Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/2E8EE0041BC811F19A4361B8DAE4EC9C.roa
File: 2E8EE0041BC811F19A4361B8DAE4EC9C.roa (raw, json)
Hash identifier: 2E5plXNAAEewjlnsnzHq/4cM5qkp3EtovdNQ8R5EFBs=
Subject key identifier: 14:F2:80:DF:CA:45:BA:C4:3D:90:4F:0B:47:C6:F7:20:B5:43:09:F4
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 0738
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/2E8EE0041BC811F19A4361B8DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 14:56:42 +0000
ROA not before: Mon 09 Mar 2026 14:56:37 +0000
ROA not after: Sun 09 Mar 2036 14:56:37 +0000
asID: 327901
IP address blocks: 102.216.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848 (0x738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 14:56:37 2026 GMT
Not After : Mar 9 14:56:37 2036 GMT
Subject: CN=69aedfaa-0796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:67:08:70:42:d2:12:42:79:8a:d9:ab:c7:
ae:14:12:26:70:66:9b:13:9a:a2:67:b1:ba:07:a4:
0d:64:be:23:64:84:a2:cc:d3:50:aa:f5:86:c8:50:
a0:57:86:f9:f7:d8:12:93:a7:9f:ad:8d:49:c4:01:
3d:41:50:e6:a0:10:8d:68:14:c2:3f:1b:f8:c1:f9:
bd:7b:41:ea:87:00:0f:4f:be:bd:3d:80:7c:72:14:
74:20:d7:11:18:03:c7:fe:ed:bc:13:63:07:c1:9f:
6c:7a:b5:b0:1d:7d:4e:98:e0:19:e5:80:61:de:44:
d4:3b:ac:f4:16:13:ac:a4:9b:2d:87:d8:fd:77:99:
3f:b5:9a:e7:07:66:04:90:9f:45:3c:0d:8a:d4:77:
e1:61:eb:2a:1d:66:b5:8d:d0:3f:d2:66:6b:4f:97:
c7:10:d1:14:84:70:30:cc:ff:fe:19:fe:d3:6d:5b:
00:fe:15:bc:a4:82:9f:8a:a7:a0:34:52:91:d0:1c:
a6:03:5a:22:2b:f5:36:c0:79:67:70:87:4d:7e:fa:
6e:2b:7b:ba:5e:32:66:a8:1e:31:e6:14:f8:98:03:
97:7b:7f:79:8b:46:16:ec:c9:d9:b2:7b:2f:b1:fb:
8b:f5:4b:3f:bb:3c:eb:26:10:96:03:44:da:29:9e:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:80:DF:CA:45:BA:C4:3D:90:4F:0B:47:C6:F7:20:B5:43:09:F4
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/2E8EE0041BC811F19A4361B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:08:2b:b4:d5:49:8b:2f:b3:d6:cb:31:25:c8:60:a6:bf:f5:
38:f7:97:23:d1:59:00:75:39:cd:f0:6a:9b:25:0e:1a:36:14:
9c:fa:5d:b1:7b:b1:2d:31:87:a1:d6:07:66:46:a1:00:d1:90:
c3:52:39:dc:69:1b:d0:28:95:41:3f:c5:8f:3e:43:dd:b9:0c:
d4:fe:dc:42:b2:32:68:b8:a5:56:8c:fe:bf:06:53:e1:c2:1f:
b0:f4:de:77:6b:b2:e8:99:79:d4:76:2b:b9:0a:d2:95:83:07:
e0:35:2d:a8:d5:b5:74:09:80:b9:84:3c:28:4c:a8:31:b1:82:
02:c3:c0:a5:cd:26:e3:24:a7:0d:4f:58:1d:ea:ea:b6:88:32:
b9:b4:02:46:ec:ca:14:74:45:5b:74:04:56:73:5f:39:89:6b:
a0:1b:55:51:fe:e9:00:c0:fe:c9:97:b2:1f:47:84:02:c9:2e:
27:0c:68:02:18:dc:a3:35:d2:aa:cd:18:68:9c:69:69:df:b4:
f7:28:b8:a3:5d:4a:ef:95:5e:7e:fd:77:4b:57:91:f4:cd:55:
f7:7a:91:a4:06:eb:4d:95:f1:e6:f3:15:86:79:20:a6:4f:a7:
4d:28:15:2e:5b:32:6b:d2:a3:30:4d:7b:0a:58:2e:87:e8:ca:
64:75:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:47:50 2026 by rpki-client