Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/A6A7C3E8290711F18B6A1487DAE4EC9C.roa
File: A6A7C3E8290711F18B6A1487DAE4EC9C.roa (raw, json)
Hash identifier: 1X46Q9LRuoAUZoH96K47k8ULVdllJ4vTY+aoEFl5Yc8=
Subject key identifier: 19:F4:E6:75:C3:7F:42:62:26:7F:A8:39:19:88:B6:B1:BF:59:57:76
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0566
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/A6A7C3E8290711F18B6A1487DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 11:33:47 +0000
ROA not before: Thu 26 Mar 2026 11:33:42 +0000
ROA not after: Wed 31 Mar 2032 11:33:42 +0000
asID: 23764
IP address blocks: 102.217.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 11:33:42 2026 GMT
Not After : Mar 31 11:33:42 2032 GMT
Subject: CN=69c5199b-835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:ff:05:37:87:96:5d:e5:f5:c2:49:64:39:
96:18:0f:2a:90:03:fc:11:83:d7:89:d1:07:e9:b4:
1b:a3:f9:1c:d1:a1:36:4f:d8:09:96:b0:ea:4c:6c:
79:ec:c9:41:f1:70:10:37:81:be:00:df:a6:0a:24:
eb:14:6d:cf:e2:40:d4:3e:fe:c8:89:9b:79:48:70:
4f:64:a7:a0:c1:a6:0f:fb:06:b4:7b:1e:91:c8:f8:
bf:b4:83:dd:3c:7e:8c:69:af:4c:3a:6c:28:fd:cd:
f8:26:9f:bb:39:7e:e7:a5:e7:a3:d1:80:11:5b:86:
f7:b6:8f:67:ce:02:6d:7a:a0:68:b9:f2:c3:bc:2a:
65:79:86:15:df:d3:5c:ea:26:5d:22:2f:6c:1e:b0:
57:2c:c0:5d:59:c7:7f:a5:07:1a:a5:e9:5f:ba:de:
d0:bd:c0:d8:2b:94:55:2f:f7:f8:b4:44:01:b3:fb:
fe:f5:2c:02:4d:42:6f:07:21:b4:e8:77:b1:91:84:
07:73:98:f4:bb:e2:13:13:33:f5:38:65:fd:07:bd:
0c:e8:ea:29:64:8f:52:09:a4:6b:3a:f5:9e:f8:a0:
99:d5:7b:9e:9f:72:a2:67:1d:c5:d0:c1:a4:2d:a6:
ea:d3:0f:85:b4:9c:e2:ac:17:87:b7:88:e9:5e:35:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F4:E6:75:C3:7F:42:62:26:7F:A8:39:19:88:B6:B1:BF:59:57:76
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/A6A7C3E8290711F18B6A1487DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:ee:1c:44:f2:ce:a5:d5:48:11:99:84:b1:cc:e5:87:dd:f8:
a0:4a:88:d2:d1:0f:fb:d5:7d:44:4b:b8:16:cd:59:7c:80:9e:
61:c2:9f:3c:d7:cf:00:c9:7d:88:23:23:98:aa:b1:5a:81:1a:
51:40:3d:07:3a:b5:a3:56:11:df:d7:3e:70:95:b0:5e:f6:a6:
8e:73:dd:50:fe:1c:c6:7d:90:81:34:fc:f1:5b:8b:48:65:f0:
93:06:8c:46:59:43:5c:9c:be:3e:7a:81:03:c2:39:77:46:f6:
7c:cd:ca:1b:d0:4c:9e:cf:1f:bb:b3:2c:e7:13:6c:54:b6:e1:
f4:74:71:b5:8e:23:96:7e:9e:9a:e3:a8:a1:b2:cc:78:9c:d3:
53:f3:69:d3:ce:94:b6:0c:f6:e3:3a:13:72:6f:1d:50:46:0a:
aa:31:6f:14:94:f3:f5:4e:5c:e0:17:d3:30:14:ae:9d:0d:ac:
43:ee:1f:a2:67:2e:20:06:7f:a2:25:8c:56:d1:2e:3f:6f:59:
41:e9:19:fe:08:b5:a4:43:d3:48:33:42:54:fd:8b:c4:f8:83:
5f:ab:4b:e8:dc:d7:8c:1e:c1:7e:55:a6:6d:1c:45:67:d6:ea:
30:b1:dd:06:52:13:2b:f7:6d:93:c7:e2:b0:16:49:36:fb:e0:
fd:4a:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:23 2026 by rpki-client