Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/9F6E3B5262BE11F1A7A87DD0CE1D38B0.roa
File: 9F6E3B5262BE11F1A7A87DD0CE1D38B0.roa (raw, json)
Hash identifier: XAczzR05HtEJaDK7Z4f7uYjqTSeZwYgvHnd1G3OffkY=
Subject key identifier: D7:4F:07:31:E9:13:F5:F6:45:5D:38:B4:2B:71:00:19:EB:67:FD:BB
Certificate issuer: /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial: 075D
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/9F6E3B5262BE11F1A7A87DD0CE1D38B0.roa
Signing time: Sun 07 Jun 2026 22:17:09 +0000
ROA not before: Mon 08 Jun 2026 22:17:03 +0000
ROA not after: Mon 09 Jun 2036 22:17:03 +0000
asID: 400463
IP address blocks: 196.51.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D518DAF, serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Validity
Not Before: Jun 8 22:17:03 2026 GMT
Not After : Jun 9 22:17:03 2036 GMT
Subject: CN=6a25ede5-8084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:79:3f:4f:0a:ac:ee:9d:22:ec:b3:42:89:
aa:a4:44:7f:0d:c3:e9:28:28:84:1c:d3:3b:6d:fd:
8a:c6:26:4f:3f:ac:e8:4f:d5:dc:48:e8:38:14:33:
0d:d7:f3:7d:70:f2:97:48:29:23:84:43:65:07:70:
80:b3:fa:16:fe:3a:fb:be:6c:38:86:42:fc:ef:90:
f8:79:09:9b:80:d1:94:71:74:cc:d4:d5:9c:d7:2a:
16:18:cc:b9:29:8c:42:91:c1:08:ed:a7:4d:25:d9:
87:9e:99:1d:8f:72:6e:58:40:41:0a:40:21:79:2f:
bc:ed:de:d7:10:69:28:56:c4:59:ad:52:d2:48:65:
46:ea:5e:11:1d:88:02:66:4a:55:22:df:87:86:a9:
81:1b:20:7e:33:82:18:b5:61:b4:4d:d1:c0:c5:0f:
79:43:7a:50:f4:a1:ab:c5:24:52:3d:e4:98:3d:5c:
7f:fb:44:22:19:d5:e5:fc:f6:53:b3:c4:65:75:a8:
86:05:ee:d7:a2:19:3a:7a:9b:be:4d:dd:c3:8d:41:
8e:ec:f5:f5:a4:2f:f3:8e:4f:85:79:f3:bc:4b:c3:
9e:3d:2c:0d:5f:84:93:13:5b:bb:1b:ac:64:cb:5c:
1f:32:3c:8f:f2:13:35:5c:19:61:f9:2e:40:85:41:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:07:31:E9:13:F5:F6:45:5D:38:B4:2B:71:00:19:EB:67:FD:BB
X509v3 Authority Key Identifier:
keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/9F6E3B5262BE11F1A7A87DD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:4f:df:00:d1:9a:4b:54:da:98:67:06:c4:68:e7:7f:f8:39:
a8:35:65:20:88:01:8d:b5:bf:b4:f6:8d:89:33:a9:b2:ae:2f:
21:7a:06:b6:93:df:d2:ad:67:da:16:1a:25:9f:ae:3e:3c:1e:
b7:05:62:c8:bd:cc:7f:8b:9f:a1:0d:90:1a:a1:25:3f:4e:18:
3f:61:b3:ba:e9:4f:bd:82:1a:71:e0:27:2e:30:64:22:81:d4:
29:ba:37:de:a0:4e:82:90:9e:32:53:f2:7a:01:71:2e:a7:5c:
3e:e7:d5:46:38:da:9c:8b:a6:20:b3:ff:86:14:d9:8e:ad:ca:
90:6c:94:0b:be:3a:0c:0d:0c:99:fd:4a:34:29:02:c3:07:86:
d4:18:13:fa:31:40:83:93:80:4e:ad:7b:79:0d:71:a2:41:6c:
73:2f:1a:3a:0c:3a:3e:25:de:a8:d9:0d:dc:44:4a:e8:d1:b5:
57:55:6f:29:8d:09:b1:ff:e8:bf:92:de:0c:f8:ea:32:ee:2a:
0f:d8:55:b1:e6:d8:94:89:a7:f1:bb:82:a2:f0:54:30:94:01:
9d:c7:7c:25:f7:29:5f:9b:b9:74:6a:3a:c9:2d:0c:16:a6:33:
ae:a9:df:da:4c:5c:94:0e:27:92:bc:fd:46:c2:8e:0f:24:1c:
2f:14:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:02 2026 by rpki-client