Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/B2F6B8EA59E811F190AC18A4CE1D38B0.roa
File: B2F6B8EA59E811F190AC18A4CE1D38B0.roa (raw, json)
Hash identifier: sDvjDg9SOcbVOSO3Fq25uXtGAAl2I4Z/lvE9EJAbtlY=
Subject key identifier: 5A:DF:55:47:33:46:B0:62:1F:F4:B9:BE:27:23:B2:78:54:DB:26:F0
Certificate issuer: /CN=F36FB339AF/serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Certificate serial: 0D
Authority key identifier: C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/B2F6B8EA59E811F190AC18A4CE1D38B0.roa
Signing time: Wed 27 May 2026 16:25:40 +0000
ROA not before: Wed 27 May 2026 16:25:35 +0000
ROA not after: Sun 27 May 2029 16:25:35 +0000
asID: 329036
IP address blocks: 102.216.190.0/24 maxlen: 24
102.216.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 05:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB339AF, serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Validity
Not Before: May 27 16:25:35 2026 GMT
Not After : May 27 16:25:35 2029 GMT
Subject: CN=6a171b04-f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:bc:32:1d:ac:d3:39:f3:41:16:4e:0f:77:
10:b4:52:d0:52:56:8b:67:bf:3f:c0:49:6f:cd:53:
15:85:1f:54:e0:ba:4e:cb:43:06:3d:8e:6a:6d:56:
fb:73:b1:91:b8:2d:55:47:3a:7c:a3:56:f3:08:01:
c7:2a:84:5b:e7:52:62:18:b9:0a:e5:ed:e2:d3:a9:
6a:7c:5b:08:16:37:95:aa:27:f6:ee:2b:73:98:25:
b8:9f:bc:fa:6e:8c:6a:c0:2c:85:2c:74:71:b8:b8:
61:1c:78:63:7f:0f:50:57:7f:cf:f1:2b:05:5c:01:
12:71:fc:94:3b:83:5c:d7:e0:73:4c:ec:d9:4a:d8:
46:62:1a:a6:80:0c:1c:12:d1:b7:73:3b:2f:29:a7:
44:e8:c3:ce:67:26:02:8b:51:19:31:ac:82:d0:06:
87:76:06:b0:06:5f:aa:87:24:42:23:14:b5:e7:c8:
40:66:94:dd:43:19:1f:96:b4:76:26:5f:fc:c0:26:
38:ec:87:db:ba:5e:33:2e:73:9a:a6:39:29:a7:f2:
04:8f:98:27:46:47:46:c1:6a:94:d5:81:8a:5e:b6:
fb:db:a9:f0:f0:78:c0:0e:a2:20:10:5f:a4:e2:ff:
24:e8:37:e3:a4:61:0b:f5:a9:77:2d:e2:c2:50:a8:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:55:47:33:46:B0:62:1F:F4:B9:BE:27:23:B2:78:54:DB:26:F0
X509v3 Authority Key Identifier:
keyid:C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/B2F6B8EA59E811F190AC18A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:96:c8:3d:d1:d6:2d:c8:cb:7d:fb:f7:2a:8b:a3:2c:60:b3:
36:2e:1a:93:89:fb:ad:c7:f7:98:0e:0c:b4:49:d4:12:25:44:
69:61:f5:bc:56:a4:48:a8:cd:4d:44:5a:47:97:04:e4:ea:cc:
36:f0:d9:50:ce:05:1d:c4:28:42:f9:a3:10:e0:2d:be:16:3c:
76:1c:82:06:f7:2a:b2:1f:27:47:9b:d9:58:26:46:bf:d8:a0:
f1:c5:e7:ed:8b:a7:c3:57:43:c1:ab:e0:88:8f:16:9c:e8:88:
3b:45:b9:bb:42:96:8c:2f:38:69:7a:df:c7:ee:12:ae:1a:bf:
6f:6f:7e:10:a5:64:34:61:a4:55:44:75:ea:18:ed:8e:7b:b3:
3d:09:2f:fe:d6:93:49:f4:43:93:40:86:dc:1f:fc:da:be:ef:
9e:11:d1:bf:be:00:08:a7:ae:1e:64:83:f8:e8:4c:fd:c9:3a:
dc:fe:bc:02:f0:c1:d7:f3:07:7d:60:cb:6c:14:de:4c:a3:ce:
42:a1:7c:4c:f3:85:65:02:1b:5b:18:57:7f:51:06:e3:01:dd:
59:09:90:fa:9f:84:27:94:ab:cb:d7:20:c1:9d:96:a8:95:14:
fe:ca:7a:5d:2a:a7:e3:67:3b:a4:65:6b:c8:7a:1e:1b:04:ef:
3b:9d:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:28 2026 by rpki-client