Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/25BDC3AE3FB911F1BD7B28CDCE1D38B0.roa
File: 25BDC3AE3FB911F1BD7B28CDCE1D38B0.roa (raw, json)
Hash identifier: 8iJ7yW5XnyT3qfUzhM1+krXrrLvXpZD+4buY4Oi6Q7k=
Subject key identifier: 11:54:8E:6F:A7:BF:3B:4D:73:6F:9C:C6:B5:15:A1:7B:5E:AB:D7:A1
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 0583
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/25BDC3AE3FB911F1BD7B28CDCE1D38B0.roa
Signing time: Fri 24 Apr 2026 08:39:46 +0000
ROA not before: Fri 24 Apr 2026 08:39:41 +0000
ROA not after: Wed 31 Dec 2036 08:39:41 +0000
asID: 328977
IP address blocks: 102.203.68.0/22 maxlen: 24
2c0f:6300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Apr 24 08:39:41 2026 GMT
Not After : Dec 31 08:39:41 2036 GMT
Subject: CN=69eb2c52-130f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:8e:66:06:70:45:f0:6f:2b:1b:02:57:2a:
0a:20:a7:b1:59:6f:c4:b5:16:01:0e:7f:b2:5a:d1:
99:78:07:89:8a:10:66:13:58:cb:51:b4:3a:3a:80:
5b:38:9b:40:c1:c1:58:40:f2:bf:79:72:47:27:5d:
ae:d2:21:b8:2a:d4:98:17:6a:df:f4:7b:4b:66:aa:
0b:d7:4a:06:b5:10:cb:48:56:28:36:f0:b7:07:8e:
4a:4d:82:a5:82:ad:a6:15:b8:ec:86:ef:40:8a:ca:
33:06:ce:57:03:a5:06:32:be:10:a9:31:52:ae:ce:
b8:d4:99:ed:40:9a:66:35:b5:3f:e3:16:82:1b:4f:
e2:b3:97:6a:37:35:25:93:0e:37:fd:79:a1:3d:8e:
ff:36:a9:c7:5b:e2:67:33:ae:88:ae:cd:71:4b:c4:
dd:67:3e:2e:8e:69:b5:9e:05:f4:57:43:19:40:1d:
4e:25:6e:ac:b0:f8:90:9a:0f:1a:cb:3c:63:a8:a7:
cd:9a:8e:9d:9b:e8:2d:6c:d3:6d:1d:33:ec:8c:5c:
2f:ba:ca:42:51:49:a2:99:31:81:ba:ed:c0:04:bb:
22:6e:16:4a:c9:5a:83:ef:e7:74:ce:8f:2c:04:3b:
6a:f0:b9:6f:40:c0:9c:6b:6f:ad:af:4b:7c:dd:03:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:8E:6F:A7:BF:3B:4D:73:6F:9C:C6:B5:15:A1:7B:5E:AB:D7:A1
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/25BDC3AE3FB911F1BD7B28CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.68.0/22
IPv6:
2c0f:6300::/32
Signature Algorithm: sha256WithRSAEncryption
1d:37:82:d6:5c:4e:55:6a:0d:95:34:da:46:69:d6:6b:03:5d:
e8:8e:a5:87:1a:f3:7b:56:5f:cf:02:9f:e8:1c:46:e4:f0:d0:
d3:fe:88:7b:0a:31:1d:1f:4a:7b:b9:a3:17:b4:3a:cd:08:c4:
45:b2:db:9f:1b:d3:8c:80:02:52:b1:3d:84:b8:9b:76:54:15:
70:ea:25:11:ca:c9:c2:e9:32:9c:1b:3f:a6:6e:ce:11:b7:c2:
da:09:59:83:5c:4b:50:f5:c4:19:fb:32:62:81:60:6b:9a:82:
57:ac:53:9c:ee:88:a3:ad:7f:ca:dd:fb:c4:3a:9f:52:0d:b7:
91:5f:56:bc:0c:0d:3b:94:a5:e3:34:6d:7d:c5:55:cc:cc:5b:
28:db:25:a3:ab:83:54:ac:42:ca:f1:32:eb:7a:07:88:cb:ae:
ab:25:17:96:0a:51:5e:6b:4f:d3:00:d0:d8:3a:1f:9c:75:1c:
0d:e8:95:2b:b8:25:e7:e5:7b:9b:17:79:c6:e9:fe:9c:0e:5f:
cc:a2:a0:84:34:2b:6a:2b:7d:c2:e6:5c:29:72:cd:59:58:48:
3f:01:36:53:a0:74:07:f9:4f:99:18:f7:7c:b6:ed:7a:c4:a2:
b2:56:cb:58:e5:4a:cb:65:7c:68:15:c6:fb:a1:78:7b:1b:f8:
f5:56:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:19:16 2026 by rpki-client