Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/77D3E0C6333C11F1805420FDCE1D38B0.roa
File: 77D3E0C6333C11F1805420FDCE1D38B0.roa (raw, json)
Hash identifier: YU4iJ8s6p9raAZL7JWDoAn+gjmxoRUJUec2K/33AiEA=
Subject key identifier: 69:72:8D:A6:76:47:C3:2F:68:CC:2A:89:45:87:03:EF:A2:36:1F:18
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07D5
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/77D3E0C6333C11F1805420FDCE1D38B0.roa
Signing time: Wed 08 Apr 2026 11:17:03 +0000
ROA not before: Wed 08 Apr 2026 11:16:58 +0000
ROA not after: Tue 08 Apr 2036 11:16:58 +0000
asID: 37645
IP address blocks: 102.206.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 8 11:16:58 2026 GMT
Not After : Apr 8 11:16:58 2036 GMT
Subject: CN=69d6392f-d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:d5:ba:cf:92:68:dc:7c:6e:38:1e:e1:48:
d3:b6:e5:c3:c4:5c:26:ec:5a:99:73:3d:d4:db:7e:
44:8a:60:c3:81:89:3e:15:de:e9:e6:5d:8a:60:21:
c0:b7:41:93:8c:7a:f9:80:f4:13:17:0c:3e:11:30:
85:a2:9d:73:e2:fb:91:60:10:21:95:3a:de:c2:46:
8c:b9:de:e6:ab:e9:06:6d:b2:67:77:15:03:48:44:
8a:bb:1f:50:e5:6b:75:3e:f3:d4:30:e8:05:8c:bd:
09:bc:9d:98:fb:a6:c4:f9:8c:1e:01:2c:88:95:4a:
bf:b7:6a:53:bb:0f:cf:01:1a:85:c4:0e:14:53:35:
82:a9:27:bd:62:1c:74:dc:28:07:44:b5:84:a7:65:
b9:d3:70:77:dc:71:3f:70:d1:0c:67:83:09:5c:e6:
d5:af:07:65:83:dd:47:6a:d4:9d:9d:a1:63:ee:e8:
ec:88:e1:04:63:68:06:57:1f:42:a4:f5:74:37:7a:
41:d0:a7:10:16:80:fd:b3:c1:d6:4c:12:69:6b:24:
0a:2c:39:93:1d:2e:0e:fa:e5:13:7a:0d:37:86:f1:
8e:ac:91:db:49:98:58:a4:25:d0:2c:54:1c:71:25:
c3:a2:3f:b7:4e:f3:35:8d:7f:d5:0e:71:d4:ba:81:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:72:8D:A6:76:47:C3:2F:68:CC:2A:89:45:87:03:EF:A2:36:1F:18
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/77D3E0C6333C11F1805420FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:0c:e5:34:ec:82:0f:bf:6b:51:f7:02:5d:d4:e4:eb:7e:c1:
de:f1:66:f5:22:ee:81:33:84:ab:84:45:de:41:bc:c6:9c:2c:
da:74:2c:73:b8:fb:c3:0d:ff:5d:4f:5a:55:9f:59:a6:0e:13:
84:dc:28:b0:42:f4:0d:48:3f:d7:7b:0c:68:9d:5f:4f:a8:24:
fa:e0:be:47:3d:a4:61:fc:5d:fe:8f:a5:9c:df:39:f1:d9:f9:
3b:bc:36:b9:09:4e:94:5c:34:80:74:9f:d7:d6:a9:7e:4a:19:
45:65:ea:5b:94:5d:f1:cf:84:48:48:3b:86:5b:d1:00:d2:88:
f8:89:4c:00:1d:9c:72:8d:2a:01:f5:a1:89:ad:2a:86:87:03:
72:3c:94:ff:b6:53:78:ff:f9:04:34:ab:2c:4b:49:ce:28:e8:
c9:f9:42:85:92:a3:03:98:36:0a:4e:13:57:4f:75:f8:82:d9:
3f:bb:93:24:85:8b:b7:a0:5d:d4:8a:2a:36:ae:23:70:76:4b:
6e:25:4f:e2:4e:b2:29:12:6e:13:1d:eb:10:d0:eb:c2:27:e5:
ad:ed:93:19:07:61:06:8c:f1:d1:84:25:fc:f2:ec:e8:cd:e2:
4e:68:91:1d:f8:b3:8f:80:e7:c7:95:df:76:63:21:fa:cf:fb:
b1:2b:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:13 2026 by rpki-client