Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/16BDFC3C8A5211F1A1EE42ECCE1D38B0.roa
File: 16BDFC3C8A5211F1A1EE42ECCE1D38B0.roa (raw, json)
Hash identifier: SpLIt0X2IUlkes+xF7vMeYb+2NhtwdBkMCssEWFEgNQ=
Subject key identifier: 2C:86:9B:21:B5:26:93:E3:34:60:91:5C:FF:D9:52:EC:15:8A:AA:54
Certificate issuer: /CN=F36A3F9EAF/serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Certificate serial: 071A
Authority key identifier: 5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/16BDFC3C8A5211F1A1EE42ECCE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:01:00 +0000
ROA not before: Tue 28 Jul 2026 07:00:56 +0000
ROA not after: Mon 22 Sep 2031 07:00:56 +0000
asID: 60171
IP address blocks: 102.69.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A3F9EAF, serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Validity
Not Before: Jul 28 07:00:56 2026 GMT
Not After : Sep 22 07:00:56 2031 GMT
Subject: CN=6a6853ac-1e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:30:02:a4:3e:91:98:4c:97:26:62:40:e8:
00:e4:42:4f:46:45:cc:ca:02:4d:3f:89:d4:e7:a1:
08:2c:d6:14:b3:36:01:6f:11:72:d3:e3:c5:0c:7e:
ad:c9:c1:4c:42:92:23:2d:4e:bc:83:49:44:e1:80:
0f:50:f1:09:67:4e:fc:72:37:34:7d:2a:08:ef:86:
a2:c3:b7:48:f2:30:5d:ba:75:b9:aa:7f:6c:0c:7a:
9f:76:1a:0e:65:d8:b9:09:f9:44:06:9f:c3:85:77:
34:30:b7:9f:83:13:03:98:60:91:2a:8d:65:89:55:
f7:5b:2b:7c:4f:cf:46:b3:d5:98:9a:a0:59:f5:7b:
6b:0d:9e:83:37:0c:85:9e:df:ba:a8:fd:28:24:8c:
37:8e:31:5d:96:c9:b2:3c:f6:ad:21:ea:4e:3c:df:
26:f3:fd:6a:5b:62:fc:4c:30:59:dc:30:b6:f2:64:
ef:7b:cf:0d:2a:b1:e8:cc:78:59:3f:81:eb:59:1b:
b6:72:18:5f:70:5c:3e:2f:95:63:b2:f2:9e:ab:d5:
b3:f9:de:ac:30:11:71:7d:be:6f:1e:06:85:05:81:
a9:b9:d2:33:41:28:72:04:75:fe:61:0d:20:10:09:
bd:b4:6a:77:50:57:77:c6:c2:e7:66:fa:31:4a:b5:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:9B:21:B5:26:93:E3:34:60:91:5C:FF:D9:52:EC:15:8A:AA:54
X509v3 Authority Key Identifier:
keyid:5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/16BDFC3C8A5211F1A1EE42ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.152.0/22
Signature Algorithm: sha256WithRSAEncryption
69:bf:e1:97:96:68:2b:92:15:80:4a:40:5b:32:8b:3c:18:99:
87:21:5c:c9:d1:98:02:9d:45:a0:a6:60:f2:fa:81:03:00:27:
4e:99:20:8f:66:92:d1:b8:07:00:c5:c8:c2:87:a1:91:18:a8:
b4:37:25:ec:97:ac:6e:ac:53:2b:26:52:83:6d:58:f7:25:78:
a9:94:b5:c2:6e:37:64:8f:0d:40:fc:63:1f:49:2b:e1:18:b5:
32:a8:6e:02:69:c3:37:40:44:dc:cd:ff:12:49:54:39:1e:9d:
a5:ac:f7:eb:fa:d9:0d:53:ed:e7:5f:43:e7:86:7e:24:ac:7c:
bb:ca:41:fe:db:9e:0f:8c:e8:1b:58:49:53:8d:f4:35:ed:90:
07:65:05:93:b5:af:6b:5b:b9:19:dc:06:b9:d8:7b:77:5b:49:
fb:c8:e7:f9:0a:aa:16:23:ad:f2:60:26:89:1f:cc:17:8b:32:
af:f7:e8:d9:ba:67:11:5a:cf:1e:bd:b7:95:b3:9a:50:16:a4:
d0:fb:0a:1b:ea:e9:17:60:56:79:03:62:40:92:4c:42:29:29:
18:f7:08:db:19:aa:6e:43:6a:17:d1:5a:d1:d2:d4:70:f6:21:
7c:8d:74:3d:43:a9:a6:69:0f:13:43:fb:66:e7:14:43:6b:22:
71:88:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:58 2026 by rpki-client