Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa
File: EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa (raw, json)
Hash identifier: pdJON2oLaF8IedNpv4LxRG7g+R9Qeyi4W75wQ52QQ1c=
Subject key identifier: EE:70:6D:DC:69:2C:1E:17:D2:F1:38:78:CF:03:B2:F3:84:23:E6:45
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0774
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:47:33 +0000
ROA not before: Tue 31 Mar 2026 15:47:28 +0000
ROA not after: Mon 31 Mar 2036 15:47:28 +0000
asID: 37645
IP address blocks: 154.66.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Mar 31 15:47:28 2026 GMT
Not After : Mar 31 15:47:28 2036 GMT
Subject: CN=69cbec94-d6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:b7:2a:b6:ea:3c:64:b2:b9:90:17:77:33:
c5:be:c9:fa:0d:50:b2:dd:b1:8a:17:41:98:21:2c:
74:1a:12:fc:6e:77:fa:b9:e6:5c:c7:d1:8c:de:97:
ad:e8:e2:9a:c7:69:6a:29:e9:b0:e1:98:49:4f:83:
3b:ea:bc:7d:0c:dc:81:da:55:7e:d1:4b:51:4d:32:
28:94:28:e3:27:13:5b:cf:41:62:6c:01:a9:3a:5b:
29:34:6c:07:77:cb:62:dd:47:fe:2d:74:ad:64:d4:
ce:49:20:3c:46:39:c9:fa:c8:b6:32:c7:0d:68:d4:
83:43:d5:cf:b6:6e:2d:8f:96:f6:29:3e:7e:be:17:
46:1a:ea:2a:64:27:5f:b6:19:e8:9f:bc:5b:5f:6d:
70:3d:f7:e2:a9:43:92:5b:87:84:e3:08:38:be:1b:
5c:14:ce:06:52:85:9f:cf:a8:1e:c8:ef:7a:ef:4f:
e8:05:63:8d:53:85:51:94:92:1e:71:13:67:9a:7f:
1e:40:64:a1:40:00:d2:05:94:3c:35:5d:a1:5f:de:
e3:fd:0b:2a:e0:1b:03:7f:da:67:7e:80:09:1a:e9:
63:ad:6d:81:ed:aa:4a:c4:f8:c9:af:35:6b:0e:56:
d3:d7:f8:cd:73:b1:a5:10:0b:d4:6e:d1:c9:df:b4:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:6D:DC:69:2C:1E:17:D2:F1:38:78:CF:03:B2:F3:84:23:E6:45
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.104.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:98:5a:d8:4a:43:4b:29:b2:6f:c3:b9:0a:2b:22:cb:eb:31:
fe:02:c7:07:01:26:6a:8c:8c:fd:94:e4:a0:90:fe:d9:5c:a3:
6d:8d:bf:82:e0:f2:35:b9:dd:b1:e3:30:39:5a:51:2b:5d:67:
2e:23:7f:56:9a:0d:7c:51:9b:01:5a:9a:ed:f3:52:e2:a3:db:
ba:78:51:9f:f3:2d:cf:2f:78:93:83:80:f7:2d:bc:4b:49:40:
cd:68:aa:d0:26:9d:ca:40:5f:65:7b:04:4f:d1:1e:95:05:e6:
df:2f:64:b0:44:ed:85:dd:19:02:3a:2d:02:f0:1b:ee:28:ee:
09:cb:00:2a:9d:f7:c9:56:4b:bf:d8:93:41:5d:93:d1:bf:89:
d7:f3:b2:a0:0b:00:5d:9a:5b:c4:b6:09:2f:f6:ef:1c:fb:4b:
4a:73:9d:b5:17:75:2b:05:20:bc:52:6e:c0:ed:58:2f:ca:59:
8e:67:18:69:92:42:d3:e7:fa:cf:37:b9:4b:77:63:69:b3:4b:
d2:2f:7f:68:1a:e4:d5:9f:a2:b5:52:6c:0f:b1:ef:07:fd:eb:
cd:4e:5a:6f:c3:d4:15:59:03:c8:34:c6:b2:2c:c8:a9:16:20:
2d:3e:28:f0:37:f2:87:e3:ee:59:b5:6d:59:db:fd:b5:91:70:
eb:84:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:10 2026 by rpki-client