Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/48690C5431C911F1981D27BFDAE4EC9C.roa
File: 48690C5431C911F1981D27BFDAE4EC9C.roa (raw, json)
Hash identifier: EUVMx+SXkeZ58/9y3EmTr96W5XKI9Y2B6lAIh14TtcI=
Subject key identifier: C8:89:31:71:DD:39:3B:CB:6B:C8:73:51:4A:B1:69:A9:97:C4:7D:70
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07A9
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/48690C5431C911F1981D27BFDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 15:00:00 +0000
ROA not before: Mon 06 Apr 2026 14:59:55 +0000
ROA not after: Sun 06 Apr 2036 14:59:55 +0000
asID: 37645
IP address blocks: 102.213.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 14:59:55 2026 GMT
Not After : Apr 6 14:59:55 2036 GMT
Subject: CN=69d3ca70-51ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:d9:d7:6a:38:ec:13:c1:fe:97:31:67:80:
0f:00:e2:0b:57:69:94:94:cf:8c:fc:94:0a:23:bf:
1f:01:a1:bc:ff:25:25:0c:a7:35:3e:9b:1e:8b:7f:
d2:48:f9:ba:b8:49:fd:c3:55:24:37:3c:ca:80:12:
d3:eb:94:f1:4b:f3:da:cc:d2:7a:e0:a9:9c:64:44:
ea:80:d7:32:85:a9:6a:88:e9:94:c9:db:a4:79:9a:
4f:ce:4c:42:61:cd:00:ab:21:d2:3c:31:d7:56:6e:
1c:07:17:65:97:6a:14:42:03:06:a1:32:62:79:0a:
0d:3d:e6:3d:09:4f:2d:6f:13:26:75:e9:56:36:9f:
17:b1:ba:bc:21:18:88:5b:6e:a5:1a:0f:b6:f4:13:
b5:ae:39:98:cd:ca:66:53:77:41:53:3c:ff:b3:98:
85:6f:bd:47:d5:80:10:5c:1a:79:ab:aa:d3:00:46:
55:5d:63:24:65:81:2a:f2:7a:1d:63:ec:e6:ee:fc:
4e:15:ee:ce:26:1f:4c:8b:64:c8:26:4f:18:d8:ea:
98:4e:6e:33:e3:e0:b7:a6:44:be:64:6a:58:4d:30:
15:47:6b:57:90:36:2b:9f:ec:57:51:aa:81:90:34:
66:85:b2:c7:bc:a7:24:0f:62:98:85:be:26:52:2e:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:31:71:DD:39:3B:CB:6B:C8:73:51:4A:B1:69:A9:97:C4:7D:70
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/48690C5431C911F1981D27BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.100.0/22
Signature Algorithm: sha256WithRSAEncryption
22:22:d5:28:7f:65:64:86:0b:99:11:93:0a:ca:99:d0:70:ea:
d8:44:89:fe:67:e7:7c:69:f3:9d:a7:5f:40:e0:c5:17:8e:09:
6b:51:bf:a2:8d:b0:68:0a:62:50:94:8f:f7:08:a0:56:dd:9d:
fe:76:9d:22:67:d3:87:e3:1a:41:a9:d4:9c:bc:99:6d:0a:62:
6f:2c:e2:0b:68:3f:91:14:8a:88:93:d8:f7:34:9f:28:7e:1c:
ff:ca:82:b8:66:be:3d:f3:d1:94:77:5a:8b:69:5a:a8:4b:7a:
46:b2:eb:aa:30:ae:80:19:da:6c:0f:7c:2a:32:39:45:00:16:
7d:dd:87:75:a8:b9:ed:b8:4e:9f:44:5d:d6:dc:06:e6:b7:6e:
78:2f:92:fc:e6:00:29:12:b6:1b:05:a1:29:6c:3a:eb:19:c7:
f1:db:39:ee:f9:d0:9a:ab:81:cc:91:4c:b3:7c:ae:41:2e:41:
45:02:99:a8:4a:12:f0:3c:89:8b:b8:54:66:d2:f4:83:b3:8b:
82:af:01:35:42:89:98:c9:53:88:12:b2:52:6c:52:b8:95:f8:
bc:36:81:c7:6e:5a:8a:e7:8d:56:9b:f4:9e:85:91:7f:5c:93:
28:89:28:ee:2a:d9:b9:a7:48:db:f0:e1:dd:f1:4a:ac:f1:16:
d3:8c:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:23 2026 by rpki-client