Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/364CE70A334211F1BC84101ECF1D38B0.roa
File: 364CE70A334211F1BC84101ECF1D38B0.roa (raw, json)
Hash identifier: SzY0M69wl8kbhZdJv0mbrKWF59ghGQkBzNtNqRXdeks=
Subject key identifier: 5D:34:46:29:FD:53:69:B0:9F:EF:89:BC:8E:88:2C:38:9E:5D:D5:40
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07E1
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/364CE70A334211F1BC84101ECF1D38B0.roa
Signing time: Wed 08 Apr 2026 11:58:10 +0000
ROA not before: Wed 08 Apr 2026 11:58:05 +0000
ROA not after: Tue 08 Apr 2036 11:58:05 +0000
asID: 37645
IP address blocks: 102.203.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 8 11:58:05 2026 GMT
Not After : Apr 8 11:58:05 2036 GMT
Subject: CN=69d642d2-ad75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:44:8d:23:83:7c:08:69:2c:03:b6:54:93:
1e:ef:18:10:dc:bb:b4:1c:99:cb:fb:01:d3:15:4c:
06:c7:c3:62:d3:12:e3:c8:94:b6:7f:01:6d:29:66:
90:6d:dc:0e:51:ff:dd:06:8f:f0:8d:cd:53:68:46:
9d:56:06:9c:82:f8:6b:03:64:93:1c:99:4e:7d:0f:
ba:0f:2f:f0:b2:22:fe:10:aa:24:ae:e9:7a:99:2b:
32:6a:9e:0f:a1:b9:10:ee:8d:a2:1d:a7:93:98:15:
8c:12:78:8d:bd:aa:8e:79:93:73:8c:cb:84:d1:45:
2c:59:65:66:13:0f:0a:85:35:ba:58:3f:1e:36:1c:
bd:0b:5a:bf:33:ad:a0:31:20:06:79:23:01:28:c7:
fb:d6:6f:63:9b:66:ab:33:86:28:4d:66:cd:de:ac:
4a:33:5a:47:5b:d7:07:6f:9e:56:5a:92:41:41:ae:
ce:fc:6f:5c:9d:ce:7b:d2:fb:ba:ff:34:ed:bc:8a:
91:a8:0f:90:a9:48:06:dc:02:de:44:72:a9:f3:f3:
91:02:12:0f:a4:3c:50:25:cf:6e:34:2a:7c:5f:71:
b2:4d:65:b0:92:b5:bb:0b:df:0d:01:0f:e6:64:2c:
f6:da:9e:2c:f0:17:88:e9:08:86:28:f6:78:00:3e:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:34:46:29:FD:53:69:B0:9F:EF:89:BC:8E:88:2C:38:9E:5D:D5:40
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/364CE70A334211F1BC84101ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.240.0/22
Signature Algorithm: sha256WithRSAEncryption
28:1e:1d:fa:fd:88:88:ab:a2:d4:62:42:6c:11:a4:ed:28:83:
bc:06:16:db:54:d9:35:21:22:45:3f:09:97:3c:87:ed:15:fd:
1e:30:c8:36:5f:ac:6e:d1:75:a7:e4:eb:05:7b:80:d0:d8:f8:
fa:98:4d:12:e0:96:2e:39:2f:87:5c:8b:77:cc:72:60:64:25:
d1:1d:6c:f9:d0:33:e6:f5:f2:80:1c:b6:ce:05:19:df:0d:d5:
81:06:87:92:b5:1a:0c:ab:7b:85:5b:f5:87:e1:04:67:94:d1:
38:f2:a3:9a:5a:85:66:c9:64:a8:7d:6c:55:2f:24:d7:bd:08:
1c:03:5c:d5:f4:00:96:f6:aa:03:9c:df:39:20:b3:e7:17:4e:
67:5a:7b:98:98:a6:a9:a6:c3:64:6c:b5:2f:da:8b:7e:aa:c7:
73:1d:56:7d:fb:ca:12:9d:7f:5f:8a:77:ce:a3:ea:14:11:f2:
39:01:e6:a4:77:96:e9:7d:a2:6b:67:96:e5:34:f0:13:31:2e:
bd:94:67:27:22:64:37:43:de:dc:cb:92:a7:8f:c7:b1:99:86:
aa:a7:6a:bc:b4:5e:be:17:c7:fc:a1:43:f2:71:dd:f1:2a:8f:
53:2a:5c:76:5c:7c:fa:56:cd:d3:c6:04:ca:12:51:88:9a:bb:
8a:ac:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:55 2026 by rpki-client