Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/B084894E8B7911F1AFD2E0F0CE1D38B0.roa
File: B084894E8B7911F1AFD2E0F0CE1D38B0.roa (raw, json)
Hash identifier: rPJiD9pbEc7Ixy/dsXmR+8yF3poxIOXlvyQ/6UYx7yo=
Subject key identifier: DD:F3:18:43:EF:C7:C1:55:F5:23:C1:13:97:82:54:B6:4A:3F:22:87
Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Certificate serial: 105D
Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/B084894E8B7911F1AFD2E0F0CE1D38B0.roa
Signing time: Wed 29 Jul 2026 18:17:00 +0000
ROA not before: Wed 29 Jul 2026 18:16:56 +0000
ROA not after: Sat 31 Jul 2032 18:16:56 +0000
asID: 37394
IP address blocks: 102.164.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4189 (0x105d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Validity
Not Before: Jul 29 18:16:56 2026 GMT
Not After : Jul 31 18:16:56 2032 GMT
Subject: CN=6a6a439c-23df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:78:92:21:7f:24:0e:31:38:64:bf:2a:0f:
bd:c0:21:24:f3:67:3c:96:b7:50:59:69:41:78:64:
a9:cf:c6:e2:85:5a:2e:4d:66:50:2e:d4:22:03:3e:
ce:70:01:b8:24:f8:25:f6:6a:c2:f4:b4:94:7f:12:
d9:51:b5:99:ea:24:92:57:30:ce:9e:dc:15:b4:52:
a2:77:b0:16:7b:67:bd:b0:5b:60:08:6e:1d:ac:da:
3d:a0:ff:b9:11:69:61:aa:03:ba:11:7f:bb:6d:8d:
94:e1:ad:26:7c:46:7b:b2:17:f1:b5:90:f5:d1:06:
22:c4:5a:e2:28:c9:cd:20:f4:39:e3:9c:fa:c3:8f:
b2:d5:0d:c0:8c:9f:61:ab:41:66:df:fa:6f:53:06:
53:6b:c0:8a:4f:a5:23:2e:e7:51:26:19:c7:5b:b5:
9e:84:d0:ca:7e:0e:5f:4c:3a:fe:36:d2:bd:b2:0a:
60:0c:55:23:db:d0:12:9e:5d:6f:38:97:36:13:fb:
6e:b3:14:f1:2d:d7:46:27:62:7c:31:a4:98:81:e1:
f9:9b:ba:77:41:03:c3:d6:f7:11:51:f3:64:2e:29:
ad:d7:7b:b3:ba:1b:37:a4:e5:42:2c:50:02:c2:bd:
01:b5:51:a2:15:72:34:a3:34:d1:3f:83:74:e1:9f:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F3:18:43:EF:C7:C1:55:F5:23:C1:13:97:82:54:B6:4A:3F:22:87
X509v3 Authority Key Identifier:
keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/B084894E8B7911F1AFD2E0F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.121.0/24
Signature Algorithm: sha256WithRSAEncryption
56:79:02:cf:9c:0d:ab:a0:b3:d8:73:72:88:87:22:2b:c5:c4:
38:57:c6:0c:69:6c:6c:c3:84:2a:e8:d8:5b:3b:ec:b7:de:95:
84:0e:2f:09:b8:90:2e:3e:b2:d2:f5:e4:6d:68:5a:aa:2b:22:
ac:01:83:f6:22:f6:19:45:57:ac:87:c1:6d:06:a2:9f:ee:2e:
1a:ba:3d:18:d3:a2:da:aa:52:bb:75:da:e4:e6:2a:96:c3:09:
af:e0:d1:30:04:2e:4d:6c:7b:f1:37:8d:87:f7:ad:2c:73:de:
2e:57:1c:f9:66:81:b2:0d:e9:56:26:db:32:16:05:47:54:57:
77:d9:2b:9d:fc:0a:04:de:fa:c3:21:f4:be:8a:a1:d3:90:e3:
97:09:b1:8e:84:d2:13:ef:17:49:f8:de:94:25:9f:1c:d3:52:
97:7c:89:fa:98:56:1a:1f:78:ac:1e:02:5a:f1:16:04:6b:4d:
36:6a:d8:b9:dc:3e:27:25:83:3f:2c:27:a8:b2:d6:ee:04:ed:
00:eb:1f:b3:54:2c:33:73:ca:39:da:07:4f:73:67:1b:45:ea:
6c:92:13:01:02:82:64:ce:6e:61:53:69:a1:c7:d2:47:93:dc:
3c:1e:df:7f:a1:1e:a1:89:62:cc:ef:5f:3d:53:ad:f0:1d:23:
d6:49:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:54:25 2026 by rpki-client