Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/79A111D23CB811F1849554CECE1D38B0.roa
File: 79A111D23CB811F1849554CECE1D38B0.roa (raw, json)
Hash identifier: W4ncgn/9qCTqVSqUrpr2GjFUMug92xQU3kiqxkivy8I=
Subject key identifier: 9A:5F:35:10:91:1F:B6:CB:83:3E:E1:D9:46:6C:B4:AF:59:47:8B:FD
Certificate issuer: /CN=F36DCA7DAF/serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
Certificate serial: 02
Authority key identifier: C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/79A111D23CB811F1849554CECE1D38B0.roa
Signing time: Mon 20 Apr 2026 12:57:24 +0000
ROA not before: Tue 21 Apr 2026 12:57:19 +0000
ROA not after: Fri 30 Apr 2027 12:57:19 +0000
asID: 329710
IP address blocks: 102.204.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DCA7DAF, serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
Validity
Not Before: Apr 21 12:57:19 2026 GMT
Not After : Apr 30 12:57:19 2027 GMT
Subject: CN=69e622b4-4a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:29:9e:51:c3:74:09:19:3e:18:9c:dc:93:
a0:85:58:89:53:be:6f:ea:6c:a1:aa:d3:fd:05:e5:
c3:3d:fb:90:de:47:c6:0e:e1:33:cb:1e:2c:06:d5:
c9:86:79:62:25:f3:39:dc:44:25:4b:43:89:a0:7d:
b3:69:62:32:f4:6a:ea:6a:59:34:c3:12:02:7b:04:
50:f5:ff:da:10:cb:80:90:01:e5:16:9f:b4:0e:3c:
99:61:03:ea:02:05:a9:11:dc:41:e4:4f:b2:9d:0f:
b1:7f:9f:b9:5e:e9:d1:87:73:04:f8:f1:1d:64:1c:
8d:e1:eb:de:a8:76:3a:2b:5a:d8:e9:5a:2e:79:c0:
ad:b1:27:9f:1b:93:33:ea:6e:70:ea:fb:81:29:be:
ab:e3:c5:11:82:0a:99:15:66:a5:85:37:bc:ca:53:
77:3c:3b:7a:30:f0:a2:72:6c:7d:36:a7:bf:a9:54:
39:5f:98:4d:35:a3:a0:38:74:9f:c3:0b:b5:2d:1b:
70:df:9c:e0:63:f3:90:b0:a7:83:5a:59:2b:64:4e:
66:b4:9f:b3:cf:04:6a:38:f6:b0:94:39:e7:fd:63:
a1:da:d7:45:49:da:4b:3e:bc:3a:76:16:35:52:41:
29:0c:ba:96:9a:62:19:09:2d:6b:e6:52:ed:53:8f:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:35:10:91:1F:B6:CB:83:3E:E1:D9:46:6C:B4:AF:59:47:8B:FD
X509v3 Authority Key Identifier:
keyid:C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/79A111D23CB811F1849554CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:aa:17:ba:a2:5b:35:dd:6e:ca:62:1e:bf:04:8b:de:cb:61:
db:4c:8a:b5:53:65:f2:75:cf:60:0e:f3:1f:a2:25:02:3a:1b:
e6:1c:0b:a8:95:4f:6f:39:69:f2:47:2d:16:df:84:4d:7a:50:
de:be:90:64:c0:8d:a8:6d:8f:67:f3:0f:42:97:8a:82:d9:e5:
5a:66:bc:03:3b:68:83:48:c2:04:a6:aa:73:6a:ff:34:fa:cb:
13:a6:fd:1c:69:ca:4b:46:4c:57:47:97:f1:8d:3b:7d:d5:d2:
c6:08:72:5e:ed:1f:d9:59:be:14:a7:47:b9:f4:cf:6e:aa:e9:
e5:b8:49:27:b1:48:46:d2:95:ca:dd:b5:6e:96:a1:07:d6:7f:
b3:01:14:35:92:eb:ec:99:a7:a8:23:4a:35:26:b5:18:d2:2a:
e5:2b:44:5f:aa:2e:c9:98:b8:42:19:4a:d9:78:f9:e8:e9:11:
e7:ff:36:39:47:22:bc:2b:72:86:4f:a6:37:f9:14:e8:1a:91:
3f:ad:22:e5:18:5a:cf:69:b4:9d:cf:d8:ff:66:b9:7e:83:b7:
55:dd:44:a1:b8:13:86:b0:cf:44:c5:bc:f8:8f:5e:5d:c4:4d:
8b:9d:df:40:20:1a:5d:48:33:e2:d5:a0:ed:dd:6c:b6:d3:17:
7b:d1:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:27:35 2026 by rpki-client