Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/449A4E3E372411F1B98C30B7CE1D38B0.roa
File: 449A4E3E372411F1B98C30B7CE1D38B0.roa (raw, json)
Hash identifier: 5iAASxmUodx0NUhxKkryggicqm+EXQg2N08d8iXckJs=
Subject key identifier: 33:32:34:24:DD:DE:2C:D3:38:2A:B0:C4:2D:81:81:E5:5A:9A:B9:34
Certificate issuer: /CN=F36FE1EAAF/serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Certificate serial: 0399
Authority key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/449A4E3E372411F1B98C30B7CE1D38B0.roa
Signing time: Mon 13 Apr 2026 10:33:54 +0000
ROA not before: Mon 13 Apr 2026 10:33:49 +0000
ROA not after: Wed 31 Dec 2036 10:33:49 +0000
asID: 328427
IP address blocks: 102.68.136.0/22 maxlen: 32
2c0f:16c0::/32 maxlen: 126
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE1EAAF, serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Validity
Not Before: Apr 13 10:33:49 2026 GMT
Not After : Dec 31 10:33:49 2036 GMT
Subject: CN=69dcc692-a9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:e9:64:7a:fd:71:1c:b9:f0:62:86:7c:04:
23:48:c8:e8:45:40:ba:45:12:82:9c:f2:c1:6c:fc:
d5:9c:40:5f:3d:df:44:22:2d:a4:ca:8e:2b:e9:b5:
06:12:2e:4d:cf:05:b2:bb:06:ba:df:8d:10:5f:cb:
dd:80:16:33:b6:b3:4e:8c:8d:cc:f5:f0:ab:cf:ed:
90:eb:b4:78:55:71:cf:14:bc:c5:35:4d:d4:3f:e2:
63:8c:d0:d5:e5:a9:5e:ff:4d:a8:55:d7:bb:bc:e3:
cd:f9:02:0f:fe:f2:98:d7:e4:9d:dc:d6:ed:ea:34:
46:33:99:a5:f0:22:be:f4:40:2c:c9:12:0c:be:a4:
38:30:5c:18:ce:7e:17:8e:26:10:6f:b1:80:e5:ba:
73:7a:89:82:0d:16:ad:e0:87:46:66:5e:d5:61:a4:
0c:35:8c:d1:53:f0:17:c8:87:71:b5:21:51:53:65:
2b:82:1c:16:a7:c0:00:6b:07:b8:35:96:9c:2c:d4:
dd:c4:ad:1a:b2:77:ff:31:9b:13:8c:8e:90:80:65:
b4:eb:85:f8:0c:b3:bb:8b:8d:97:d9:f6:78:a2:a3:
fb:ea:0b:b2:e2:4e:2a:ee:b9:11:9c:09:e3:3b:2e:
40:79:5d:ee:aa:b9:2a:b4:43:0a:84:98:5e:f5:5f:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:34:24:DD:DE:2C:D3:38:2A:B0:C4:2D:81:81:E5:5A:9A:B9:34
X509v3 Authority Key Identifier:
keyid:07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/449A4E3E372411F1B98C30B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.136.0/22
IPv6:
2c0f:16c0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:bf:ad:12:5e:02:71:1d:ab:00:cf:f4:dc:0b:1a:9a:35:6c:
76:aa:3e:6f:6a:68:73:03:07:a9:58:39:a1:25:4a:f6:6e:24:
85:68:8b:4c:b6:9d:51:5f:e0:2d:5d:a0:7c:5a:f5:2b:ba:69:
7c:73:18:0e:1d:ab:4f:0f:bc:d5:f0:f7:e9:23:75:5b:a0:e2:
25:54:74:50:5c:53:77:96:08:bc:e7:7a:e9:7a:01:61:ba:d2:
4b:01:2a:a7:41:a1:34:50:df:34:b5:5f:05:27:a7:00:7e:3e:
c9:d6:07:7b:31:ee:8b:61:80:7e:60:0f:ab:8e:4c:bb:19:3e:
13:d0:03:68:dd:e4:75:68:2e:d1:f8:22:20:0e:f8:db:e3:c6:
59:c0:91:73:a1:9e:f1:20:3c:f2:ee:c8:f7:1e:1b:85:06:0d:
29:22:78:02:3d:6b:eb:b1:e7:86:a7:66:5f:b5:c0:96:a7:1b:
2d:6a:b8:ae:64:ef:0d:80:dc:6d:ba:a6:48:a7:63:ee:02:03:
ef:06:bc:b1:a6:73:58:43:37:42:1b:c1:af:79:3b:47:92:cf:
5b:46:5d:63:9d:bf:d9:38:ea:1c:35:e0:b6:86:2b:5b:4e:85:
aa:32:14:db:cc:60:53:87:87:83:1a:da:0d:b7:da:82:62:35:
81:a1:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:36 2026 by rpki-client