Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EB475FF031C111F1A71AC296DAE4EC9C.roa
File: EB475FF031C111F1A71AC296DAE4EC9C.roa (raw, json)
Hash identifier: Y9/MUITjWqXrHS2rgjPQqYV3XME+v0umVdBOKsh062M=
Subject key identifier: F6:D4:6B:C3:F0:29:C3:C7:BF:9A:5B:C0:47:36:E6:4E:48:FE:1C:EB
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 079A
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EB475FF031C111F1A71AC296DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 14:07:17 +0000
ROA not before: Mon 06 Apr 2026 14:07:13 +0000
ROA not after: Sun 06 Apr 2036 14:07:13 +0000
asID: 37645
IP address blocks: 102.216.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 6 14:07:13 2026 GMT
Not After : Apr 6 14:07:13 2036 GMT
Subject: CN=69d3be15-fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:a7:b0:76:31:62:d3:5d:2b:d7:6d:0a:b2:
37:6c:84:52:93:91:d1:bb:0b:54:a9:d1:33:af:26:
de:d6:dc:80:e5:e7:12:80:c8:cf:a8:74:13:94:20:
20:25:d5:cb:75:1e:06:3d:3e:93:bc:e5:0c:c8:60:
27:8d:94:3c:7f:39:06:d1:b3:4d:01:f8:ce:6d:75:
f7:e6:9d:d0:3b:f9:6c:ac:72:5b:14:df:33:47:46:
9a:1a:73:8c:ea:7c:22:cf:61:e4:63:ed:a2:96:44:
40:3c:20:d6:b3:88:e0:0d:d5:1d:8b:68:27:af:45:
09:5f:48:af:c2:f8:9d:07:ee:ed:ee:69:11:52:4d:
63:f3:4d:35:c9:48:77:38:c4:82:ef:47:b8:fe:88:
d9:9b:7c:4a:74:8e:48:75:57:c3:2d:5c:16:9a:26:
8c:11:df:a3:00:bc:83:64:b0:ca:35:7a:a2:24:49:
d3:dc:6a:4e:4b:a6:55:0c:0a:08:57:f6:7b:3b:3e:
7f:80:e7:45:a9:d8:d2:71:24:dd:00:7a:b0:d9:af:
31:66:d2:4a:de:a0:fc:a9:d8:9d:e7:43:70:76:69:
27:5d:67:1a:f9:35:9f:84:9d:b5:79:9f:5d:9f:f3:
a3:db:ff:e0:57:37:15:7b:1c:ee:e3:21:88:c2:ab:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:6B:C3:F0:29:C3:C7:BF:9A:5B:C0:47:36:E6:4E:48:FE:1C:EB
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EB475FF031C111F1A71AC296DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:bc:a6:1a:f0:24:dd:ef:b6:dc:37:82:4f:fa:e6:69:cb:56:
f5:4f:fb:71:1f:c2:ab:fd:ad:7b:d2:3c:b9:18:c9:f1:f0:23:
fb:cb:17:98:6c:21:3f:f2:a9:4b:ce:d1:d7:f8:c6:c0:5c:83:
02:f9:8b:34:c8:d6:25:93:26:3e:9e:58:d3:51:5f:38:05:8a:
8c:51:cd:39:08:f4:99:3c:a6:86:6b:67:79:36:45:f5:c7:95:
4a:dd:0f:f4:28:07:09:a4:8a:c4:91:9d:fb:7c:d1:34:37:74:
d3:6f:28:bf:a5:b6:3b:f1:a4:df:c6:42:4f:ab:06:72:5f:28:
7d:b3:2d:6b:01:30:75:f5:f8:cd:28:89:95:f0:e8:7d:f9:a9:
c7:2a:31:dc:2e:dc:64:ce:eb:df:75:ff:92:46:b0:00:e0:d0:
16:bf:0d:9a:92:16:74:24:b6:b1:b4:cb:42:72:d8:61:8d:dc:
e7:c6:39:07:af:86:c8:d3:64:3c:b0:74:b7:02:f3:0e:cb:d8:
31:76:12:b9:7d:4e:ca:47:9b:e4:95:15:a8:64:22:10:d9:0e:
4d:f7:10:38:fb:56:10:a6:d8:a8:27:e0:1a:01:03:87:ac:14:
b6:6e:72:ea:fb:1d:d0:0f:b8:d8:c2:2c:95:3e:00:b8:85:40:
2a:c8:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:51 2026 by rpki-client