Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0967D3F038EF11F197F305A8CE1D38B0.roa
File: 0967D3F038EF11F197F305A8CE1D38B0.roa (raw, json)
Hash identifier: PX0TS2w89Bqrnw6Ozx154+AEDGqvSheR7FkZ+gwmAfQ=
Subject key identifier: E1:22:74:65:52:AE:99:B7:51:79:A0:B4:E2:5F:9C:B6:0E:08:23:6D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1811
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0967D3F038EF11F197F305A8CE1D38B0.roa
Signing time: Wed 15 Apr 2026 17:17:53 +0000
ROA not before: Wed 15 Apr 2026 17:17:49 +0000
ROA not after: Sat 15 Apr 2028 17:17:49 +0000
asID: 198250
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 01:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6161 (0x1811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 15 17:17:49 2026 GMT
Not After : Apr 15 17:17:49 2028 GMT
Subject: CN=69dfc841-99af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:82:07:b9:11:58:70:07:36:bc:a5:e9:26:
0c:e0:52:42:80:1a:66:20:55:60:a9:d3:8d:54:9a:
9d:09:6c:f2:22:bf:b9:6a:6c:c8:eb:87:da:e1:e9:
e1:f0:eb:fd:cd:d9:99:85:07:88:1e:cb:93:ff:42:
2c:10:63:65:41:49:53:3b:69:cd:01:54:76:b3:ce:
e6:f3:3a:37:06:ab:b4:f6:bc:a6:bd:25:87:78:d1:
83:37:a9:ba:be:b5:2e:3e:f8:a9:48:fe:ed:52:07:
ca:79:cb:ee:5d:a4:f7:3c:35:ee:0b:00:66:bf:21:
b6:4f:89:97:2f:b8:8a:89:13:67:93:2b:5f:ad:06:
b1:49:65:c5:68:47:92:a2:3f:fd:8d:8f:ee:a8:ca:
34:ea:d4:2f:e0:ab:a7:e7:01:87:bb:81:22:bd:04:
0f:64:30:74:fc:dc:b4:4b:f0:e4:7f:c2:9a:91:a4:
d7:77:b9:d5:65:97:1c:a2:16:10:52:49:9b:66:f0:
08:ad:57:a7:39:36:19:a1:79:99:02:11:d2:12:36:
26:59:8c:04:ae:b8:12:4d:5f:37:97:67:3d:ed:6c:
1b:76:6c:65:fe:ec:9d:ce:96:ca:7d:37:fd:5a:b6:
78:6f:ff:ab:22:c4:87:01:44:5c:47:bc:5b:85:48:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:74:65:52:AE:99:B7:51:79:A0:B4:E2:5F:9C:B6:0E:08:23:6D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0967D3F038EF11F197F305A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:cb:ea:70:ae:75:9c:5e:a1:b2:ac:5d:fd:f5:1e:f4:80:40:
02:a4:fe:2c:43:fa:27:7e:73:a1:4f:2c:42:1c:18:78:6d:d1:
bc:1d:2b:c8:97:ec:9a:42:1b:db:37:22:78:16:85:4d:8b:5b:
b5:c7:1f:e3:84:1d:52:a9:4a:85:43:ef:1e:3c:7a:fb:0a:c0:
ba:08:c6:4f:6d:fa:a1:50:32:2e:54:b3:8f:fe:d8:b3:eb:0f:
21:da:73:06:48:db:cf:8b:6c:36:46:e9:1c:be:f7:48:07:5e:
6c:57:11:39:6b:d7:d1:fc:2d:32:1d:83:8c:d8:15:ef:84:ad:
11:12:bb:df:e1:01:ec:4e:97:72:b3:dd:ff:02:69:b7:54:3e:
c8:e8:1e:23:f4:a7:a5:88:62:68:fd:ea:19:b5:de:16:55:19:
28:b3:cb:ff:08:64:34:b9:c1:c5:1e:50:23:d6:00:66:5a:a8:
7d:ad:14:d6:18:48:7f:40:e9:b4:05:81:4c:ce:d1:22:bf:9c:
40:b1:4e:f7:2c:51:45:ec:a2:fb:51:91:56:34:9f:85:29:cd:
1e:b3:73:34:f1:6f:56:0a:e9:1b:c9:f1:71:ca:3d:2f:1e:d2:
8b:8c:6d:13:cb:2b:f5:a9:af:51:da:9c:3d:d7:e8:15:7e:47:
f4:9e:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:32 2026 by rpki-client