:19:27:d8:bb:1c:52:5a:0b:be:8a:bf:
49:11:39:d2:93:a7:46:60:b0:3e:2c:89:5b:6b:29:24:4f:6f:
e7:94:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 16:00:24 2026 by rpki-client