Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/35DF2FE833ED11F1B4145AB3CE1D38B0.roa
File: 35DF2FE833ED11F1B4145AB3CE1D38B0.roa (raw, json)
Hash identifier: A48YMHhA/dlybkCnRzYsuhf4oJk2hDb9PCemlafemBw=
Subject key identifier: 73:2F:80:FB:ED:74:76:74:0D:EF:BA:8E:25:CE:68:89:F1:32:A5:64
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 26
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/35DF2FE833ED11F1B4145AB3CE1D38B0.roa
Signing time: Thu 09 Apr 2026 08:22:13 +0000
ROA not before: Thu 09 Apr 2026 08:22:08 +0000
ROA not after: Wed 09 Apr 2036 08:22:08 +0000
asID: 329648
IP address blocks: 102.204.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 08:22:08 2026 GMT
Not After : Apr 9 08:22:08 2036 GMT
Subject: CN=69d761b5-99e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:7c:2c:e8:df:cf:48:26:ab:48:dd:e7:9a:
65:96:aa:1b:4b:42:eb:df:a1:5c:6e:26:28:0a:a8:
2c:34:47:4f:ce:e7:b8:1b:28:4e:98:14:ff:df:77:
14:b9:c0:c3:96:55:58:e6:49:f0:f6:f1:8e:24:15:
ae:a8:0f:54:47:77:a9:a8:ed:0a:b4:a4:0b:e5:17:
9d:98:02:6a:47:eb:d8:1a:23:3b:d3:13:9f:66:c3:
8f:6b:0c:4d:ec:58:dc:88:20:9d:41:53:a1:9f:ac:
bb:92:a5:f3:06:1f:b5:cd:62:44:48:9f:2f:84:4a:
91:12:03:39:f9:5a:b0:54:74:a8:ba:7f:05:38:95:
ec:83:be:4a:40:d5:c6:a0:b3:00:87:ab:3f:bb:79:
f8:b9:96:88:b8:2b:02:12:87:91:46:06:2a:22:2f:
20:3d:4a:fb:44:fb:fb:80:13:d0:2d:91:ac:cd:24:
e4:0e:0f:f2:36:1b:2c:0c:54:f7:fb:88:65:31:c9:
e4:d9:af:6c:b2:ab:b3:4c:6c:7f:91:43:d9:47:f2:
77:d5:d9:f2:0b:56:a4:bc:93:f3:ef:72:32:a0:62:
19:8c:ed:64:bb:96:b6:6a:5e:82:10:58:bd:02:82:
c3:18:93:fb:e0:20:30:26:60:75:b7:13:6f:e6:9f:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:80:FB:ED:74:76:74:0D:EF:BA:8E:25:CE:68:89:F1:32:A5:64
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/35DF2FE833ED11F1B4145AB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ef:10:50:f1:ff:c0:59:5a:e2:67:65:6d:25:9d:46:88:29:
aa:7e:be:39:4b:c1:ed:3f:4e:04:b5:4e:11:2c:8c:7c:51:cb:
0e:88:c7:80:23:ac:8d:f7:d1:6d:d8:f4:ab:7f:9c:53:7e:c3:
9f:a1:31:e9:d6:e3:e7:c0:d6:4a:9e:6d:a1:e4:00:04:a3:bd:
8f:fe:2c:2f:c6:69:99:e2:9a:8a:ea:fd:17:74:7a:08:37:75:
6f:58:e2:a9:cc:76:32:d4:83:3c:da:a0:2d:a8:6d:c0:57:d3:
97:1c:c5:c5:4d:87:ef:2f:05:1a:91:ea:c4:ef:6f:72:09:fd:
22:54:de:a2:95:2d:36:2d:28:12:22:dc:fa:03:c6:d5:90:6c:
3d:de:cf:a7:03:29:0b:3c:19:74:27:12:1a:59:8e:7e:6d:cb:
cb:3e:34:ec:3b:ad:a8:e8:24:62:23:83:2d:50:c2:21:8f:03:
09:18:e0:44:df:63:b2:8c:b8:7b:be:e2:74:04:6e:a5:57:a7:
f2:59:fd:33:a6:2a:ac:4e:1c:0b:6d:3b:ee:ba:44:94:9b:3c:
e6:23:6c:6a:b5:22:4b:4f:f0:1d:07:d4:d0:a0:68:04:7e:d0:
b4:f8:2c:8f:f7:86:0e:32:48:92:4a:66:56:b7:f8:e0:95:7b:
5e:43:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:21 2026 by rpki-client