Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/4E77029C3A6E11F1BAF60ACDCE1D38B0.roa
File: 4E77029C3A6E11F1BAF60ACDCE1D38B0.roa (raw, json)
Hash identifier: 5bMVh8NYoJ9iMJxiPRrSW+jgHm91kSAzd5r81XbCgbM=
Subject key identifier: B1:B4:2D:95:2B:08:41:40:B0:C2:A4:08:AA:E4:4D:B4:A0:13:83:7E
Certificate issuer: /CN=F36DE477AF/serialNumber=0D0D1C8E7C4966BAD0511D5B1E46FD095A1B6CD5
Certificate serial: 03
Authority key identifier: 0D:0D:1C:8E:7C:49:66:BA:D0:51:1D:5B:1E:46:FD:09:5A:1B:6C:D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DQ0cjnxJZrrQUR1bHkb9CVobbNU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/4E77029C3A6E11F1BAF60ACDCE1D38B0.roa
Signing time: Fri 17 Apr 2026 15:01:27 +0000
ROA not before: Fri 17 Apr 2026 15:01:22 +0000
ROA not after: Wed 17 Apr 2030 15:01:22 +0000
asID: 329526
IP address blocks: 102.206.8.0/24 maxlen: 24
2c0f:5bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/DQ0cjnxJZrrQUR1bHkb9CVobbNU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/DQ0cjnxJZrrQUR1bHkb9CVobbNU.mft
rsync://rpki.afrinic.net/repository/afrinic/DQ0cjnxJZrrQUR1bHkb9CVobbNU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE477AF, serialNumber=0D0D1C8E7C4966BAD0511D5B1E46FD095A1B6CD5
Validity
Not Before: Apr 17 15:01:22 2026 GMT
Not After : Apr 17 15:01:22 2030 GMT
Subject: CN=69e24b46-afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:36:99:33:8c:42:62:6b:a4:d2:34:52:dd:
f2:e4:11:64:ad:7c:0e:f8:be:b6:e6:ff:04:9a:73:
ce:2e:e8:8c:53:1d:65:8e:80:25:9e:98:90:e4:f7:
8f:f8:a7:31:b0:63:29:ee:e2:47:8f:e3:ea:d9:dd:
5f:d8:fc:d5:b6:52:05:76:4e:6f:55:b3:ff:55:a7:
f9:5b:e3:e6:c8:c2:d0:9b:76:39:cc:f3:d4:9a:c5:
6d:12:86:12:79:0e:c6:6b:a4:55:3b:06:10:ca:47:
f9:e8:d8:b1:8a:da:96:c2:43:63:4b:60:9b:f8:a1:
27:1e:c7:4f:82:8a:82:96:fe:87:26:85:0d:de:70:
b2:7e:23:2b:99:3d:66:cf:cf:6a:be:e4:8f:24:36:
79:a3:b5:3a:f8:2f:eb:2d:16:b4:0f:03:2e:9e:1f:
65:fe:5d:6b:d6:6d:a2:47:35:10:73:6b:2c:8c:0b:
d6:d2:4e:7c:2f:2d:a7:eb:f2:65:ba:11:4b:0b:58:
60:ee:2f:5e:52:0b:ee:db:96:6a:72:ca:d4:e6:68:
46:68:b6:ad:25:76:ab:b0:93:64:36:e5:3b:7e:7c:
97:41:51:68:bc:2d:28:05:4f:d6:aa:4a:76:4e:b9:
ba:db:db:ec:e3:92:1c:b8:89:e8:a5:b4:92:5d:7b:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:2D:95:2B:08:41:40:B0:C2:A4:08:AA:E4:4D:B4:A0:13:83:7E
X509v3 Authority Key Identifier:
keyid:0D:0D:1C:8E:7C:49:66:BA:D0:51:1D:5B:1E:46:FD:09:5A:1B:6C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/DQ0cjnxJZrrQUR1bHkb9CVobbNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DQ0cjnxJZrrQUR1bHkb9CVobbNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/4E77029C3A6E11F1BAF60ACDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.8.0/24
IPv6:
2c0f:5bc0::/32
Signature Algorithm: sha256WithRSAEncryption
55:f8:94:ba:7a:1c:a8:8e:fe:3b:8d:38:ab:4f:59:2d:8a:a0:
04:81:a1:91:66:b4:50:f6:c0:1b:6a:08:8d:65:9d:8c:f9:7a:
6f:78:9b:ef:02:d3:d3:b9:31:18:f2:42:b3:83:20:ab:b0:5d:
1f:64:25:72:5d:c8:6b:00:fa:7f:50:d3:f3:6b:4b:8e:4f:89:
20:6b:ec:0d:9f:3f:b7:69:99:de:51:f6:2c:68:31:a2:8d:5c:
c7:c4:10:7a:53:cc:16:3a:10:4c:32:56:98:2c:c9:3e:10:f6:
46:68:dd:d2:01:51:8d:2a:71:72:29:b9:87:d2:f5:4c:48:e8:
55:66:c7:00:17:a2:e2:82:78:b0:d0:f4:d5:3e:11:77:b5:dd:
ba:66:14:6c:8c:5a:5f:e7:ef:35:28:6d:3d:d1:8b:07:e1:a3:
d1:34:80:e3:54:e6:86:47:1c:90:97:39:a5:02:e7:5d:4a:1d:
22:d2:76:42:bd:d1:fb:28:9e:0e:0d:5c:93:84:60:c5:75:ef:
92:34:a0:6e:8b:db:41:95:b6:e8:3e:d9:53:7e:7c:14:09:93:
f0:5b:84:3f:81:10:d6:ca:63:33:ba:fe:d1:1b:80:0c:1c:1a:
e6:8d:15:ca:25:87:81:8f:13:c6:12:17:36:1e:be:80:4a:bc:
f5:65:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:24:49 2026 by rpki-client