Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F48345BE4B7711F1ABB8B4D0CE1D38B0.roa
File: F48345BE4B7711F1ABB8B4D0CE1D38B0.roa (raw, json)
Hash identifier: RKZ2t9Zv+JunjUIAkDgylyiqySVn78FYJTWX9cO3hek=
Subject key identifier: 7B:B8:8E:20:47:CD:8F:B2:DA:09:A7:6A:7F:9C:86:3E:50:39:7B:AD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1859
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F48345BE4B7711F1ABB8B4D0CE1D38B0.roa
Signing time: Sat 09 May 2026 07:23:20 +0000
ROA not before: Sat 09 May 2026 07:23:16 +0000
ROA not after: Tue 09 May 2028 07:23:16 +0000
asID: 834
IP address blocks: 102.165.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6233 (0x1859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 9 07:23:16 2026 GMT
Not After : May 9 07:23:16 2028 GMT
Subject: CN=69fee0e8-e99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:5b:1d:67:fd:83:49:47:3e:fd:bb:63:f4:
60:6e:97:5c:1b:a3:74:98:8f:f2:e7:d5:df:c8:7d:
7e:2a:2f:13:54:74:16:c4:1f:63:66:10:31:58:ea:
18:5e:ba:78:ce:b2:62:83:25:93:b3:81:e3:57:13:
64:30:3b:df:9f:38:82:6b:c4:d7:c7:79:28:e4:47:
f1:2f:4f:97:3a:13:1c:83:25:4a:77:d7:f0:be:2a:
6b:2e:12:49:97:d9:84:fd:8f:60:19:e6:77:0f:f1:
74:44:94:66:e1:2d:d5:b4:af:8e:21:3f:a5:d4:fa:
29:e5:6e:10:8a:5b:34:6a:b5:db:71:2a:a5:9b:0a:
b0:00:03:6e:4f:3d:e7:5f:bb:34:03:0a:10:90:46:
9a:15:14:12:45:89:3b:9b:32:3e:71:a1:25:1d:13:
5a:1c:b5:78:ef:fd:90:03:c0:a4:99:a9:cd:13:0c:
e7:29:24:74:00:2c:28:22:0e:51:e0:84:78:31:e2:
3b:2c:fd:a3:be:d3:66:5b:30:21:58:70:32:e4:a2:
94:4f:cb:66:ee:76:de:d7:e3:ce:99:ba:ea:69:e2:
0f:29:c8:d1:67:f0:a0:d0:1c:5e:04:f9:8b:b2:23:
e6:3a:8f:07:a5:3b:19:cf:9f:df:36:1f:15:b6:09:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:8E:20:47:CD:8F:B2:DA:09:A7:6A:7F:9C:86:3E:50:39:7B:AD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F48345BE4B7711F1ABB8B4D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.16.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0c:3b:fa:25:75:a4:c0:fb:a9:c6:d8:a5:1e:2a:4c:2d:4b:
0a:19:46:41:04:45:4d:64:78:29:7c:50:ba:89:43:ad:86:c1:
79:cf:af:93:e7:71:44:05:8c:ac:47:11:c4:25:6e:19:94:5b:
fa:b9:85:cd:44:00:7c:e8:5f:e7:92:ed:16:21:f6:85:c2:89:
2b:e2:c4:de:82:42:a3:51:71:c2:1b:cc:32:57:bd:35:b6:ba:
66:d0:12:97:7c:96:eb:90:5e:0f:e6:0a:80:aa:67:cc:f5:a6:
fd:77:b3:1c:99:02:49:52:b9:bb:03:bc:fc:af:95:53:7b:c0:
75:96:e4:4e:9e:f9:8e:41:37:36:35:6c:f1:1b:d4:b1:4b:9a:
2f:f3:26:19:96:55:0b:88:ff:61:cc:7b:91:a4:7b:23:bb:a1:
5b:bb:c4:40:94:8b:47:fb:28:52:43:38:db:96:3a:ab:df:a9:
a6:db:85:7b:9a:98:c7:36:cf:c0:49:80:54:b0:e8:d0:0d:fa:
03:6c:2d:58:d1:40:00:70:75:48:56:6c:d6:9f:84:8d:4c:c7:
75:3c:9b:1f:95:1e:aa:60:87:38:af:b9:c3:49:19:7a:f3:85:
45:43:71:26:c9:a3:ae:11:7c:71:a5:f6:82:56:21:6c:22:bc:
98:65:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 04:15:29 2026 by rpki-client