Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa
File: 1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa (raw, json)
Hash identifier: sbb9mXyfSj61UJjWbJwXmlAFr/cOrxQfzXZS3BVT1Ro=
Subject key identifier: 8C:54:1D:F7:21:70:56:70:80:61:70:D9:22:AD:D3:79:E1:6C:EB:F3
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 2E
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa
Signing time: Thu 09 Apr 2026 08:28:46 +0000
ROA not before: Thu 09 Apr 2026 08:28:41 +0000
ROA not after: Wed 09 Apr 2036 08:28:41 +0000
asID: 329648
IP address blocks: 102.204.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 08:28:41 2026 GMT
Not After : Apr 9 08:28:41 2036 GMT
Subject: CN=69d7633d-6798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:1a:26:5c:1c:91:e5:0b:fd:95:71:30:4e:
e7:0e:be:66:d2:32:66:24:c1:7d:b8:0f:b4:66:17:
98:01:b2:7e:fc:6d:ce:75:7a:23:a1:99:b2:a7:69:
f6:b4:8e:85:80:1c:ba:b1:96:cb:7e:e0:a0:a7:17:
f8:4b:3a:89:fc:b2:28:90:0c:cc:6c:cb:9d:a0:e2:
6f:78:95:44:8e:e1:b3:87:57:23:87:41:27:58:90:
ad:a2:28:53:59:c7:7b:19:47:60:fa:da:2b:8b:6b:
a2:17:98:eb:29:fd:4f:96:de:8a:46:d0:50:58:78:
44:01:be:ca:3f:63:ff:62:ef:85:4e:41:bc:79:99:
50:be:5c:82:ec:3c:c1:38:4f:46:c4:ff:20:d8:2f:
af:20:65:b9:a0:92:a8:01:c6:85:8d:c3:80:8d:73:
3c:ad:7d:8b:81:65:f7:3f:72:d2:74:b4:3b:2c:0e:
d0:ec:4a:7d:55:c0:d2:e9:91:f2:d5:ec:2d:57:5a:
bb:f8:d0:1f:eb:a0:3e:c2:0f:26:1a:8a:73:d4:f2:
3a:8a:d7:c3:b0:93:76:ee:4a:66:06:94:cd:6f:b7:
fb:35:f2:0f:77:b0:98:34:b4:a7:d8:d5:18:0b:9c:
09:70:11:9b:c2:4e:e8:ce:49:c2:97:c6:2b:1a:c5:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:1D:F7:21:70:56:70:80:61:70:D9:22:AD:D3:79:E1:6C:EB:F3
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.39.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:f7:41:4b:3e:d1:8a:8c:33:16:21:65:38:35:73:f3:d0:
ea:91:f4:8e:51:86:a8:8a:c3:dd:74:9c:8f:7f:a8:24:2b:10:
b0:a4:90:29:2d:ed:49:cd:ea:7f:f8:2b:81:e1:93:e9:b1:8a:
2c:db:85:a9:84:73:99:4e:69:7a:dc:ea:b2:c3:1b:7e:f9:e3:
80:e5:f2:00:57:0e:5d:cb:62:92:68:7b:68:1f:96:cb:ef:07:
9f:64:75:f7:7b:33:67:44:5b:7c:75:fd:8d:48:be:3a:90:a8:
22:5c:2d:30:2a:c5:80:60:94:5e:f6:07:3b:94:26:d8:d7:1d:
fd:e3:67:22:36:5e:45:70:47:07:3c:ce:5b:35:3f:b8:de:3f:
87:a7:e0:f2:fe:e6:5a:38:4a:14:3a:20:51:56:12:5f:ee:e5:
41:98:6c:c4:67:19:12:81:87:cf:08:f7:c3:26:d7:d5:3a:39:
17:85:04:8b:8d:7a:c5:d2:3f:ad:84:3a:99:ab:bc:43:e1:2d:
ea:11:18:a8:e4:c8:8c:ae:6f:6c:da:a1:1c:42:6c:85:f6:07:
8d:49:df:9e:d9:00:87:42:d9:50:83:25:75:20:92:af:8d:ca:
6c:25:77:5e:d4:27:5e:2f:5f:37:7a:66:7b:93:86:45:e3:84:
e0:90:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:33 2026 by rpki-client