Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/478AB26031BF11F1A6BDDD88DAE4EC9C.roa
File: 478AB26031BF11F1A6BDDD88DAE4EC9C.roa (raw, json)
Hash identifier: Lv1cV1DETQTGDmZ6WDynxJ207w7/5uQQidy8jh7V8yI=
Subject key identifier: 21:17:F0:B2:41:E5:CB:BC:7B:45:6A:52:A8:AD:D2:4F:63:5E:7D:F5
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0794
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/478AB26031BF11F1A6BDDD88DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 13:48:24 +0000
ROA not before: Mon 06 Apr 2026 13:48:19 +0000
ROA not after: Sun 06 Apr 2036 13:48:19 +0000
asID: 37645
IP address blocks: 102.215.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 13:48:19 2026 GMT
Not After : Apr 6 13:48:19 2036 GMT
Subject: CN=69d3b9a8-539b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:4d:4a:0f:ef:05:1e:81:e3:61:5a:8e:53:
6b:78:18:61:6c:fb:b6:1e:7e:57:65:b4:3a:15:48:
6b:2d:d1:a2:62:90:86:15:0f:26:b1:59:95:0e:78:
e4:de:12:4f:6b:e2:9a:70:b2:7c:9a:ed:84:a4:8e:
d7:d9:ba:79:06:a7:3a:fb:6c:7d:e6:73:84:fc:9f:
77:81:b8:4c:12:d0:68:50:71:5d:cf:4c:ce:c0:e2:
f3:1a:15:3d:de:5a:60:57:d2:17:55:e6:30:19:c6:
6f:2c:a5:bc:84:74:e2:13:13:16:47:f5:3c:0b:35:
31:ca:a9:ef:6e:09:0a:97:0b:54:b2:c7:56:4f:c9:
9c:e1:36:f9:15:24:c1:29:77:a1:30:6c:47:c1:96:
9e:7b:4b:68:5d:84:69:0b:8d:2f:a2:1e:7f:ec:5a:
07:8b:ba:0a:de:82:4b:9c:a3:40:61:f9:34:82:4c:
6e:1f:69:a0:ed:ba:0c:85:d3:2c:ea:8b:d2:98:95:
c6:85:40:89:3b:3b:67:27:1e:48:22:07:f3:45:33:
a2:f2:b2:cc:bb:ee:c1:82:8c:08:5f:74:7e:f3:e4:
b3:fc:ad:bd:89:f9:1f:72:88:cc:3b:9a:29:1d:58:
91:f6:4a:ab:6d:e1:d6:0d:c2:83:b9:d0:d1:99:92:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:F0:B2:41:E5:CB:BC:7B:45:6A:52:A8:AD:D2:4F:63:5E:7D:F5
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/478AB26031BF11F1A6BDDD88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:be:7b:09:15:47:00:83:26:35:d6:1b:fe:c9:77:09:32:ab:
2e:f6:40:46:5f:11:bc:6d:7a:c6:c3:d1:d9:79:46:54:d6:d6:
ad:94:87:c4:24:ef:c3:a4:a5:43:c4:f7:ea:69:1f:9c:b7:82:
ac:d9:22:04:74:a2:75:c6:84:9a:0d:f8:43:4c:25:ed:29:bd:
ac:e5:15:b6:3c:0f:d3:12:cd:08:cc:ca:1d:2a:78:d8:e0:cb:
2b:8f:98:3b:72:01:3c:82:c6:5c:9a:2b:57:bd:89:f8:47:ba:
82:77:a9:ad:73:17:1c:bb:5e:38:28:e3:ce:8a:a1:a6:d1:7d:
e4:60:08:5d:5b:56:f3:45:e2:31:a9:53:42:67:c9:5c:09:0d:
b1:1c:c5:e3:53:04:ca:b2:e3:38:f2:95:0d:3f:93:ec:93:6e:
e2:b3:05:2a:f6:c7:33:54:50:50:a4:3a:69:e2:7a:9f:57:ad:
0e:ef:d2:31:e5:68:47:93:d3:99:e0:dd:b0:c8:3d:fb:e1:d4:
5b:e3:15:38:4e:17:4f:71:57:be:bc:f4:ff:f7:0d:08:ab:d6:
60:9d:aa:e3:75:00:9e:c0:0b:30:67:09:a4:6e:b4:b2:7e:1a:
7b:27:a8:26:54:1c:6e:6c:59:ad:fd:12:4b:b9:48:83:aa:e5:
4d:1f:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:27 2026 by rpki-client