Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/F7429FB459E811F18F63FDA5CE1D38B0.roa
File: F7429FB459E811F18F63FDA5CE1D38B0.roa (raw, json)
Hash identifier: VUPk69F6DD+hVqLu9d4kCAXXTSFw8Fj0vDPy/DGBIiI=
Subject key identifier: F0:F7:75:27:BA:97:19:07:9D:E3:5B:01:DA:68:43:CF:4C:13:E9:E7
Certificate issuer: /CN=F36FB339AF/serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Certificate serial: 0F
Authority key identifier: C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/F7429FB459E811F18F63FDA5CE1D38B0.roa
Signing time: Wed 27 May 2026 16:27:34 +0000
ROA not before: Wed 27 May 2026 16:27:30 +0000
ROA not after: Sun 27 May 2029 16:27:30 +0000
asID: 329036
IP address blocks: 102.216.188.0/24 maxlen: 24
102.216.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 05:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB339AF, serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Validity
Not Before: May 27 16:27:30 2026 GMT
Not After : May 27 16:27:30 2029 GMT
Subject: CN=6a171b76-46b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:82:e6:68:db:72:23:4a:55:26:6b:65:bf:
13:c0:89:37:34:aa:9e:29:0f:36:0d:4e:d1:e9:f0:
50:e5:da:8c:c9:ce:b3:9d:d9:04:91:db:a4:8f:a3:
e1:9f:a0:4a:4d:28:32:8e:c4:67:30:94:53:11:ec:
ff:7f:2b:84:ee:99:16:f6:fd:09:e3:cf:05:6b:d3:
70:22:d3:0e:f1:dd:4f:7c:a1:f5:1f:06:8a:0f:31:
7a:18:f0:ad:f8:55:27:32:8b:bd:d6:f8:61:b9:f3:
6f:0b:3d:a8:6f:c8:f1:ce:89:54:1e:86:82:ee:76:
8e:51:78:91:38:ba:ef:4e:d5:1f:d3:45:78:37:d8:
b2:28:7d:7f:e9:b1:4f:ba:b6:ba:cd:80:b1:c0:f3:
50:09:43:13:11:1e:34:2b:e5:7f:39:a4:6b:f4:d4:
a4:ec:e7:b2:4c:f9:cf:1f:2a:14:68:16:e5:c0:a2:
85:ed:a5:d8:90:4d:74:39:1b:ac:76:a9:dd:a7:e8:
c8:a1:cd:08:2f:05:64:94:4d:66:b2:c6:35:0c:fd:
36:32:14:f3:69:56:4e:17:36:72:64:55:dd:b3:88:
7b:1c:f4:5d:75:8d:43:49:bd:d1:b5:8e:46:b2:13:
f4:98:06:3f:1c:c5:d3:93:fa:5b:9c:5a:52:9a:1d:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F7:75:27:BA:97:19:07:9D:E3:5B:01:DA:68:43:CF:4C:13:E9:E7
X509v3 Authority Key Identifier:
keyid:C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/F7429FB459E811F18F63FDA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
93:42:6c:c5:c7:92:26:4c:d9:58:16:57:c4:75:cf:dc:8c:81:
b5:2e:a1:3a:ad:c9:74:40:01:d6:0f:19:b2:54:7a:f8:cc:81:
cd:25:3c:77:e0:0b:1d:51:61:b1:d0:b1:2e:07:7b:37:1a:7d:
e1:0f:24:b4:51:f8:e1:50:ef:77:c8:2d:b4:06:b3:60:88:4e:
bb:8f:c7:ff:d3:46:a9:1c:f3:1b:b4:5b:cf:23:d4:bb:d5:5f:
b0:be:5b:03:d9:67:97:45:9c:c9:46:40:49:c4:e3:f7:04:11:
9f:23:01:52:a7:cb:f5:55:fe:83:a5:b6:62:2d:54:e3:b8:4b:
12:ec:72:01:24:bc:00:54:cb:c8:2d:2c:13:59:b8:16:fa:8b:
11:54:52:6a:e2:95:39:37:ff:f7:29:4c:eb:7b:94:8b:81:94:
52:b9:52:d6:95:24:84:2b:91:b7:23:c5:1c:6b:1e:4b:dc:53:
12:76:27:f7:ad:92:8f:bf:df:92:f1:b2:c0:6d:0a:bf:e5:63:
dc:27:4a:60:c0:e4:1c:a9:d8:36:d2:d9:8e:2d:8f:a4:11:95:
d4:86:6c:37:e3:b2:f2:03:54:01:df:a2:fc:5c:80:42:b4:b1:
b7:18:7a:c4:2d:49:d2:f2:14:c7:83:77:9e:81:93:b5:e1:4c:
eb:c3:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:03 2026 by rpki-client