Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9B8752862DBB11F189ED3DB1DAE4EC9C.roa
File: 9B8752862DBB11F189ED3DB1DAE4EC9C.roa (raw, json)
Hash identifier: 5W62VXfhv8h4fla6dJXbBmlFhR3DzFBJKL2EWMvoUbg=
Subject key identifier: A3:03:04:C5:CC:2C:E7:C5:32:32:8F:BE:43:97:43:A1:97:DF:CA:F5
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 077B
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9B8752862DBB11F189ED3DB1DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 11:12:02 +0000
ROA not before: Wed 01 Apr 2026 11:11:56 +0000
ROA not after: Tue 01 Apr 2036 11:11:56 +0000
asID: 37645
IP address blocks: 102.218.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 02:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 1 11:11:56 2026 GMT
Not After : Apr 1 11:11:56 2036 GMT
Subject: CN=69ccfd82-420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:f5:c0:49:f7:9f:4d:b2:61:ac:f7:74:81:
25:c8:39:c8:c6:b3:02:9a:15:20:16:8f:e4:af:c0:
8f:89:90:2e:30:23:bf:d9:e1:d7:ca:d3:77:13:6b:
db:c1:c1:c2:85:9d:6b:fb:d4:ef:4d:87:b8:c4:5e:
af:ad:af:1c:21:35:9c:06:76:63:e1:24:e0:01:1b:
7c:33:dc:db:df:96:c8:66:67:75:b7:5e:8b:d9:ca:
9d:ac:96:f7:43:9d:e1:2a:f2:70:e3:7a:32:f8:05:
0a:1c:29:d9:f7:57:4f:fd:c3:11:ca:96:cf:94:59:
67:17:11:21:2d:68:1b:29:93:69:13:90:62:8f:04:
10:21:65:3f:31:ad:a8:0f:af:28:52:e6:e0:79:ad:
c7:42:0c:24:62:96:72:2b:f8:78:ef:1d:95:ad:de:
f6:c4:72:4c:53:03:08:93:68:32:0a:b9:38:ce:99:
55:15:ed:ad:f2:4e:7f:f9:07:a4:20:85:0e:93:56:
59:cc:82:1a:21:d7:fe:84:1a:73:5a:d0:05:a2:c8:
b1:ac:c7:57:12:5d:f5:f2:8c:e5:2b:d8:5c:ff:2c:
a9:b2:35:33:19:58:1b:d6:a7:04:08:6a:48:cb:43:
da:3e:20:60:4e:d0:2e:1c:a0:e7:a8:20:d8:b5:40:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:03:04:C5:CC:2C:E7:C5:32:32:8F:BE:43:97:43:A1:97:DF:CA:F5
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9B8752862DBB11F189ED3DB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:3a:4a:ba:b7:af:14:8e:4a:8c:71:4b:d6:ad:60:94:10:35:
62:80:61:d7:8a:74:4c:6a:4d:24:b0:af:b8:0d:d6:a6:3d:a1:
b3:ea:3c:6a:b2:a7:d4:99:c6:84:0e:3d:55:25:7a:68:7e:d6:
53:16:dd:bf:2a:eb:bd:e5:21:f6:4c:e9:33:30:90:89:03:c5:
86:d0:54:35:93:d0:1f:7f:e1:c9:c4:94:58:3a:b9:34:ec:14:
a8:85:40:fe:a4:68:64:51:ef:9c:2b:9f:4d:7c:e1:9b:54:34:
64:bd:03:c0:1a:0b:93:f0:49:74:d1:a6:eb:43:36:36:b5:c7:
44:ed:a7:15:a7:3b:83:54:29:90:09:97:b8:31:24:6f:f0:75:
d7:6e:e3:18:27:92:50:f9:c9:81:5a:44:cf:b9:a8:1d:f9:c5:
5a:c2:27:47:46:ec:87:0a:14:d8:94:9c:d1:10:d8:16:43:ae:
d1:05:5a:a1:fb:3b:bd:5e:b9:cf:b4:ca:3b:8e:51:4b:d4:e1:
df:ee:c2:29:e5:70:e4:86:a3:a0:b5:f6:53:5c:b1:e9:c3:e8:
a3:77:b8:4a:70:77:c1:79:96:92:4a:bf:e1:64:a7:55:29:6c:
14:81:65:08:35:f8:af:a2:5a:02:f2:48:29:8f:8e:8e:c2:eb:
da:6b:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:41 2026 by rpki-client