Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E27323D22DCF11F1AA18CAA5DAE4EC9C.roa
File: E27323D22DCF11F1AA18CAA5DAE4EC9C.roa (raw, json)
Hash identifier: 4BxkClyTNHcRQAjTgzhuIwOnw53YqhmtdQmVdBzKibE=
Subject key identifier: 09:3C:46:00:3A:06:71:71:07:3C:AC:D8:5A:A2:D4:02:4F:A8:59:77
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 077F
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E27323D22DCF11F1AA18CAA5DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 13:37:11 +0000
ROA not before: Wed 01 Apr 2026 13:37:05 +0000
ROA not after: Tue 01 Apr 2036 13:37:05 +0000
asID: 37645
IP address blocks: 102.217.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 1 13:37:05 2026 GMT
Not After : Apr 1 13:37:05 2036 GMT
Subject: CN=69cd1f87-96a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:e3:80:e6:e2:ed:4f:11:c0:63:57:77:71:
bf:61:74:05:40:9d:b3:75:fb:9f:6c:56:0b:c6:70:
38:c0:2b:8f:4b:d4:29:03:66:7a:48:f6:0b:e6:c6:
34:12:b4:6a:64:86:35:d6:38:ed:1b:84:ed:86:aa:
fb:b4:fc:d8:ee:59:a8:22:03:9c:df:f6:9b:84:c1:
78:dd:f7:03:da:e6:b1:ca:3f:cd:a6:8c:7c:9c:fd:
47:23:ed:11:3e:a3:0c:28:90:1e:f0:e5:54:a5:fd:
52:7b:5a:06:cc:f2:a1:62:ec:89:2b:b5:84:81:84:
e9:3d:c9:d9:d1:4d:ae:fc:d7:e3:08:b9:14:11:ff:
e1:a7:0b:9c:bd:0d:c3:e0:7d:6e:2e:32:ab:c2:55:
9c:0c:84:9d:bc:3e:f6:3d:30:73:5c:68:bc:46:c0:
7e:b9:c0:41:14:b8:be:b8:3f:b2:4f:5a:2d:0b:de:
32:69:a3:a8:8c:69:45:64:7c:4f:97:6a:70:14:6d:
7f:20:38:18:82:a8:4c:2a:1b:f5:df:88:08:5c:55:
1d:d7:ad:72:c2:a7:a5:df:0b:27:2d:43:35:40:33:
76:ae:17:5c:37:f7:23:85:51:5a:fa:0a:8f:03:69:
74:89:91:84:f3:0a:52:b5:70:02:77:68:36:88:bd:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:46:00:3A:06:71:71:07:3C:AC:D8:5A:A2:D4:02:4F:A8:59:77
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/E27323D22DCF11F1AA18CAA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.192.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ca:8d:bb:76:66:0e:a8:d1:24:58:03:04:52:2b:fe:f7:ed:
7c:6d:ac:30:25:1c:e9:06:88:ba:c4:48:d7:ca:91:8f:3e:57:
74:6c:a1:44:9a:95:27:ad:b3:8e:a7:80:1e:61:86:f3:eb:e9:
c2:69:66:f3:f9:ce:43:fc:25:8b:f5:17:f0:a9:56:57:46:fa:
76:82:e9:8c:2d:57:49:5b:9b:87:20:4a:f3:c5:35:2e:2b:89:
0c:b3:35:4e:3d:92:b7:c8:2c:bf:c7:e9:df:da:a9:0e:7c:34:
2f:2b:7f:89:0f:e8:75:2c:d8:ec:46:a0:47:55:ec:73:62:97:
15:e2:69:36:46:85:a2:eb:cb:89:5d:4d:b8:7b:a2:76:bb:61:
1b:81:6c:5c:b5:88:d9:e2:8f:b8:43:30:a2:0d:8c:41:5e:71:
94:9d:06:7a:21:72:af:64:0b:a4:ca:3a:e1:f3:93:ea:e2:9a:
01:08:62:a9:18:32:7c:63:e4:10:a6:7b:ca:de:be:2c:12:eb:
36:ac:7c:96:5a:57:77:17:31:41:7f:53:4f:84:47:d4:bf:d3:
dd:6b:dc:22:7f:b9:92:64:9e:41:77:10:8f:8c:fa:11:41:39:
58:82:2d:d0:1a:f8:2d:ec:98:17:f8:7a:3b:ee:fb:c4:f5:76:
fa:e6:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:18 2026 by rpki-client