Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/4650F16C3FBF11F1A3CFF5F1CE1D38B0.roa
File: 4650F16C3FBF11F1A3CFF5F1CE1D38B0.roa (raw, json)
Hash identifier: EHAtGsHfcBIWh0MTAa0S5knx6Wv7+84LwajtYIw1dwE=
Subject key identifier: DE:F6:F0:B6:C2:D6:42:E6:2C:39:E3:68:C8:3D:8D:5A:77:C9:37:4E
Certificate issuer: /CN=F36E25B4AF/serialNumber=E8E39779913830A3BABED84A50BDD0121D57A47E
Certificate serial: 05
Authority key identifier: E8:E3:97:79:91:38:30:A3:BA:BE:D8:4A:50:BD:D0:12:1D:57:A4:7E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6OOXeZE4MKO6vthKUL3QEh1XpH4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/4650F16C3FBF11F1A3CFF5F1CE1D38B0.roa
Signing time: Fri 24 Apr 2026 09:23:38 +0000
ROA not before: Fri 24 Apr 2026 09:23:33 +0000
ROA not after: Mon 23 Apr 2029 09:23:33 +0000
asID: 328658
IP address blocks: 102.212.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/6OOXeZE4MKO6vthKUL3QEh1XpH4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/6OOXeZE4MKO6vthKUL3QEh1XpH4.mft
rsync://rpki.afrinic.net/repository/afrinic/6OOXeZE4MKO6vthKUL3QEh1XpH4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E25B4AF, serialNumber=E8E39779913830A3BABED84A50BDD0121D57A47E
Validity
Not Before: Apr 24 09:23:33 2026 GMT
Not After : Apr 23 09:23:33 2029 GMT
Subject: CN=69eb369a-3b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:8f:de:24:47:c2:25:f9:ff:25:72:77:37:
66:df:81:d4:e9:a1:8d:6a:5b:06:a6:4b:96:b1:7f:
71:80:d6:b8:bd:55:05:88:fb:f7:a3:b6:a2:26:93:
31:f5:56:73:10:90:32:0c:e2:f4:bd:59:f3:31:73:
a8:ec:9f:43:35:04:7a:e0:45:05:9b:d9:1d:2e:db:
40:b6:7e:fe:9f:1f:14:41:da:47:31:62:cc:1e:1c:
b8:1c:ad:15:eb:77:c6:7d:5e:47:85:18:1a:eb:97:
66:f6:65:f5:43:da:16:37:c9:68:c8:84:4d:a2:2c:
d8:89:2f:6f:a1:83:c2:16:0b:7f:80:eb:21:41:1a:
0c:d8:c4:67:b3:38:54:3c:e7:42:fc:fe:36:86:d1:
a1:a7:16:7a:cc:1a:f9:1b:8b:f6:aa:7e:f4:da:02:
15:98:bb:14:dc:c5:a8:23:fa:75:48:01:a4:40:84:
64:d8:8f:ee:2f:d2:16:c2:a8:59:30:ab:b0:a2:f3:
bf:46:d9:c9:47:c2:7f:5b:27:c1:a1:ed:c9:33:e1:
c8:cc:b4:61:3e:8e:ac:b1:da:81:b4:a4:70:a8:26:
c5:bc:3b:4b:85:e1:44:54:f1:a6:3a:c3:cd:5d:44:
eb:b4:8a:ea:fa:a0:38:9f:f7:d4:e7:d9:70:4a:21:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:F0:B6:C2:D6:42:E6:2C:39:E3:68:C8:3D:8D:5A:77:C9:37:4E
X509v3 Authority Key Identifier:
keyid:E8:E3:97:79:91:38:30:A3:BA:BE:D8:4A:50:BD:D0:12:1D:57:A4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/6OOXeZE4MKO6vthKUL3QEh1XpH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6OOXeZE4MKO6vthKUL3QEh1XpH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/4650F16C3FBF11F1A3CFF5F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ce:2e:8c:6e:2a:6d:03:12:96:9f:cb:00:a4:61:c0:15:70:
87:12:99:cb:91:6b:87:3a:9b:20:ed:4a:80:80:54:27:a2:65:
60:6c:27:58:49:9e:75:34:d1:29:94:ff:be:63:5b:f7:48:bf:
81:9c:44:b1:b0:16:ed:fd:2f:41:77:09:b6:92:73:c1:81:be:
82:c4:c1:66:97:cc:75:ec:b4:cb:bc:49:59:a3:aa:75:a6:1d:
1a:1f:24:ec:a0:f9:f5:85:4a:d8:6f:65:86:bf:b5:86:0e:80:
a4:fe:02:90:c2:b5:f6:00:2a:84:0a:17:8a:7e:a9:be:d8:87:
86:2e:4e:3e:b7:c5:1e:f3:01:12:a1:e8:c3:b9:ea:c6:c3:c3:
f6:00:0c:d3:73:87:59:03:6f:f1:be:34:d4:72:21:e2:af:de:
1d:37:5a:66:36:99:50:42:48:03:cf:d4:67:54:ed:22:50:aa:
56:8e:72:06:88:0c:c2:09:ea:f3:4c:47:da:dc:76:ae:91:36:
4c:77:b0:13:72:ce:bd:e6:05:78:42:f2:ea:b1:63:7a:0c:fd:
a7:bc:24:da:b6:ec:80:37:6a:7b:da:0b:66:f1:9a:2e:55:b8:
cb:62:80:4f:74:ba:fd:20:7c:af:16:a0:d9:0c:ac:5f:1c:60:
2a:d0:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:11:44 2026 by rpki-client