Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2D54F5433DB11F1816569CBCE1D38B0.roa
File: F2D54F5433DB11F1816569CBCE1D38B0.roa (raw, json)
Hash identifier: ATUBBqAoENPw4AjuuOrbE2YBoUdldBrLrVzalMxFd/4=
Subject key identifier: 8D:11:78:50:AD:42:9C:15:E3:72:AA:09:57:BD:C1:89:5B:1C:8B:D4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1802
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2D54F5433DB11F1816569CBCE1D38B0.roa
Signing time: Thu 09 Apr 2026 06:18:39 +0000
ROA not before: Thu 09 Apr 2026 06:18:34 +0000
ROA not after: Sun 09 Apr 2028 06:18:34 +0000
asID: 150293
IP address blocks: 102.165.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Apr 2026 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6146 (0x1802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 9 06:18:34 2026 GMT
Not After : Apr 9 06:18:34 2028 GMT
Subject: CN=69d744bf-a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:39:75:16:49:74:93:1b:a1:ac:7c:6e:ad:
ad:7b:b6:8d:c0:51:bb:dc:23:21:a5:0d:8e:9e:27:
2e:69:d0:52:7f:2d:f0:24:e0:ee:83:0f:74:a8:ee:
cf:fa:62:ab:96:31:16:6e:df:f9:3e:bb:37:36:7a:
87:ba:0a:fd:aa:3a:08:9d:97:9f:26:fb:4e:b6:5b:
3f:98:99:81:57:a9:95:84:f0:71:cd:dc:9b:9b:a7:
07:96:1f:c8:12:60:6e:ce:58:0e:53:64:be:ce:89:
c6:0e:25:f9:c6:38:2b:ed:2f:28:e8:c9:7d:55:65:
45:98:9f:32:93:67:59:dd:c8:bd:28:f0:92:0f:c8:
cb:c0:f1:2a:49:cf:36:31:7c:45:09:fc:1a:3c:be:
bf:bc:e2:c0:c4:77:2e:27:0b:fb:9f:88:14:2a:31:
20:3c:5d:11:c4:5c:1a:02:5b:d1:17:59:ba:23:53:
71:89:6f:23:bc:7c:8d:fb:55:98:a6:12:31:2f:b2:
76:28:8a:88:68:b4:95:d0:1f:92:2a:95:d5:cc:79:
5d:08:a9:83:51:0d:fd:39:79:60:69:cd:cf:70:60:
f1:98:cb:f3:b7:cb:49:66:40:e9:06:cf:2f:87:50:
39:8e:47:47:1e:64:1f:e6:2b:20:de:9b:6e:09:95:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:78:50:AD:42:9C:15:E3:72:AA:09:57:BD:C1:89:5B:1C:8B:D4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2D54F5433DB11F1816569CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d3:ee:26:02:2f:98:b5:cf:ac:cd:67:65:ae:8a:e6:25:51:
bc:b9:45:34:68:e3:6b:8a:f0:fa:64:f6:ce:fe:4a:09:e9:86:
f1:f9:0f:0b:a7:59:a0:6d:1a:2c:f9:3e:04:e8:68:5b:e9:37:
4a:48:2c:f0:b4:61:b9:a9:40:a0:c1:1f:33:5e:f6:5f:4b:41:
9a:ed:94:dc:e3:cc:3c:79:4a:11:72:81:16:cb:87:03:43:32:
2e:5c:6c:be:af:15:a8:01:2a:66:f3:05:11:17:91:3e:fd:76:
f7:e3:f8:09:eb:03:18:62:ae:c2:8d:77:99:5d:ea:75:2e:68:
45:46:62:cf:ae:46:39:8e:3d:9c:e8:57:a5:df:7c:32:6f:a4:
10:cc:2d:47:5a:14:a6:16:9f:4d:7f:dd:7a:d7:f7:87:13:19:
28:b2:ec:13:39:df:e6:11:7e:72:38:2d:b1:b3:07:61:b2:be:
3e:21:23:07:b4:48:03:a0:5c:96:ad:da:03:02:5d:cf:5b:3b:
06:83:5e:42:16:72:5d:99:da:11:d9:29:ee:62:59:5a:84:30:
f9:45:79:77:be:23:43:62:9c:5e:46:96:dc:62:f5:57:7c:d7:
66:08:a5:d4:1e:09:ea:8e:e2:7b:05:f0:1a:99:d6:81:de:c8:
39:61:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 18:15:11 2026 by rpki-client