Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/181970DA552211F1B9642311CF1D38B0.roa
File: 181970DA552211F1B9642311CF1D38B0.roa (raw, json)
Hash identifier: FrqgJULwxDs9PKgC0s454c8XZzkNJcz5Z/71KciqL8E=
Subject key identifier: 71:82:0C:19:E1:2A:90:7C:D0:B4:F0:44:65:2D:CB:13:0D:93:15:91
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0816
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/181970DA552211F1B9642311CF1D38B0.roa
Signing time: Thu 21 May 2026 14:33:55 +0000
ROA not before: Thu 21 May 2026 14:33:49 +0000
ROA not after: Wed 21 May 2036 14:33:49 +0000
asID: 37645
IP address blocks: 102.203.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: May 21 14:33:49 2026 GMT
Not After : May 21 14:33:49 2036 GMT
Subject: CN=6a0f17d3-cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:cb:0c:2a:a8:02:68:1f:1d:ff:bb:e6:f8:
fa:6f:0d:d6:8a:e1:3b:9b:1f:7c:03:c8:8e:17:3a:
33:11:27:2e:b8:92:97:6f:ee:a4:43:c6:81:1c:08:
b1:74:ef:82:04:02:7a:e4:9a:c5:a8:88:ef:50:bf:
59:f7:bc:ba:58:c5:be:78:bc:06:72:9a:00:96:fd:
65:3b:ee:65:3a:bd:cb:71:eb:77:34:b3:1e:b6:82:
b9:f9:f9:86:f6:2d:0e:ba:d4:f1:be:bc:3f:99:25:
a5:c3:e9:5e:05:d1:af:80:8b:0f:fb:08:40:eb:2e:
ee:25:0a:21:8b:a3:be:5e:55:43:02:30:2e:41:8c:
c1:4a:9a:57:59:76:53:24:24:c7:fd:fd:ce:cc:56:
f0:3b:17:a4:97:31:8e:e0:b1:0c:d0:6b:ec:3f:b0:
9b:6e:ba:bd:b3:84:f2:2c:49:61:43:d9:79:c9:e8:
d6:61:52:83:9c:2e:59:04:0d:88:5b:0c:ae:34:e4:
ce:17:bc:0c:8e:a1:1d:29:4b:1a:4b:cd:17:f3:93:
27:5a:0f:96:e8:62:ce:45:8b:32:65:b4:30:61:57:
38:fc:77:2c:25:de:31:ef:3f:7a:8e:00:e2:be:48:
a4:b6:e9:3c:a3:34:24:65:a8:16:3d:b0:42:28:94:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:82:0C:19:E1:2A:90:7C:D0:B4:F0:44:65:2D:CB:13:0D:93:15:91
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/181970DA552211F1B9642311CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:b3:d6:26:fc:2c:9f:20:83:ea:f0:46:80:7a:cd:86:7d:19:
52:10:85:58:26:54:6b:0f:de:eb:91:53:a1:bb:fc:c0:45:80:
e6:94:8c:e6:56:4b:3f:35:d5:10:00:6a:d7:f9:26:18:04:c0:
57:fa:38:d9:4e:95:2f:6d:0b:11:97:89:52:52:17:7a:be:cc:
22:84:08:5f:88:a2:23:91:da:b6:ba:0f:c7:82:ea:78:1d:65:
f1:b8:94:9e:66:11:92:88:fe:f5:c0:11:1e:1a:86:b7:eb:82:
d4:ba:41:21:36:d3:d1:3f:b4:f7:a6:c4:7f:2f:2e:8f:9f:5c:
3e:0e:5b:9b:84:95:b5:c5:be:24:f8:6c:ff:31:0e:d9:03:67:
f2:74:f7:13:1d:67:ff:0e:b7:f9:92:0b:73:43:e5:82:46:f0:
e3:c3:95:d8:a1:08:ee:50:27:97:b5:e9:a1:e6:ee:f7:73:1f:
bc:ba:d9:13:dc:19:7c:b2:f2:02:a0:2b:7f:dd:93:18:eb:e2:
6c:2e:2c:3e:18:cb:4d:e0:80:04:91:94:80:b3:fb:c2:e2:f9:
10:be:8c:40:b6:a7:de:f2:21:ba:3b:b8:24:ac:dd:98:fb:96:
c7:d3:ed:da:3b:71:60:38:b1:93:1e:d3:59:e4:98:79:a4:8f:
e1:6d:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:41 2026 by rpki-client