Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/8DB94274288211F1A74615F3DAE4EC9C.roa
File: 8DB94274288211F1A74615F3DAE4EC9C.roa (raw, json)
Hash identifier: B0UVviCFUnADjgeCgBwbY+DmzXyTTHx6vlKGunTI9IM=
Subject key identifier: 78:44:79:7E:86:A7:37:54:5A:3D:4D:7B:12:11:54:5C:2F:F7:CD:53
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0759
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/8DB94274288211F1A74615F3DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 19:41:02 +0000
ROA not before: Wed 25 Mar 2026 19:40:57 +0000
ROA not after: Tue 25 Mar 2036 19:40:57 +0000
asID: 37645
IP address blocks: 154.118.192.0/19 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Mar 25 19:40:57 2026 GMT
Not After : Mar 25 19:40:57 2036 GMT
Subject: CN=69c43a4e-203c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:91:34:d9:88:a3:6c:f7:ee:b4:fc:6c:19:
3c:a9:43:c9:8a:8b:1f:42:07:b0:64:e9:20:a5:78:
7a:84:61:5b:c0:88:8b:4b:23:e3:2f:12:1c:8b:19:
15:80:7e:f3:01:09:2e:38:1b:db:bb:43:33:65:d7:
19:72:c3:5e:59:4a:7b:f7:c1:fe:09:1f:fe:31:f6:
ce:53:39:31:57:6f:54:22:75:b5:f8:54:b6:d1:06:
85:3f:b1:12:2e:c2:d0:01:3c:37:79:8a:fa:49:27:
a9:ba:66:3f:d6:5a:36:37:b0:9f:4d:08:2e:a7:d0:
4e:32:00:a5:1c:2c:09:51:5c:3a:52:ca:4a:e0:8a:
cf:01:5f:46:05:1a:8c:b0:e4:1e:23:a5:11:25:60:
fd:77:cd:fb:ac:bc:42:56:aa:aa:d6:b5:3b:d2:93:
7b:57:3f:2f:8d:f0:0b:e2:51:8c:b3:d2:52:21:f4:
fb:46:4e:c9:38:81:bc:e8:1d:21:e3:e4:f7:dd:2e:
68:34:91:da:58:32:d8:f6:5d:07:0d:07:06:37:d2:
e4:ec:b9:cb:1f:12:d8:93:66:23:95:b1:c6:89:7a:
c7:4c:37:bc:8a:0b:7a:8e:b9:96:3a:3e:0a:ba:ce:
12:d6:ed:44:4f:cb:32:c3:bc:34:f1:10:ac:01:5f:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:79:7E:86:A7:37:54:5A:3D:4D:7B:12:11:54:5C:2F:F7:CD:53
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/8DB94274288211F1A74615F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.118.192.0/19
Signature Algorithm: sha256WithRSAEncryption
14:cc:67:37:0b:ae:a3:ed:95:5d:9e:78:64:cb:44:c9:90:12:
33:fb:23:71:b7:b1:9c:5d:6e:ec:ac:62:d0:db:f8:82:7b:21:
0b:7d:b9:48:23:e7:aa:ab:71:d9:60:d5:72:7c:c5:45:02:3b:
6e:59:00:38:ac:e4:01:de:fb:68:07:5c:57:ab:1d:14:e1:58:
70:89:df:a9:43:fa:30:9a:0d:46:77:ae:34:3e:55:9d:a1:21:
ac:0a:2b:41:1c:17:47:8e:b6:46:4a:77:28:87:60:db:e8:79:
32:cf:82:b0:ec:ea:e0:dd:3b:ac:e1:24:ff:9c:26:45:a8:b0:
6f:94:fd:1e:55:61:4d:02:f1:84:c3:43:74:97:06:6f:fb:a5:
77:47:a5:75:3d:36:12:c6:e7:ad:e8:d8:2d:f7:c8:c1:a5:c8:
9c:d4:51:dd:35:e6:d1:9a:fc:d8:ea:d5:f4:64:15:c4:1e:88:
13:95:22:f5:f9:58:36:cc:4a:a8:82:b7:14:42:98:fe:f5:d0:
60:6a:9f:25:cf:06:ea:d7:71:99:1e:63:50:31:bb:d4:86:45:
29:ce:8b:11:73:39:5a:e3:a0:87:6c:44:56:91:d2:68:c9:95:
a0:6f:e1:c9:e1:c9:75:8b:a3:18:8e:28:06:ce:48:78:01:8c:
22:f5:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:22 2026 by rpki-client