Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/099EBF4C635F11F1BA3DE3A8CE1D38B0.roa
File: 099EBF4C635F11F1BA3DE3A8CE1D38B0.roa (raw, json)
Hash identifier: OWce1zZcQ9EiPngxqkYpDF3Zur0JGfhZoEColzAuCCI=
Subject key identifier: CE:F4:AE:22:21:AD:39:2A:A9:88:B3:2A:BA:40:8D:CF:3D:80:4C:51
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0534
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/099EBF4C635F11F1BA3DE3A8CE1D38B0.roa
Signing time: Mon 08 Jun 2026 17:25:26 +0000
ROA not before: Mon 08 Jun 2026 17:25:21 +0000
ROA not after: Sat 08 Jun 2030 17:25:21 +0000
asID: 834
IP address blocks: 102.212.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Jun 8 17:25:21 2026 GMT
Not After : Jun 8 17:25:21 2030 GMT
Subject: CN=6a26fb06-a4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:66:e7:98:9b:0e:0c:7d:ab:c3:b7:61:be:
df:c1:cf:1b:b1:49:a1:83:09:05:c3:27:6f:8a:1e:
0c:33:d7:ab:6f:82:1c:9a:86:6e:17:f5:25:9e:38:
ae:71:8a:9f:a8:89:a0:ea:12:07:c7:26:13:bf:60:
1d:85:1e:1b:78:d7:74:d9:9b:6f:94:b4:d6:7a:93:
ff:ea:55:3f:c6:71:82:7b:19:fe:1c:2e:6b:ba:e2:
64:a0:6f:ff:80:1f:c4:cf:c5:92:34:4a:cb:0c:30:
3e:e3:92:57:66:c9:7b:66:9b:e2:55:b7:5b:26:75:
c3:60:d5:a3:d1:f6:40:31:7a:67:2f:8a:33:35:71:
92:e4:2b:82:9e:bb:2b:76:f0:eb:9e:f2:95:b6:cd:
4c:ff:6b:4f:db:28:6b:ab:aa:e9:d8:43:1f:c0:e5:
fc:0e:ba:3d:d4:f6:41:2b:de:99:a5:dd:b1:9e:ae:
e5:b4:fb:d4:72:94:dd:d3:42:39:3a:8b:66:b2:9e:
3b:1a:c9:ba:a4:88:9e:22:b2:d9:af:bc:c7:b1:cc:
57:88:46:3d:71:80:37:c3:2b:84:ff:cd:9c:a2:91:
60:cd:c4:01:b6:0e:18:4f:6a:6c:28:25:8a:d0:b0:
15:c8:af:1b:fa:01:6a:24:b2:a1:d4:91:13:d5:6e:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:AE:22:21:AD:39:2A:A9:88:B3:2A:BA:40:8D:CF:3D:80:4C:51
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/099EBF4C635F11F1BA3DE3A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.4.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a5:7d:70:a9:47:07:c4:83:40:0e:ff:c4:23:c5:35:30:f1:
c3:cc:fe:3d:43:22:0d:3e:76:80:f8:2a:ee:77:2d:88:d2:a1:
01:3c:99:09:55:a2:aa:e1:c3:59:34:ce:46:f0:c3:34:3e:dc:
18:02:bc:81:33:a6:1b:78:3e:bc:bf:fd:55:40:b7:e2:14:8f:
d6:ab:10:84:e8:70:a6:36:e4:11:76:a6:94:ed:cb:7b:cc:14:
66:7b:79:e6:ff:31:97:a9:a3:dc:66:68:bc:98:9b:d8:b0:a8:
22:bd:c4:7a:7b:f6:a1:bf:f2:67:cd:67:c2:4e:c4:79:53:be:
fb:a1:b2:11:14:93:2b:3f:00:5a:7a:99:d5:51:29:8b:89:41:
6f:61:4f:76:8d:a7:25:54:68:29:d2:32:f7:ef:38:3b:78:9c:
94:11:98:48:4d:53:68:03:a4:5c:7f:65:e2:91:08:c4:a1:98:
e0:46:b6:a3:31:f3:3a:b0:01:24:fd:3a:57:bd:81:96:4f:30:
61:6d:70:2d:74:f0:36:2b:02:d9:66:29:a7:43:6b:69:c1:79:
e0:b4:38:ea:95:68:d8:10:18:7b:ad:62:46:dd:36:29:02:5e:
87:22:c0:da:63:99:73:6c:50:75:a8:02:7c:e3:7d:67:e9:d6:
2a:da:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:22 2026 by rpki-client