Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B2FA3840288211F1BDB7ECF4DAE4EC9C.roa
File: B2FA3840288211F1BDB7ECF4DAE4EC9C.roa (raw, json)
Hash identifier: 5/ROpgAZwkQdj2BqP/MW/qlEH7eR3MDQUUaLt+Ee2ao=
Subject key identifier: 03:E5:6D:37:35:68:28:C3:F8:54:9C:8C:FC:2B:79:15:65:C9:58:C1
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 075B
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B2FA3840288211F1BDB7ECF4DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 19:42:04 +0000
ROA not before: Wed 25 Mar 2026 19:41:59 +0000
ROA not after: Tue 25 Mar 2036 19:41:59 +0000
asID: 37645
IP address blocks: 102.130.192.0/19 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Mar 25 19:41:59 2026 GMT
Not After : Mar 25 19:41:59 2036 GMT
Subject: CN=69c43a8c-6d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:12:62:a5:b9:84:eb:70:41:8d:cf:0b:81:c0:
4e:3d:10:36:04:07:e7:bf:63:7a:7c:9c:8f:90:d8:
4d:45:6a:a3:72:62:3f:77:4f:22:e1:25:bb:85:1c:
09:5c:90:05:cd:f5:b1:71:ce:dd:c4:ad:fc:dd:b5:
7e:49:03:67:3d:32:ad:25:9b:8a:59:f6:90:36:ad:
e2:76:12:61:dd:00:21:97:60:83:30:97:4c:89:5a:
9e:5f:f6:fb:27:42:ea:30:de:b7:dc:71:fc:92:fb:
59:a3:89:54:55:51:df:30:c0:f1:95:91:94:48:00:
20:c3:06:b0:ef:85:fc:0c:b5:87:4d:0f:30:4d:c6:
6d:6c:4f:58:02:6c:c7:24:78:85:78:d0:61:ba:7c:
ce:1c:f3:dc:c4:e8:e1:2b:09:f6:ae:a0:5a:72:2b:
db:70:a4:46:3a:b3:d8:5b:b1:04:12:59:a5:cf:ee:
04:7c:55:84:69:f2:87:21:9b:04:e9:15:2d:22:55:
62:63:83:1e:57:76:66:3b:5c:b3:6c:73:19:3d:56:
e8:2d:40:8c:f1:79:2b:df:d5:20:f9:51:cc:fb:17:
bd:12:6b:42:04:20:41:5e:d5:30:21:c5:7c:90:e1:
b0:0e:7d:ca:ff:a8:9c:f8:43:e0:75:e5:ad:0b:5d:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:6D:37:35:68:28:C3:F8:54:9C:8C:FC:2B:79:15:65:C9:58:C1
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/B2FA3840288211F1BDB7ECF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.130.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:b4:0e:be:4d:f9:86:d3:c7:13:c9:a2:56:40:d7:cc:07:8a:
8a:89:c5:71:8f:1a:53:c7:06:b2:46:e5:29:ec:d2:a2:95:68:
0b:31:a5:ab:a3:03:ff:fa:e9:b4:4c:7b:cc:01:23:ff:45:ad:
d2:db:13:85:67:64:d5:ba:59:c6:db:f1:c6:47:3b:47:32:15:
69:e3:72:79:83:bc:cd:39:48:f6:2e:07:cc:cb:13:2f:1a:80:
3d:09:55:11:6d:05:23:87:d2:7c:f9:7d:57:c9:4c:c3:88:e1:
74:a9:f7:01:80:a0:ca:2a:4a:68:bc:9a:e2:cb:47:a4:da:19:
e3:8e:b8:43:a8:97:df:fa:d4:46:10:a5:19:6c:5c:9d:c0:51:
00:32:b1:c3:a2:7c:4f:be:46:4c:36:79:59:03:53:31:0e:c2:
54:ad:7b:76:ea:19:b4:17:fd:fd:ed:e0:9c:c2:b9:b0:37:7e:
f3:1f:3c:bb:f3:bc:0d:10:76:bc:25:4c:a2:88:66:59:80:bb:
6a:b2:64:ef:18:f1:5b:99:6a:f0:e2:ab:69:41:cd:8e:6b:0e:
6d:1b:e5:ae:5b:11:24:38:df:21:f9:29:ab:3b:32:90:7b:d8:
7c:b2:6c:af:9e:6c:8a:a0:ed:85:1d:73:f8:00:0a:f8:d6:3d:
00:80:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:09 2026 by rpki-client