Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/97EB244E530511F18FD440A4CE1D38B0.roa
File: 97EB244E530511F18FD440A4CE1D38B0.roa (raw, json)
Hash identifier: JkuIP9qbDbHSq3/IwznxY1/qoooKEvF9e6/uwuuEF6c=
Subject key identifier: F0:7A:EA:06:EA:72:D7:D4:7B:E1:7C:C6:C7:EC:7E:8D:D4:E6:3D:71
Certificate issuer: /CN=F36FB339AF/serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Certificate serial: 02
Authority key identifier: C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/97EB244E530511F18FD440A4CE1D38B0.roa
Signing time: Mon 18 May 2026 22:04:52 +0000
ROA not before: Mon 18 May 2026 22:04:47 +0000
ROA not after: Wed 31 Mar 2027 22:04:47 +0000
asID: 329036
IP address blocks: 102.216.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 05:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB339AF, serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Validity
Not Before: May 18 22:04:47 2026 GMT
Not After : Mar 31 22:04:47 2027 GMT
Subject: CN=6a0b8d04-bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:66:34:17:3f:80:79:89:5a:08:8e:22:74:
4a:78:15:4e:62:15:ba:b5:25:16:1d:8f:78:6c:13:
94:e4:82:0e:99:88:63:6f:e5:77:1c:20:05:8b:17:
f6:7b:68:a3:81:d0:e0:a9:53:21:f0:48:a9:30:16:
0c:95:1b:36:ed:be:cf:31:96:db:81:d2:0a:c3:01:
fe:1d:b3:ab:31:04:f7:6d:f8:c7:30:78:73:00:5a:
15:1d:45:8d:a8:fd:a2:b0:1b:0a:78:32:bd:aa:30:
0a:8e:f7:1f:96:05:a1:c5:41:16:7d:02:9f:ec:cb:
8d:fb:4b:23:92:d3:80:14:e5:13:3c:f1:63:1f:18:
90:57:ca:b5:0d:97:2d:24:fb:7f:60:d4:bb:4e:b6:
d1:99:a1:64:7d:2a:c1:b4:ef:f9:78:d2:7e:c2:84:
b6:38:e4:ed:ed:48:bc:d4:d9:d8:28:96:06:6e:43:
d0:d4:01:89:ef:4e:a3:8c:04:9b:5e:0f:d3:6b:d7:
83:e3:21:8b:06:97:4c:68:0b:0f:ba:ab:41:7b:af:
e0:95:43:08:cb:60:9d:55:61:35:80:1e:35:9a:8e:
69:5b:21:c8:4f:cc:3b:aa:e0:cb:a6:50:69:d4:d3:
e0:59:b7:1a:b8:f8:77:f4:2b:21:ff:fb:33:d5:79:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:EA:06:EA:72:D7:D4:7B:E1:7C:C6:C7:EC:7E:8D:D4:E6:3D:71
X509v3 Authority Key Identifier:
keyid:C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/97EB244E530511F18FD440A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:cb:2a:07:a9:0a:6e:b8:19:70:b8:7e:36:97:43:87:72:82:
16:36:8f:5d:16:37:c6:be:10:44:f8:7d:8a:2e:20:2d:ae:ee:
42:4b:c6:25:bd:4e:bc:a3:34:f9:f0:78:7a:dc:1a:3b:dc:18:
99:c4:dd:0c:71:06:0c:44:e3:06:2a:9b:ad:59:cd:69:0e:8d:
e0:be:95:8e:88:72:ce:98:4b:07:48:2d:f0:ac:76:1f:44:62:
5d:3e:9b:69:6b:25:1c:58:7e:a2:1e:10:32:a0:31:5b:9a:84:
08:9a:26:5e:f7:8f:37:29:78:1d:57:f2:3d:2c:d0:54:b8:12:
20:2c:5b:74:16:40:37:8d:24:ed:98:51:3f:22:4b:c9:38:31:
37:55:b1:19:de:c9:b2:bf:44:2a:29:54:9b:ae:cb:9e:fe:97:
bd:7a:20:9c:a7:b2:ff:76:ae:1f:65:9f:26:c8:45:74:2e:70:
c9:92:4d:f3:5e:4d:95:a0:ea:c0:99:98:c6:ce:fe:0f:c9:08:
95:f7:f1:71:f3:37:97:8d:0a:29:ef:b6:b6:9d:d6:6c:f8:c2:
49:5a:78:4c:36:a2:dc:84:1a:e5:b2:5a:b8:3f:83:d9:6c:60:
0c:84:dd:7b:09:77:6f:31:49:ab:0c:53:d2:e9:7a:be:a1:df:
a2:71:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:46 2026 by rpki-client