Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/2267A76E290811F191384489DAE4EC9C.roa
File: 2267A76E290811F191384489DAE4EC9C.roa (raw, json)
Hash identifier: DT6uFqW2qvDckUL7nh0pd1MjMPmthTc+htGKY8GZGUk=
Subject key identifier: 7A:2E:21:71:70:50:60:F3:88:F3:FA:A3:C0:B6:D5:CE:CC:07:B2:75
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0568
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/2267A76E290811F191384489DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 11:37:14 +0000
ROA not before: Thu 26 Mar 2026 11:37:09 +0000
ROA not after: Wed 31 Mar 2032 11:37:09 +0000
asID: 23764
IP address blocks: 102.217.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 11:37:09 2026 GMT
Not After : Mar 31 11:37:09 2032 GMT
Subject: CN=69c51a6a-dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:db:ee:1e:0e:2b:3b:37:53:98:69:0f:d6:
fb:77:5b:d0:35:de:58:b4:28:4a:f4:f4:c9:a1:42:
6e:d0:89:31:b1:98:50:d7:91:c5:fb:03:7c:34:a0:
ee:e3:f2:1f:1f:63:ef:85:eb:86:3d:46:87:a7:bd:
54:8f:4d:87:1b:60:ed:5f:1d:3f:89:8b:0f:d8:64:
11:f0:5d:07:e3:db:75:4f:e1:a8:91:de:2e:78:1e:
7a:fc:55:b6:7a:fd:3a:56:1a:0b:2b:dd:95:2b:eb:
82:26:a8:0f:5e:6a:1b:e2:3e:e8:1c:fe:f3:ea:af:
64:9f:6b:05:44:cb:d8:c1:2f:46:2d:54:84:f6:b4:
ad:39:db:b4:b4:92:d3:df:45:7b:cd:bb:d1:22:21:
00:c1:d4:f6:07:75:4d:7f:89:40:74:38:d4:ac:1b:
97:45:a8:18:7d:99:f9:82:02:3c:b7:56:7e:ab:f3:
16:8f:2e:0f:dd:4b:49:5e:49:aa:b6:36:74:8e:97:
18:0e:b5:6a:32:88:7d:07:43:aa:2f:c2:83:5c:2c:
0a:2b:46:13:37:32:88:95:d0:80:a4:b9:01:ed:22:
d7:6e:9c:3c:67:de:85:31:4c:eb:40:5f:09:b9:a6:
a1:c8:19:83:6b:ec:e7:a7:e4:14:20:64:0d:e9:1e:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:21:71:70:50:60:F3:88:F3:FA:A3:C0:B6:D5:CE:CC:07:B2:75
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/2267A76E290811F191384489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c6:51:f4:72:d5:6f:d6:83:32:db:99:d6:b9:a1:25:d2:ae:
62:aa:74:1b:fc:0a:35:0b:4c:41:d7:b8:bd:f4:78:07:65:76:
2b:4a:9c:d6:4a:47:ad:71:2d:66:21:8f:b1:9f:26:2d:d4:32:
47:8f:6f:74:ec:d8:ee:a0:44:39:d3:fd:90:b3:ef:1c:88:56:
d1:c3:48:99:6d:46:52:5b:39:1b:aa:45:3c:27:30:9f:11:79:
08:0b:3a:72:5e:29:e3:e9:2e:84:3c:dd:8d:f5:98:36:28:25:
ae:9d:dc:9b:37:78:c1:3f:22:3e:11:81:3e:bc:16:ba:9c:07:
cc:3d:32:6a:c1:eb:78:5f:73:51:88:0e:eb:a6:e4:b1:f4:d5:
e2:3b:bb:e2:14:80:4c:77:2c:04:78:38:46:20:bd:d1:3b:5e:
94:b3:d4:77:47:c2:2d:86:20:ba:6a:1f:a8:51:27:38:9d:64:
cb:1c:42:75:92:6c:b6:3c:e9:53:5d:d9:f1:a8:60:18:61:b3:
a0:8c:cf:04:f3:cb:0b:1d:9f:a9:05:a5:54:22:13:02:dc:b7:
6f:d4:0c:48:37:35:df:e9:0b:d2:e0:d1:72:7c:d1:03:6d:04:
bd:45:82:a9:58:6f:b0:e9:ea:6b:4c:6d:14:d9:a1:10:66:bb:
b8:b6:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:35 2026 by rpki-client