Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/37A037F0376711F196F2C2C7CE1D38B0.roa
File: 37A037F0376711F196F2C2C7CE1D38B0.roa (raw, json)
Hash identifier: s4mQ/4xdr4CVChAjeed6+fk5zrUn/6l56aaZ5pNmYt4=
Subject key identifier: BC:8E:50:B0:A6:C7:86:ED:E9:51:B7:0B:B8:7E:31:BA:B9:6D:C4:2C
Certificate issuer: /CN=F36A94BDAF/serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
Certificate serial: 16
Authority key identifier: C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/37A037F0376711F196F2C2C7CE1D38B0.roa
Signing time: Mon 13 Apr 2026 18:33:09 +0000
ROA not before: Mon 13 Apr 2026 18:33:01 +0000
ROA not after: Mon 12 Apr 2027 18:33:01 +0000
asID: 327746
IP address blocks: 102.216.204.0/24 maxlen: 24
102.216.205.0/24 maxlen: 24
102.216.206.0/24 maxlen: 24
102.216.207.0/24 maxlen: 24
2c0f:e800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 05:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A94BDAF, serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
Validity
Not Before: Apr 13 18:33:01 2026 GMT
Not After : Apr 12 18:33:01 2027 GMT
Subject: CN=69dd36e5-4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:98:86:47:ca:a4:ca:ff:37:aa:cc:86:00:
95:3f:74:ec:87:1a:c5:86:63:51:9a:ae:9f:f2:2d:
8c:a3:aa:49:b7:28:b8:ff:ce:01:36:2e:6b:f3:53:
f0:d8:54:6d:75:34:87:0f:4b:08:1a:59:51:57:e0:
2f:c3:13:ad:3d:cf:1c:75:69:4b:6c:3a:b3:53:5a:
da:1e:2a:9f:74:41:e5:19:7f:47:df:cf:df:19:d1:
81:d0:67:13:a5:5e:63:0e:7e:c0:37:7c:70:02:28:
f4:46:91:02:f3:66:08:b4:03:57:66:bc:bc:06:a7:
13:d0:fb:06:8d:31:fc:2c:29:2d:98:17:28:d4:47:
74:96:1e:16:ff:41:18:00:cb:34:19:8d:ef:a2:e4:
38:c1:1c:4c:88:39:e8:95:ce:80:6f:06:af:36:99:
16:19:02:12:02:71:71:b9:3e:f4:4c:fc:44:17:a3:
3f:bd:78:73:26:43:f3:73:bb:86:8f:fd:8b:43:4f:
33:74:24:1b:a6:20:d9:bf:af:1b:9a:ab:bb:ed:ee:
97:d1:6a:7d:20:5a:1f:c6:0e:03:d6:e7:7e:9f:57:
ad:a2:28:fd:ff:27:7b:27:ae:57:d6:c8:ac:74:12:
80:bb:52:80:6e:91:7c:b3:b5:a9:96:31:a8:63:33:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8E:50:B0:A6:C7:86:ED:E9:51:B7:0B:B8:7E:31:BA:B9:6D:C4:2C
X509v3 Authority Key Identifier:
keyid:C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/37A037F0376711F196F2C2C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.204.0/22
IPv6:
2c0f:e800::/32
Signature Algorithm: sha256WithRSAEncryption
a8:72:19:ed:c5:3e:b3:e6:8b:1a:b7:56:e5:c6:14:f4:82:ac:
e2:6d:d8:f0:93:57:7a:92:fa:e6:2a:c4:fa:20:97:18:13:54:
78:08:dc:11:25:77:df:84:0d:15:f2:53:19:a2:70:b3:1b:c4:
34:39:35:60:b8:c3:56:17:91:ed:51:c6:47:15:b6:4f:d3:bf:
89:6d:e0:80:b2:69:07:bd:c7:42:ba:ee:58:00:c5:e2:69:08:
c2:65:6e:d8:cc:c7:c3:dc:04:6d:2c:83:01:43:9e:7a:ea:63:
dc:35:48:e2:b9:33:7d:ca:8a:70:a2:60:42:31:50:53:ec:f8:
c9:b8:64:40:c0:a5:ef:16:2c:67:f4:7c:57:f4:02:d0:70:80:
17:c7:57:6e:75:d1:fa:c1:ff:54:13:9d:19:94:b7:eb:09:f9:
89:3d:d5:d1:34:a5:a7:69:d1:a0:9d:62:47:e9:ae:19:65:b5:
84:3b:e6:36:88:58:d5:fa:a9:25:6c:46:bc:dd:a9:bf:77:d4:
be:83:9b:85:50:0b:68:a8:c5:43:3d:20:f0:8f:6a:33:fa:4f:
98:18:5c:9b:14:61:9d:31:28:63:4b:24:20:3e:ab:f1:58:1f:
fd:bf:f2:5e:6a:24:64:dc:6b:ed:0c:62:43:c1:69:b5:ee:18:
08:23:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:09 2026 by rpki-client