Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/4EB00DB02D9111F1B58F39C1DAE4EC9C.roa
File: 4EB00DB02D9111F1B58F39C1DAE4EC9C.roa (raw, json)
Hash identifier: WCLn0OCKVm2cK3zRheOo4X3zoGcEZfbsrUm7YzZF1Zk=
Subject key identifier: F0:38:94:47:2C:74:2E:B6:FA:CF:C6:73:F4:07:68:67:42:8B:DA:A0
Certificate issuer: /CN=F36D3DBFAF/serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Certificate serial: 0147
Authority key identifier: 1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/4EB00DB02D9111F1B58F39C1DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 06:09:14 +0000
ROA not before: Wed 01 Apr 2026 06:09:10 +0000
ROA not after: Sun 01 Apr 2046 06:09:10 +0000
asID: 327829
IP address blocks: 102.223.220.0/22 maxlen: 24
102.223.220.0/24 maxlen: 24
102.223.221.0/24 maxlen: 24
102.223.222.0/24 maxlen: 24
102.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3DBFAF, serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Validity
Not Before: Apr 1 06:09:10 2026 GMT
Not After : Apr 1 06:09:10 2046 GMT
Subject: CN=69ccb68a-e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:39:d0:f2:c7:f9:8f:cc:63:a1:c7:8e:0b:
12:fe:59:5d:a9:e5:d1:4a:69:d8:5e:ae:a6:fa:f2:
23:54:d9:5a:74:c4:29:b7:88:0f:f2:fd:ff:55:04:
34:87:81:22:02:f5:b1:cf:eb:95:ce:11:95:24:24:
d2:75:f4:46:60:cd:22:35:17:09:ce:a6:9e:2a:f2:
45:e8:20:eb:d6:63:c0:9a:43:1e:eb:41:69:17:95:
31:f6:ec:5a:eb:22:0d:e0:71:88:6f:1c:d6:98:a1:
b4:d8:b5:c1:c2:c4:3c:67:1a:63:04:8f:dd:c8:14:
19:e7:d0:cb:04:e8:4a:2d:63:8f:44:6d:3c:88:0a:
20:66:77:bb:ab:08:8e:79:b2:a0:9c:0e:dc:60:78:
b5:ee:e7:b4:72:70:d7:27:6d:9f:30:32:b2:0c:6c:
53:1a:58:35:a6:29:cd:db:79:fa:d5:1e:e2:ed:79:
1b:68:dd:58:64:f0:f0:79:dc:da:19:17:ec:0b:7c:
55:c3:52:8d:de:4b:aa:d7:ca:35:ec:ab:54:a2:13:
8e:83:f8:89:e4:fc:47:05:a0:c4:54:56:97:48:27:
d9:33:8b:0b:0e:b3:19:1c:33:1a:18:69:40:c9:e7:
a2:47:00:15:71:d0:74:4f:07:4e:36:dc:24:bb:fe:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:94:47:2C:74:2E:B6:FA:CF:C6:73:F4:07:68:67:42:8B:DA:A0
X509v3 Authority Key Identifier:
keyid:1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/4EB00DB02D9111F1B58F39C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:3b:41:46:2a:50:de:a9:62:c3:53:ab:f1:b5:a6:3d:3c:52:
e6:ca:28:dd:43:40:4d:5c:87:e8:37:dd:2e:cc:0b:ea:4f:61:
8f:e3:c3:13:89:8f:c8:49:54:3f:7d:6e:ca:51:52:99:4f:58:
31:d7:34:c4:a9:47:e6:d7:7a:c7:ea:ca:9b:2a:66:61:8d:01:
44:5a:ba:ac:54:75:0f:4f:73:79:a4:14:14:1f:bf:10:83:19:
3d:8d:0c:1a:30:85:3c:ec:48:64:9f:0b:82:3a:61:91:ec:d3:
6c:36:f5:af:28:4c:15:06:0f:de:38:d6:81:b9:dc:29:5a:2e:
0e:c5:91:03:cc:34:97:26:36:80:4a:3a:20:65:e0:a3:04:78:
46:26:9b:53:9e:6b:07:7d:35:b4:95:f2:5c:c2:a2:58:25:c2:
1b:ee:2f:29:5b:ef:f9:59:df:ea:44:81:a5:92:3d:1a:f2:cb:
38:60:4b:c1:ec:5b:da:c9:2e:99:dd:f4:56:d6:1c:af:83:aa:
bd:b5:bb:02:0f:85:8d:f3:65:d7:5d:b0:96:8d:8d:d2:e6:f1:
bb:fc:2f:c7:df:de:3c:8e:b8:3d:ea:b9:c4:62:ee:04:69:80:
dd:3f:80:74:53:0c:40:fc:69:ad:4d:fb:b5:4b:8c:e2:b0:20:
8f:87:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:52 2026 by rpki-client