Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/489DB1C060AE11F19B5B54D6CE1D38B0.roa
File: 489DB1C060AE11F19B5B54D6CE1D38B0.roa (raw, json)
Hash identifier: cXrI3skj8kIHY1XDkyL5MLQ6B1Y8UWU7GQtiYUa6x7U=
Subject key identifier: 4E:09:C6:CB:7B:55:4B:B1:B4:70:B6:95:1F:1F:1E:9A:7C:78:A5:DF
Certificate issuer: /CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Certificate serial: 05D7
Authority key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/489DB1C060AE11F19B5B54D6CE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:15:09 +0000
ROA not before: Fri 05 Jun 2026 07:15:04 +0000
ROA not after: Mon 30 Jun 2036 07:15:04 +0000
asID: 29286
IP address blocks: 102.216.38.0/24 maxlen: 24
2c0f:a20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1495 (0x5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DCAE3AF, serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Validity
Not Before: Jun 5 07:15:04 2026 GMT
Not After : Jun 30 07:15:04 2036 GMT
Subject: CN=6a22777d-9583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:56:7c:04:2e:c8:2c:49:e6:99:bd:ee:93:
b6:f8:76:4f:a3:b6:ae:f8:b5:11:74:65:f5:f8:93:
6c:4c:d7:ff:94:4e:ea:07:c6:91:43:de:c0:89:f5:
10:de:c9:4f:e8:54:81:7f:0c:b7:97:77:da:4f:a0:
ee:b5:ae:2c:56:27:c3:e5:fc:5e:8a:2a:be:a8:e9:
35:aa:c6:e9:c5:45:f6:3c:20:a4:8a:e2:b7:8d:2b:
a9:d0:17:2a:d6:8b:9a:54:b8:e1:25:52:2b:44:3f:
f5:69:5b:90:f2:9f:cd:88:15:e6:3f:5d:81:0c:26:
d2:ce:41:31:d3:6d:cb:29:67:54:a0:97:43:be:c1:
b8:32:1e:b0:22:12:f8:f0:65:ee:5e:7e:ed:51:11:
6a:ba:af:30:41:33:ec:96:b6:e0:c9:f8:8d:af:00:
43:19:1d:a2:85:92:18:61:43:e5:a5:2c:c6:4a:84:
cf:a9:8f:f0:2a:eb:14:51:f9:b9:5a:79:eb:73:63:
36:81:b5:71:b0:52:fe:1d:30:fa:17:2e:80:85:1b:
b2:ee:a6:26:3f:dc:b4:91:f3:42:7c:4c:dc:05:1d:
b2:42:74:73:67:cc:44:6c:a7:be:b9:b1:7b:2f:32:
d8:3f:85:3c:9f:8c:f4:2c:4c:10:39:e5:86:aa:a4:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:09:C6:CB:7B:55:4B:B1:B4:70:B6:95:1F:1F:1E:9A:7C:78:A5:DF
X509v3 Authority Key Identifier:
keyid:01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/489DB1C060AE11F19B5B54D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.38.0/24
IPv6:
2c0f:a20::/32
Signature Algorithm: sha256WithRSAEncryption
55:41:7d:e0:f9:6a:00:43:f7:04:4e:43:35:e6:5b:15:2d:5d:
73:86:4a:19:8f:78:19:14:da:82:d3:ba:d4:ac:d3:38:bb:2d:
84:17:f5:05:29:a1:dd:16:26:53:95:c9:6f:04:44:39:17:22:
ef:4d:87:95:a4:9a:ca:7f:70:34:e2:e3:d4:2a:ee:2b:64:b8:
67:3a:1f:41:b5:f9:5b:76:19:db:6c:b2:ad:ff:2a:ab:fe:21:
42:91:29:2c:94:30:56:8f:52:f3:bf:aa:27:e3:9f:70:30:61:
21:2a:23:aa:42:a3:46:30:38:96:53:49:67:90:b0:f5:57:a8:
3d:01:80:59:3a:14:68:1e:11:4e:82:38:9e:af:09:1a:4f:31:
a3:dd:38:91:39:49:50:26:7a:e1:cc:a4:d6:db:ac:10:ec:e6:
bd:5b:4c:64:20:1f:48:c0:15:fd:7b:43:c4:85:c9:e3:46:dd:
de:1b:e4:6e:1d:90:f7:ce:a0:0f:d8:de:5f:3f:38:f2:ba:d5:
23:52:4a:cd:1b:fc:9f:9b:b7:37:41:b3:4c:fd:97:b2:7d:78:
da:5a:5c:c6:8c:a0:c2:19:81:81:9d:fd:48:c1:d5:3a:4a:5c:
a4:bf:00:bb:b8:2c:99:d9:d2:ed:b2:81:a8:49:48:3c:23:a7:
85:fd:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client