Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/4E666882195E11F18BD2B3F3DAE4EC9C.roa
File: 4E666882195E11F18BD2B3F3DAE4EC9C.roa (raw, json)
Hash identifier: s/B6JWmALGd9JtpV1fZC8Bgu+GPVUAr+NxUz/GTPeGg=
Subject key identifier: 8A:77:23:E8:8E:52:9E:01:C8:78:40:B2:BA:FF:8F:E9:EC:F3:65:4B
Certificate issuer: /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial: 0584
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/4E666882195E11F18BD2B3F3DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:13:46 +0000
ROA not before: Fri 06 Mar 2026 13:13:42 +0000
ROA not after: Thu 06 Mar 2036 13:13:42 +0000
asID: 327991
IP address blocks: 102.64.32.0/20 maxlen: 20
102.64.32.0/21 maxlen: 21
102.64.40.0/21 maxlen: 21
102.129.48.0/20 maxlen: 20
102.129.48.0/21 maxlen: 21
102.129.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Validity
Not Before: Mar 6 13:13:42 2026 GMT
Not After : Mar 6 13:13:42 2036 GMT
Subject: CN=69aad30a-5d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:51:92:05:56:60:91:7f:5e:9e:03:1d:4d:
16:ba:3b:0c:37:45:6d:ff:35:54:17:00:b6:0e:54:
27:3e:d9:e8:ca:fd:a7:2b:99:c2:e3:8d:72:f4:7f:
74:79:68:22:2f:11:77:0e:23:7a:0e:b1:47:0e:33:
06:30:da:9a:7c:ed:e8:1c:ae:01:c3:d7:ab:0c:8a:
e4:a3:b2:31:7f:75:13:a2:20:2b:64:df:9d:63:0c:
46:f7:11:50:75:07:1f:53:6d:3c:bf:e7:8c:66:31:
ce:35:90:8b:7e:90:03:fe:26:5d:f8:bb:c9:ab:c6:
df:60:00:8f:89:82:af:c8:44:b5:9c:e2:50:48:2f:
ec:95:b9:ce:75:eb:a8:f3:44:cb:b2:50:07:8f:d0:
7a:0a:93:7c:5b:b2:33:8a:4e:83:99:7a:f3:8c:b2:
7a:21:a4:5e:bf:1c:fc:3a:e9:b1:fd:c0:15:e7:5d:
ab:0b:ee:4c:7a:cd:8c:5d:2b:b2:3a:a2:07:a6:b6:
2c:1e:6d:b4:79:79:d1:07:fa:8e:ee:03:a3:b4:2a:
14:1b:e5:46:33:6d:5d:e2:91:0f:ab:59:14:3c:4d:
1c:20:e3:4a:ab:75:eb:ec:c0:10:a5:54:59:fb:5f:
54:61:f5:63:db:ef:96:b5:b0:61:c9:d3:cb:87:88:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:23:E8:8E:52:9E:01:C8:78:40:B2:BA:FF:8F:E9:EC:F3:65:4B
X509v3 Authority Key Identifier:
keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/4E666882195E11F18BD2B3F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.32.0/20
102.129.48.0/20
Signature Algorithm: sha256WithRSAEncryption
50:8b:62:25:49:bd:7a:65:41:35:cf:e3:d9:a5:a5:1f:9e:bf:
fd:5c:69:f3:fe:18:25:da:1f:06:6e:85:e2:bd:a3:f3:35:00:
f1:4e:c8:ce:d1:08:a3:19:fb:ca:43:04:00:25:f4:b8:64:30:
cf:33:34:ee:1b:af:a6:7d:4b:6d:a2:3e:96:93:bf:8e:b0:4e:
2a:8d:54:38:83:59:7b:a9:59:f3:c9:25:32:70:5e:ff:58:0d:
80:9a:98:f7:31:77:9a:15:e7:a2:c1:52:a7:29:99:0c:12:ed:
29:83:d8:ae:ff:60:48:78:99:54:82:b0:a4:64:c8:fb:8e:ef:
d4:b5:ac:b6:79:0d:9a:3f:cc:a6:ef:c7:72:28:21:31:47:b2:
16:24:8c:df:ac:d4:a5:ca:05:10:5a:af:a0:74:72:18:b7:90:
8f:db:e7:fa:0e:a0:ad:09:63:80:e2:0b:89:9e:9f:37:4c:c6:
d5:0b:a6:27:d8:44:74:5d:2d:c1:c8:98:a4:5b:9c:73:f4:bf:
e1:17:d8:72:95:55:e5:07:8f:e3:a9:f0:a8:98:a3:21:90:cb:
0e:09:c4:79:a6:74:41:c0:60:b7:8d:db:0e:01:aa:3f:f8:91:
89:42:61:1e:d0:14:13:4e:e1:59:13:a3:bf:f3:25:17:a2:7d:
5d:6e:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:04 2026 by rpki-client