Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa
File: BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa (raw, json)
Hash identifier: 3agqaHMVa66E4J+qH2SRoSQKzgeQvz+LrhURDFz8B1I=
Subject key identifier: 9C:2B:5A:5C:33:3C:FE:F0:C5:FF:41:8F:F4:69:3B:3B:4F:40:46:C2
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0772
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:46:13 +0000
ROA not before: Tue 31 Mar 2026 15:46:09 +0000
ROA not after: Mon 31 Mar 2036 15:46:09 +0000
asID: 37645
IP address blocks: 102.221.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Mar 31 15:46:09 2026 GMT
Not After : Mar 31 15:46:09 2036 GMT
Subject: CN=69cbec45-d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:72:df:95:13:c6:a7:02:52:1e:23:39:14:
49:08:b0:25:7e:68:f3:15:1e:96:e0:10:f3:56:35:
6d:c4:9e:b3:ed:cd:73:51:ed:38:92:fa:58:cb:54:
8f:58:f0:33:da:86:5f:7b:ec:0b:da:37:34:fb:59:
81:66:6b:ed:75:0e:84:8c:99:52:bc:5f:cf:9b:4f:
f5:99:85:8e:94:f8:0e:08:a0:c3:02:a6:23:c1:d6:
38:99:a7:c0:3e:57:f8:00:80:00:3d:28:56:fd:7e:
d7:57:c5:c1:13:1b:f7:01:2f:ee:d3:95:d8:14:b7:
54:40:4b:eb:84:60:6f:ef:8d:2b:ac:98:72:d0:60:
ba:87:1b:75:7e:d8:ad:17:d1:ae:18:b9:8b:4b:e1:
68:09:56:c9:2b:21:b0:71:36:fa:e8:ad:3b:c9:13:
ed:86:9e:3e:0a:42:ce:14:9d:1c:bb:e5:dd:00:ce:
4b:cb:71:39:95:6a:11:f6:61:38:cb:c1:ea:81:ff:
95:14:ab:02:f5:22:b0:0f:51:0b:5e:7d:07:a4:87:
0d:43:9f:3e:f5:02:b8:db:47:88:fc:4a:41:95:c7:
bd:f6:9f:00:1d:1a:cd:8e:ef:21:d6:dc:51:eb:29:
44:00:d7:4b:d3:1b:fb:f4:a7:3f:47:4e:9b:50:d5:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2B:5A:5C:33:3C:FE:F0:C5:FF:41:8F:F4:69:3B:3B:4F:40:46:C2
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
93:bc:62:13:b6:d1:03:84:d0:b5:19:6d:20:50:e6:63:fb:52:
09:88:1b:ac:f3:d4:5f:1d:62:1e:28:33:7c:77:ae:c6:bd:26:
e3:8d:08:65:e0:06:d1:57:83:d5:36:37:a0:1d:80:75:a6:44:
92:d9:45:92:57:26:76:0d:b3:f2:ef:ce:f8:ca:16:95:16:fa:
43:c2:52:f4:3c:68:ba:96:86:40:b9:50:7b:1d:7b:56:18:f6:
69:a6:93:98:93:a7:90:d0:e0:13:fa:61:09:08:7a:50:aa:d9:
a7:dd:4a:a9:53:69:a7:95:d9:f2:03:e9:31:4b:79:25:66:2e:
9c:db:23:ea:26:2c:47:66:ca:37:fc:af:2c:1e:eb:02:eb:5a:
e3:35:1e:61:b3:ee:7e:fa:65:b6:ce:b0:e9:97:d6:43:5a:85:
90:82:f4:a4:ea:f6:9d:d3:48:de:09:5e:a3:8d:95:b9:2d:8c:
45:b3:c9:44:21:f2:72:bf:3c:dc:f9:52:98:63:00:4d:e4:15:
32:70:58:83:95:56:82:d8:b5:5a:66:39:66:27:d2:98:e9:f0:
29:c1:ac:96:66:bb:21:1e:50:2a:64:24:38:50:3e:7e:5e:e7:
3f:1e:b6:f4:d1:67:72:63:23:6c:8d:a0:04:04:37:e3:a6:b3:
bd:8d:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:54 2026 by rpki-client