Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/5640FC4E382A11F1A6805EF0CE1D38B0.roa
File: 5640FC4E382A11F1A6805EF0CE1D38B0.roa (raw, json)
Hash identifier: o5aNp5VzCf07pR6zEaALvtNhU23Ddi97zee6Hwc02BA=
Subject key identifier: 19:0A:56:C0:B1:E8:E1:EA:5C:93:D7:EE:63:15:D1:1F:89:D5:B3:4A
Certificate issuer: /CN=F36A94BDAF/serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
Certificate serial: 21
Authority key identifier: C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/5640FC4E382A11F1A6805EF0CE1D38B0.roa
Signing time: Tue 14 Apr 2026 17:49:51 +0000
ROA not before: Tue 14 Apr 2026 17:49:46 +0000
ROA not after: Tue 13 Apr 2027 17:49:46 +0000
asID: 327746
IP address blocks: 102.216.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 05:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A94BDAF, serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
Validity
Not Before: Apr 14 17:49:46 2026 GMT
Not After : Apr 13 17:49:46 2027 GMT
Subject: CN=69de7e3f-6c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:92:e3:55:9e:4b:02:b0:c4:ee:96:db:f2:
da:c0:f6:b7:4b:cf:9e:33:c8:fb:f5:e6:64:8e:ec:
03:56:86:d4:09:4a:17:68:38:7c:dc:a3:38:94:dd:
4e:37:c4:20:67:e3:c2:95:17:8c:95:ba:0f:11:5a:
56:62:99:66:a9:9c:da:7e:74:b3:e0:bf:1c:ca:ae:
02:7f:e2:f0:d6:15:3d:ce:50:73:d9:aa:a3:84:18:
1c:03:e5:c8:85:8c:ea:8f:60:80:06:e3:27:db:74:
80:85:52:77:db:88:bc:8e:45:f3:48:f4:c0:cc:7c:
c3:d0:ae:46:a2:d2:d4:cc:d3:8d:90:96:34:a6:f9:
c9:ac:38:aa:db:1f:25:26:80:86:b4:51:0b:d1:4a:
6f:ac:ae:09:f8:b8:e4:45:98:7a:80:fc:83:63:a1:
95:64:fc:f0:d9:3e:a0:53:6b:f6:40:46:fa:9e:c1:
45:0b:e8:32:ef:30:4e:50:26:a4:b6:ad:7c:8f:af:
2b:71:27:18:27:e5:b2:1a:8f:08:87:0a:14:9a:55:
fb:10:02:91:d8:e4:77:df:61:99:7f:04:a3:65:71:
1a:88:1f:e7:f7:3c:7b:83:87:38:79:5a:02:6e:91:
c1:05:ad:3c:7a:6f:f1:7b:f0:73:05:db:03:3c:3c:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:56:C0:B1:E8:E1:EA:5C:93:D7:EE:63:15:D1:1F:89:D5:B3:4A
X509v3 Authority Key Identifier:
keyid:C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/5640FC4E382A11F1A6805EF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:1e:a4:a3:7f:28:99:44:b8:0d:c2:7f:70:32:d4:35:6d:f7:
a3:d0:f1:8e:8e:3e:1f:b3:70:3a:00:a0:93:bf:37:8e:8b:b4:
7c:80:06:62:19:28:12:14:13:ef:92:ef:85:e1:73:0e:e0:9d:
2a:03:c3:64:4e:81:3d:92:71:f2:d7:60:e6:f4:6a:68:67:32:
43:9b:58:86:76:4a:56:78:e3:3b:82:40:6a:c1:20:a9:69:2e:
21:fe:26:d1:f3:ef:7c:90:e8:54:2c:86:12:dc:94:c9:d3:d5:
5b:a2:55:2a:f2:d2:30:e8:09:3c:72:45:08:60:eb:40:39:aa:
ee:ee:1d:9b:da:ee:28:2d:ca:e1:6a:27:b4:02:ac:2d:95:d0:
cf:c0:86:47:84:54:4a:e0:98:95:41:20:55:ee:2c:e3:9c:0b:
6a:6d:6d:2d:a1:45:fe:1f:54:b5:be:74:8d:b2:91:d1:55:5d:
3d:4f:fe:1b:52:be:51:1b:ba:7b:79:b5:0d:46:d1:26:b5:57:
22:b4:b5:d3:47:09:c0:53:c3:ec:9a:4b:96:8e:8b:c3:e2:36:
5d:9a:96:f8:ff:6e:8a:32:77:c4:ce:9c:e1:06:3c:1b:20:87:
db:66:82:a2:0a:da:d4:0b:fb:a3:9b:a1:54:5f:3b:62:c3:11:
ed:5f:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:08 2026 by rpki-client