Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/63CCC8A2290711F1B5019583DAE4EC9C.roa
File: 63CCC8A2290711F1B5019583DAE4EC9C.roa (raw, json)
Hash identifier: pxzY6cCzsbz4Ramac+Qbgp41taoadIFqGrSg90joZLg=
Subject key identifier: BF:7C:7C:3D:CF:FD:0A:6E:96:68:5E:0B:8A:06:81:61:23:FF:E9:ED
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0564
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/63CCC8A2290711F1B5019583DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 11:31:55 +0000
ROA not before: Thu 26 Mar 2026 11:31:49 +0000
ROA not after: Wed 31 Mar 2032 11:31:49 +0000
asID: 23764
IP address blocks: 102.217.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 11:31:49 2026 GMT
Not After : Mar 31 11:31:49 2032 GMT
Subject: CN=69c5192a-4752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:59:6b:4a:f4:e3:3c:b4:9a:dc:f9:8f:7f:
89:e8:5d:70:d0:93:64:33:e1:d2:df:f1:3d:b1:79:
4d:c3:3e:e8:e0:05:aa:66:3e:c8:b7:5f:6f:4f:79:
96:98:7e:2d:8d:98:2d:a5:b6:dd:c3:6e:a3:85:bf:
04:12:7f:e0:ca:a2:8e:67:70:0f:2b:36:04:9f:2c:
d4:5e:1c:b8:dc:aa:03:cc:eb:f9:45:bd:c9:d3:10:
88:5c:8a:26:c3:40:e7:e6:50:1b:96:0e:df:9c:5b:
a1:a7:35:ed:85:cb:13:21:d6:b0:59:83:04:0a:49:
ed:83:41:c2:20:55:5d:92:f9:64:46:18:72:dd:ed:
05:b4:15:3a:12:1a:ca:6e:3b:74:a1:e0:93:1a:95:
4c:38:79:0e:14:be:48:65:86:5d:f3:07:d8:e9:9f:
e3:b6:d9:5b:ce:07:dc:2f:04:71:ce:b6:5f:26:60:
8a:ab:57:1c:e8:03:72:8f:6f:50:0a:a0:a6:53:5b:
12:f2:ce:ef:ef:00:73:e4:58:a5:2b:c3:04:86:27:
63:b2:e4:d3:e1:19:65:91:90:0a:b9:6c:de:80:1c:
8c:82:d4:f3:4a:d6:7c:7d:f4:f0:92:46:bb:bc:0e:
a6:7f:2a:b1:8a:3d:2c:ab:d2:cf:f6:22:41:3a:39:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7C:7C:3D:CF:FD:0A:6E:96:68:5E:0B:8A:06:81:61:23:FF:E9:ED
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/63CCC8A2290711F1B5019583DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.164.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9a:4f:37:37:cc:c6:30:c5:d2:04:40:26:6f:5e:72:6e:13:
9c:39:71:5d:6c:51:8d:ac:97:44:73:eb:46:1c:a2:d0:57:6e:
65:08:b9:db:bb:0f:29:f1:ac:e5:d3:65:71:b9:92:70:17:7d:
7a:ac:df:55:9c:d7:24:e3:d9:ec:81:b5:3a:c4:a2:ab:38:b2:
8c:dd:c1:1d:bf:13:78:b4:d8:6e:c3:77:cf:d1:d1:25:6e:49:
08:b8:53:ee:19:21:b2:07:dc:01:cd:67:fc:31:3a:6e:c4:d6:
17:ce:73:96:d1:72:25:dc:0a:80:2e:df:a4:5f:52:03:96:0d:
28:99:57:5d:13:e1:12:9a:b4:98:2f:5c:ae:f4:f1:27:35:f3:
2a:31:47:08:32:35:a8:01:3f:2a:ad:0b:a6:af:ef:e3:a3:88:
52:ea:92:8e:32:da:f6:05:52:1a:5c:f4:30:3d:d1:00:a6:40:
6f:4a:cd:8e:82:44:6a:52:d4:d9:49:e6:c7:2b:5a:75:38:ae:
dc:5c:61:a8:8e:06:30:e7:53:49:82:a5:eb:53:3a:46:49:02:
00:6b:af:fa:38:6d:01:5e:43:4b:e4:d2:1a:52:fe:3d:8f:df:
21:9b:2c:3c:80:aa:c6:08:34:81:5a:dc:82:f8:3f:43:79:fc:
ef:bc:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:45 2026 by rpki-client