Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/747283F43F4611F1A339B102CF1D38B0.roa
File: 747283F43F4611F1A339B102CF1D38B0.roa (raw, json)
Hash identifier: vjn/aIQu086oU9KDTXOj3dUynK2+Q2gAJ7LSOccPphc=
Subject key identifier: 02:81:13:C9:35:C1:D4:F9:93:60:D6:03:4F:8F:3E:98:C6:AE:8B:FB
Certificate issuer: /CN=F36E25B4AF/serialNumber=E8E39779913830A3BABED84A50BDD0121D57A47E
Certificate serial: 02
Authority key identifier: E8:E3:97:79:91:38:30:A3:BA:BE:D8:4A:50:BD:D0:12:1D:57:A4:7E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6OOXeZE4MKO6vthKUL3QEh1XpH4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/747283F43F4611F1A339B102CF1D38B0.roa
Signing time: Thu 23 Apr 2026 18:58:46 +0000
ROA not before: Thu 23 Apr 2026 18:58:42 +0000
ROA not after: Mon 23 Apr 2029 18:58:42 +0000
asID: 329230
IP address blocks: 102.212.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/6OOXeZE4MKO6vthKUL3QEh1XpH4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/6OOXeZE4MKO6vthKUL3QEh1XpH4.mft
rsync://rpki.afrinic.net/repository/afrinic/6OOXeZE4MKO6vthKUL3QEh1XpH4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E25B4AF, serialNumber=E8E39779913830A3BABED84A50BDD0121D57A47E
Validity
Not Before: Apr 23 18:58:42 2026 GMT
Not After : Apr 23 18:58:42 2029 GMT
Subject: CN=69ea6be6-c123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:cc:5e:0d:15:87:df:55:b0:41:c5:f8:bd:
bf:c2:e7:a7:2b:92:7a:4b:7b:3b:1c:4d:12:d2:d5:
a1:c1:86:25:38:94:e6:e7:38:0e:b1:11:e5:e8:ac:
ae:14:64:75:49:f3:50:05:7b:d7:92:8e:a1:4b:f7:
4a:f8:fd:32:62:41:8b:d3:80:7f:ca:ad:e3:9b:2d:
37:03:ac:c7:80:e1:4c:46:c7:22:c6:55:ab:b4:86:
26:a1:b2:bc:29:06:8a:be:1e:d4:84:ef:2b:b9:1e:
4d:12:4b:8f:f9:18:e2:5e:97:31:77:fe:4c:65:97:
76:2d:a8:c6:b3:58:85:06:ae:5f:6a:13:59:4e:f0:
69:69:f5:6c:37:dd:7f:2b:0f:fd:fd:78:fd:37:9b:
a6:48:2a:0d:4b:5a:5c:23:10:5d:fe:44:69:f0:30:
a0:5e:62:2d:17:2b:5b:52:aa:d7:af:7f:b3:17:15:
95:f2:d1:56:29:ba:b5:f4:b9:73:39:36:d5:6f:47:
b7:b8:7a:93:e0:25:aa:7d:1e:bc:21:bd:0a:e6:49:
14:e9:b4:bd:57:5a:34:b0:dd:b6:5e:bc:58:ae:2e:
9c:d4:d1:f6:70:20:0a:0b:7f:cd:ef:58:3b:97:db:
96:b4:34:c8:10:24:ba:b4:2c:b0:cb:18:2b:de:ec:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:13:C9:35:C1:D4:F9:93:60:D6:03:4F:8F:3E:98:C6:AE:8B:FB
X509v3 Authority Key Identifier:
keyid:E8:E3:97:79:91:38:30:A3:BA:BE:D8:4A:50:BD:D0:12:1D:57:A4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/6OOXeZE4MKO6vthKUL3QEh1XpH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6OOXeZE4MKO6vthKUL3QEh1XpH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E25B4/58E8EFAC3F4511F185A9D4FACE1D38B0/747283F43F4611F1A339B102CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:69:76:21:45:e6:f7:23:9c:6a:c0:14:0c:23:40:fb:3c:e6:
af:6f:b1:65:5a:50:87:ff:e9:53:ac:e1:9c:a2:5c:8e:29:d1:
31:d3:79:de:f0:f3:e6:76:84:78:ad:e3:f2:88:ba:f8:37:cc:
ed:66:23:35:e3:67:b2:c4:0d:b2:33:a5:29:84:11:c7:6d:bc:
55:0e:42:6e:f2:f9:90:b8:85:f6:0d:77:73:09:da:90:30:c5:
08:36:23:06:5e:a1:a5:bb:b4:62:14:2d:b0:28:64:af:4c:4a:
17:f5:82:9a:3f:2c:e9:8c:27:17:20:f9:31:ea:6b:6f:f3:64:
36:d6:4e:50:50:50:24:68:f7:15:24:a8:ed:0d:02:28:1e:ab:
6e:4b:02:66:5c:9d:6d:c1:34:ba:85:63:0f:df:e7:11:06:78:
f3:ed:aa:af:2b:3c:85:9e:bd:76:f0:fd:0a:a3:16:26:35:9a:
b9:70:25:5a:8d:82:18:72:9f:7c:09:97:d0:ad:3f:a0:28:01:
42:f3:4e:74:95:0a:12:70:b1:fa:2f:bf:ea:d0:67:fb:e3:28:
f6:eb:d7:b4:e9:57:b9:6c:cb:85:67:f1:aa:ca:62:1f:05:f6:
e5:cb:ca:c9:db:2b:71:a1:01:f8:11:2f:2b:51:f2:8f:b1:55:
b4:db:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:12:01 2026 by rpki-client