Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/27FB1568689511F1BF4696D5CE1D38B0.roa
File: 27FB1568689511F1BF4696D5CE1D38B0.roa (raw, json)
Hash identifier: P9r5NT+IZTNrBXf7H5zGZkcusZ81NCamIZY03jMTycY=
Subject key identifier: A0:52:0B:F5:F4:C4:3F:D7:8B:C5:98:E0:4C:E3:29:B8:1A:7B:52:D7
Certificate issuer: /CN=F36CE8B2AF/serialNumber=F7CED85D21B0BD71241876BE99D5126D4C7DEE38
Certificate serial: 02
Authority key identifier: F7:CE:D8:5D:21:B0:BD:71:24:18:76:BE:99:D5:12:6D:4C:7D:EE:38
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/27FB1568689511F1BF4696D5CE1D38B0.roa
Signing time: Mon 15 Jun 2026 08:35:26 +0000
ROA not before: Mon 15 Jun 2026 08:35:21 +0000
ROA not after: Fri 14 Jun 2030 08:35:21 +0000
asID: 329006
IP address blocks: 102.204.48.0/22 maxlen: 24
2c0f:7740::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft
rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE8B2AF, serialNumber=F7CED85D21B0BD71241876BE99D5126D4C7DEE38
Validity
Not Before: Jun 15 08:35:21 2026 GMT
Not After : Jun 14 08:35:21 2030 GMT
Subject: CN=6a2fb94e-f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:98:10:00:65:25:3f:1d:ca:9b:6e:3f:07:
b7:db:0b:cc:63:fd:10:3b:52:aa:a7:76:e9:1b:8a:
20:52:86:cc:2e:66:04:ee:c5:84:23:b7:71:97:db:
54:c0:a6:ab:5e:64:b9:89:b0:9e:9e:5a:67:da:82:
db:2d:b5:4b:88:fd:b3:1d:4f:b5:33:51:ee:5f:dd:
bc:2e:78:1c:c8:7a:4c:31:f3:73:97:81:37:01:97:
fc:6c:df:65:bd:aa:b8:18:49:b5:67:05:51:00:75:
c8:63:04:a8:54:88:69:ce:47:65:51:44:bb:1f:82:
0c:8f:de:62:94:35:a7:d3:5a:64:f7:1d:88:b6:ba:
43:db:45:b6:97:c4:a6:3e:c5:15:a4:15:1b:4d:37:
8c:5e:ff:e1:6e:45:0e:01:4e:94:29:7a:8e:91:fe:
d9:85:15:b3:70:17:8d:62:77:d5:c6:ef:bd:a0:03:
2e:47:c0:a4:17:7d:43:cc:11:1c:9f:28:11:5e:32:
a9:29:28:ee:e4:49:7b:fc:96:67:ce:9c:8b:fc:c9:
57:01:21:cb:54:c7:e4:a9:1f:8a:50:ab:ad:18:a9:
ab:bd:66:72:59:2b:e5:16:f9:32:a6:8c:4e:26:2f:
15:e4:0e:02:8d:63:41:f8:bf:77:9f:82:ef:14:39:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:0B:F5:F4:C4:3F:D7:8B:C5:98:E0:4C:E3:29:B8:1A:7B:52:D7
X509v3 Authority Key Identifier:
keyid:F7:CE:D8:5D:21:B0:BD:71:24:18:76:BE:99:D5:12:6D:4C:7D:EE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/27FB1568689511F1BF4696D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.48.0/22
IPv6:
2c0f:7740::/32
Signature Algorithm: sha256WithRSAEncryption
18:15:9f:18:7d:9a:99:e2:0b:38:8c:71:de:79:0f:bd:55:26:
d4:34:23:1e:f5:f0:03:c8:82:83:09:8a:26:ec:b1:b0:fd:9b:
27:b8:49:6f:53:64:d7:c3:8b:1f:09:cb:0c:ed:1b:db:1c:3a:
a0:a0:89:39:19:a5:89:26:0f:2d:53:53:c1:f9:d6:c8:ec:be:
6b:6e:74:8d:da:c0:65:3b:ac:c4:51:f0:37:c5:90:ac:18:a0:
09:26:f2:4a:ce:5c:2f:96:09:51:8e:5c:05:e0:35:3f:07:18:
ff:f8:e7:9c:a0:4e:f1:cc:ed:24:5c:96:8a:2d:7c:4c:d5:e1:
6c:6b:67:dd:2e:a7:3b:1d:eb:8b:e5:3e:11:21:c2:5f:03:ee:
05:8f:f0:11:74:01:58:2a:9b:09:25:b7:a3:6d:08:30:7b:9a:
f4:4e:01:8f:52:3f:42:d8:e7:7c:c4:a0:8d:8c:fa:5d:ff:96:
bb:71:04:b2:78:dd:b3:52:65:56:a5:17:48:94:1b:0b:d0:55:
a6:c0:16:ad:cd:20:1f:db:39:62:54:6e:51:ec:09:c7:57:f6:
2f:7b:24:24:1f:15:4a:a7:5d:36:7b:25:bd:0e:88:d2:c2:2d:
2d:2e:05:96:cb:e8:b4:27:b7:8e:da:31:00:6a:b5:61:a9:cc:
7a:b7:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 00:30:51 2026 by rpki-client