Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/C2372772334111F18BB80E1ACF1D38B0.roa
File: C2372772334111F18BB80E1ACF1D38B0.roa (raw, json)
Hash identifier: Gwi4ueCCvJZIEZsnyEOTtAlQafyA/I+7H+Prmzi5eP8=
Subject key identifier: C6:D9:35:9F:0D:A6:C0:45:9A:12:4F:EE:D0:03:91:47:F2:CF:F8:1B
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07DE
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/C2372772334111F18BB80E1ACF1D38B0.roa
Signing time: Wed 08 Apr 2026 11:54:55 +0000
ROA not before: Wed 08 Apr 2026 11:54:49 +0000
ROA not after: Tue 08 Apr 2036 11:54:49 +0000
asID: 37645
IP address blocks: 102.206.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 8 11:54:49 2026 GMT
Not After : Apr 8 11:54:49 2036 GMT
Subject: CN=69d6420f-f263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:d6:b4:b2:77:b6:3d:19:f1:c0:ca:f5:66:
6d:ae:3b:11:6f:f0:29:84:b1:92:7e:5b:34:fb:61:
49:d7:c7:59:ce:e5:6e:17:bc:eb:fe:d3:37:aa:e3:
7e:57:04:f8:3f:27:ad:76:01:58:3c:71:ed:1c:08:
d3:18:7c:d3:fc:66:13:49:1b:b9:d4:21:f0:54:8d:
56:41:83:a2:e9:c7:fb:f5:88:a6:b9:a7:d4:28:ba:
cf:af:f6:ac:1f:57:d5:5b:ce:6a:6a:c8:f7:7f:d5:
a9:23:af:ec:e6:b0:45:44:e0:51:7a:ec:14:41:16:
0b:01:97:71:02:57:82:86:b3:76:25:bb:42:1a:13:
6a:ab:7c:98:ee:c4:21:c0:35:6d:72:09:97:af:62:
6a:97:d8:cb:50:cd:f5:8b:e3:65:f4:74:b1:58:d7:
bc:5e:0e:86:dc:ac:6e:6f:52:22:48:27:f3:0a:52:
8b:0c:ae:66:1d:6f:93:cd:cb:75:72:72:de:a2:3a:
b4:79:c0:ac:ec:84:00:ef:fd:05:f3:b6:1a:fc:6c:
3d:cf:7f:e1:78:f1:c0:18:d6:07:4e:40:ad:0e:fe:
82:41:2b:c8:0f:c4:d2:c9:98:48:40:5b:3d:31:6b:
fd:d4:d2:c9:4d:af:ae:69:6f:98:a3:aa:81:00:0d:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:35:9F:0D:A6:C0:45:9A:12:4F:EE:D0:03:91:47:F2:CF:F8:1B
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/C2372772334111F18BB80E1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.196.0/22
Signature Algorithm: sha256WithRSAEncryption
be:b9:42:96:d7:6e:95:95:43:c2:c6:79:d3:1b:31:6b:ae:cc:
15:b6:11:b4:7b:01:f1:df:4a:d1:fb:9b:61:0b:ca:ed:92:38:
5c:ae:30:03:7b:70:d0:e5:ad:24:fe:5a:53:26:29:80:af:72:
3f:39:2d:72:e2:11:49:36:b8:3a:12:8b:8b:b2:71:68:5b:81:
22:06:07:29:9a:7e:ff:6e:14:73:5d:00:8a:1c:6f:ad:5d:10:
03:9a:0a:99:ab:3f:9e:6c:7d:fa:82:e9:25:aa:33:82:8e:23:
5f:77:47:9b:4b:ac:28:cd:e6:de:f0:22:6b:a2:e8:8a:8f:33:
9d:d6:36:30:67:07:06:23:ee:71:3f:33:96:0e:92:66:19:4a:
3e:1e:d6:85:bd:e7:c1:28:da:1d:1c:71:1c:78:2b:de:bd:56:
a4:5c:98:98:5f:f5:4c:b7:9c:8a:f3:15:e9:19:b8:83:c8:d7:
2e:25:e6:59:06:97:16:72:7e:78:04:33:be:90:61:6a:54:86:
6c:32:e5:7a:df:fe:32:e3:f5:8f:29:bd:43:a1:8d:b8:89:0b:
9b:c8:ba:3e:e8:54:d8:8b:c6:d4:1d:c1:a8:d1:d2:36:7e:f1:
c7:a0:b7:99:87:b2:18:12:24:33:fd:4d:6f:f1:91:65:f2:69:
be:e0:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:39 2026 by rpki-client