Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/3D4622F431BE11F1B0952483DAE4EC9C.roa
File: 3D4622F431BE11F1B0952483DAE4EC9C.roa (raw, json)
Hash identifier: 9codvlAei9UqHKLAiSqHgXThiO5HpMqG0grwQ1kO/0k=
Subject key identifier: E2:36:63:E1:24:DC:F4:B5:F0:44:C9:9A:4E:64:B8:A3:0B:52:CE:5B
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0790
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/3D4622F431BE11F1B0952483DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 13:40:57 +0000
ROA not before: Mon 06 Apr 2026 13:40:52 +0000
ROA not after: Sun 06 Apr 2036 13:40:52 +0000
asID: 37645
IP address blocks: 102.215.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 13:40:52 2026 GMT
Not After : Apr 6 13:40:52 2036 GMT
Subject: CN=69d3b7e9-337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:0a:30:f1:2c:46:b9:9f:40:d6:14:0d:8a:
89:99:1e:85:60:48:97:34:e1:bf:51:44:8e:ca:87:
b8:1b:6e:c4:97:1e:6c:c6:1e:a3:e8:84:37:d8:b4:
99:85:6e:b1:5b:fd:0b:09:05:98:47:52:03:0f:5f:
a9:57:c5:3a:b5:1b:91:80:7b:25:31:5f:87:7c:12:
8d:05:7d:40:d1:7a:1e:cf:d5:22:32:16:f8:0c:78:
7c:ca:53:4e:11:31:a6:4e:78:e1:84:f7:0c:07:21:
39:9c:6c:ee:f0:c2:c3:6a:d0:ad:2b:1f:f2:4f:1b:
b7:73:b3:d0:67:12:5f:c7:f9:d0:0b:16:05:53:ff:
5b:9a:ab:35:53:8f:25:09:46:c8:fa:6c:f1:0f:83:
22:c0:97:f8:45:ea:c0:50:9c:3c:eb:73:46:78:5f:
a5:76:17:76:fa:77:98:c1:6e:d4:07:0e:c2:65:07:
b3:ec:72:03:35:6c:a1:12:79:b7:0f:b4:49:7d:f2:
63:5b:bc:77:bd:10:df:35:b4:19:a4:a3:b2:5a:60:
dc:86:62:b2:47:b5:56:08:21:e9:0a:68:05:3e:1a:
19:ce:0d:3c:55:94:0d:26:0c:23:ab:10:9a:f3:ec:
a3:15:a1:f4:48:b5:a3:f2:ee:98:40:c7:0f:a5:ee:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:63:E1:24:DC:F4:B5:F0:44:C9:9A:4E:64:B8:A3:0B:52:CE:5B
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/3D4622F431BE11F1B0952483DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.180.0/22
Signature Algorithm: sha256WithRSAEncryption
37:1a:b0:31:51:ef:56:28:12:21:8f:c5:a4:db:08:21:14:d1:
3c:f8:34:66:16:c1:cb:2a:80:8c:9f:9f:a9:93:46:55:d7:cc:
15:2b:43:52:d6:22:be:46:ff:c1:6f:44:b5:07:0b:86:7a:b2:
b6:33:bc:68:99:f2:e4:2a:59:46:ca:57:c6:6f:75:04:1b:3e:
fb:8b:2a:45:ef:d5:1a:f6:8d:4d:9f:d2:c8:05:77:90:51:b4:
2e:9d:64:dc:52:14:2d:9f:30:32:27:5e:dd:3a:bb:92:b0:cb:
5a:bf:83:18:80:65:40:a2:fd:61:b8:a4:6c:90:29:b0:d6:4c:
2d:9c:36:d7:f9:a8:be:40:78:90:33:2b:e0:d4:e6:9e:28:28:
e4:19:2a:e6:ad:e6:02:c0:1a:76:14:73:b5:20:49:8d:16:9f:
d1:14:44:fb:84:54:64:12:75:f2:81:b9:06:cf:17:a2:e7:8c:
ed:8e:12:11:02:ed:38:cc:f4:14:33:e4:8f:68:2f:3d:ee:df:
b4:0e:c2:07:0e:6e:be:1e:91:d8:62:ad:3a:d5:8f:4d:b1:7a:
f3:cb:03:81:63:a9:1e:e4:04:e2:19:92:f2:a2:5e:79:0d:fd:
09:ee:4b:d4:c4:87:22:8f:09:e6:1e:c9:1e:ad:84:58:0b:b7:
f6:31:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:19 2026 by rpki-client