Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/9C6E6940689511F1AD703AD9CE1D38B0.roa
File: 9C6E6940689511F1AD703AD9CE1D38B0.roa (raw, json)
Hash identifier: hmEhInLBJqaLVuFHEkICSEwu/JjxJN7wyGooUYia0VI=
Subject key identifier: BA:32:63:BA:12:6A:E8:79:98:F3:23:F2:7B:25:6C:FA:BA:C7:59:51
Certificate issuer: /CN=F36CE8B2AF/serialNumber=F7CED85D21B0BD71241876BE99D5126D4C7DEE38
Certificate serial: 04
Authority key identifier: F7:CE:D8:5D:21:B0:BD:71:24:18:76:BE:99:D5:12:6D:4C:7D:EE:38
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/9C6E6940689511F1AD703AD9CE1D38B0.roa
Signing time: Mon 15 Jun 2026 08:38:41 +0000
ROA not before: Mon 15 Jun 2026 08:38:36 +0000
ROA not after: Fri 14 Jun 2030 08:38:36 +0000
asID: 329006
IP address blocks: 102.217.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft
rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE8B2AF, serialNumber=F7CED85D21B0BD71241876BE99D5126D4C7DEE38
Validity
Not Before: Jun 15 08:38:36 2026 GMT
Not After : Jun 14 08:38:36 2030 GMT
Subject: CN=6a2fba11-e905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:0d:a7:c3:88:9b:a0:9d:3f:17:61:a8:f3:
dc:83:0c:4b:bd:53:7e:b1:a8:69:26:be:1b:f2:02:
56:3e:00:ba:5b:12:ae:25:b6:61:0d:93:42:47:9d:
5d:c1:ed:b5:5a:b0:b9:23:2d:f6:bd:74:30:1a:a6:
3d:d3:f6:9f:e8:00:d4:8c:a0:df:42:2e:a8:e4:d6:
c4:c3:4a:02:59:c7:14:b3:f3:6b:fc:cf:09:a4:af:
0a:58:19:ee:c1:31:3c:c2:d3:cc:f7:b0:cf:d8:aa:
07:2b:a0:8c:84:d5:5d:01:c5:63:74:42:80:c9:80:
37:9a:d9:57:b3:75:db:09:8e:9f:6a:45:58:ac:e1:
f2:6d:9e:e4:e1:33:5a:50:1e:1e:c1:d9:32:69:b0:
31:61:61:e2:83:be:2b:64:33:55:81:be:fb:40:57:
fd:cf:94:6f:56:55:71:68:2e:a6:af:ae:f1:5e:bb:
5b:6c:a6:11:e0:36:5a:74:f6:72:00:f6:d5:e1:52:
c8:f2:b3:30:ac:22:18:7b:90:bf:bd:07:de:c5:06:
eb:dc:06:6f:05:41:c5:a4:10:97:3a:c8:ea:95:89:
8b:73:ce:7c:40:5e:ea:c4:ee:8e:11:ab:09:a0:9d:
2a:0c:7a:32:08:57:96:bb:b4:5e:f2:a1:55:74:62:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:63:BA:12:6A:E8:79:98:F3:23:F2:7B:25:6C:FA:BA:C7:59:51
X509v3 Authority Key Identifier:
keyid:F7:CE:D8:5D:21:B0:BD:71:24:18:76:BE:99:D5:12:6D:4C:7D:EE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/9C6E6940689511F1AD703AD9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.48.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ed:22:c4:9e:61:7a:96:54:00:d1:c5:bf:cf:43:9f:68:9e:
35:77:7a:ce:48:57:98:24:88:ff:1e:2f:10:36:fe:7b:9e:04:
e2:c7:4a:d8:40:89:19:bf:37:d1:b5:c8:36:84:60:b8:c9:d8:
ff:ce:05:21:9c:2f:2c:a7:7a:41:5e:f9:80:4e:cb:b2:0d:e5:
87:ad:72:e2:60:8e:81:98:ec:c5:67:53:0e:42:b2:f2:ac:1e:
d8:94:6b:2e:d5:65:5a:3f:b7:9c:19:0a:8a:5a:ed:27:eb:15:
d9:3c:8f:f7:8e:45:f8:9d:e4:d9:11:ef:34:80:2d:ab:e7:85:
10:8a:ca:a1:a2:14:04:c5:e6:45:71:bd:52:b3:71:9f:7f:29:
6d:0c:b0:70:45:9f:64:4f:6b:e1:97:e8:93:ff:98:92:7e:4a:
ba:22:dc:88:b7:21:32:e0:ca:56:9e:0f:c0:53:73:97:4c:6b:
2a:07:08:af:cd:8c:59:4d:85:ad:ee:c4:d8:a7:7d:90:88:7c:
14:3c:76:bf:c3:ec:33:1f:33:43:0e:d8:cd:a1:1d:99:88:b9:
5e:24:80:c6:b8:2e:8a:9b:24:32:ea:20:8b:fe:7c:bc:90:2d:
1a:d8:fb:4c:d1:f7:d7:03:42:81:c5:fe:9a:c4:56:ca:9e:d5:
8a:49:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 00:30:40 2026 by rpki-client