Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa
File: 9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa (raw, json)
Hash identifier: ng+xI/QLSvaWcBtYJKU3+sh8o2b7s+XTpnLUsVJRDNQ=
Subject key identifier: 4A:A5:AE:8F:2E:27:C5:F7:ED:26:3D:A1:51:72:89:D3:10:6F:40:35
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 078A
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 13:22:14 +0000
ROA not before: Mon 06 Apr 2026 13:22:07 +0000
ROA not after: Sun 06 Apr 2036 13:22:07 +0000
asID: 37645
IP address blocks: 102.216.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 13:22:07 2026 GMT
Not After : Apr 6 13:22:07 2036 GMT
Subject: CN=69d3b386-d1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:0e:90:c1:1c:e5:09:64:db:71:fa:9f:ef:
cf:ee:17:a9:94:4c:cb:c6:9a:f9:1d:f4:b1:a9:d4:
fd:55:f3:6a:b8:26:61:98:b4:68:39:08:d6:61:e3:
74:36:ba:3b:1e:21:3f:b3:cd:b1:18:ff:e4:4e:46:
88:41:c8:06:44:13:cd:6c:52:94:cb:1b:d6:49:4e:
93:33:ae:ba:fc:5b:22:fd:26:4c:3f:05:f6:3e:84:
c8:e2:ef:9b:13:82:40:30:13:43:5e:e4:84:f8:80:
c7:da:b0:e0:7f:5a:c6:ae:b5:8d:9e:2e:bc:98:a2:
18:24:a5:39:1a:22:35:e8:65:ac:73:2e:a6:e2:7e:
46:b4:46:6f:e8:f6:ed:a3:93:e6:c1:18:53:4a:95:
47:a0:76:9a:54:d7:3b:05:05:2a:51:d3:54:a1:0d:
f5:21:85:06:e8:5d:52:d8:aa:d5:91:43:eb:fb:d6:
17:50:e8:f1:34:b4:e6:40:3a:de:50:80:32:c3:14:
26:d3:63:43:6f:02:f1:6f:60:fe:59:53:4c:66:cc:
35:d5:73:55:4a:03:b6:30:13:3b:b6:1e:e1:89:c5:
33:5b:07:a3:3f:75:15:54:d0:72:40:c5:2a:98:b8:
23:53:b5:22:76:d8:98:d2:77:e1:8f:a8:cf:4c:97:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:AE:8F:2E:27:C5:F7:ED:26:3D:A1:51:72:89:D3:10:6F:40:35
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.140.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b9:10:eb:19:ef:de:00:1f:6e:23:c1:75:1e:dc:eb:47:5e:
a1:8f:30:3d:2e:3e:6e:0c:e7:79:d2:69:3d:da:8d:c5:35:fb:
8f:8d:a3:d8:d4:1c:2a:37:81:f3:76:fd:02:a7:eb:02:af:56:
87:62:90:dd:fc:8e:b1:a4:61:8a:9d:36:8d:ca:e6:38:5a:5f:
7e:f5:8e:ff:47:8d:af:1b:ee:2e:6e:48:e6:cb:ed:97:76:99:
6a:17:30:3c:22:cd:a1:41:e8:de:00:c4:a3:f5:ed:54:bc:c6:
05:0d:06:e2:90:cc:26:b6:20:a6:38:cc:20:52:e8:83:2c:f4:
7d:b5:e3:62:16:04:4e:cf:96:e3:13:de:13:8b:77:90:2e:ee:
9d:14:71:bd:c6:02:76:ab:77:c1:83:8d:ca:1c:1d:96:63:96:
40:bc:76:71:49:11:4f:15:56:66:4d:47:18:f9:3e:34:52:d4:
59:8b:a0:d3:eb:75:c3:d1:0d:4e:f0:15:ec:ca:47:b7:66:45:
67:07:5e:e8:a5:60:43:48:bd:f3:f9:cf:f1:b2:12:4f:c8:bc:
d5:54:50:3b:ee:39:7e:d2:fa:87:32:6a:5d:9f:e3:b6:5b:18:
c9:6d:37:6d:c8:5c:60:be:f9:6b:f2:73:cb:73:ab:d9:6b:2a:
9d:43:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:56:08 2026 by rpki-client