Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/56B5035C1BC711F1A35E3FB4DAE4EC9C.roa
File: 56B5035C1BC711F1A35E3FB4DAE4EC9C.roa (raw, json)
Hash identifier: aXUTElSJyN5cSYnyAIiKlRyZTDYDil4DI7ezC6RNcas=
Subject key identifier: 2B:C3:7F:26:EA:D5:CA:A1:1B:DF:AA:C2:8D:2F:60:F6:E0:23:CA:EC
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 072D
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/56B5035C1BC711F1A35E3FB4DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 14:50:40 +0000
ROA not before: Mon 09 Mar 2026 14:50:35 +0000
ROA not after: Sun 09 Mar 2036 14:50:35 +0000
asID: 327901
IP address blocks: 102.218.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837 (0x72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 14:50:35 2026 GMT
Not After : Mar 9 14:50:35 2036 GMT
Subject: CN=69aede40-1ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:cf:55:62:cd:ed:66:4f:fc:3b:26:38:41:
20:8a:d0:09:85:c9:5a:12:70:5f:7e:a6:d1:05:67:
9b:6d:27:0a:95:5c:1e:18:f4:34:9e:89:ca:e1:22:
41:d1:8f:85:a9:8b:e2:2b:b1:bc:aa:73:3c:f0:b2:
4d:b7:43:43:a6:04:02:25:f5:82:40:71:4e:ef:0c:
57:d9:97:ac:91:60:22:3d:75:72:bb:70:c4:31:00:
8d:7e:7d:bf:6d:b2:ab:e1:22:7e:f3:91:56:3f:de:
57:93:d7:8b:70:36:ab:1b:2a:e6:6d:37:b7:98:cb:
4b:d9:10:6e:0e:c3:19:bc:b7:13:e6:7c:b0:f4:96:
99:fd:42:10:f6:d3:c3:24:90:62:eb:cb:e7:5f:c7:
ac:f3:5d:91:4a:cd:96:4b:1d:94:bf:32:0e:1f:54:
28:21:47:1c:37:8e:49:bb:87:59:85:66:a7:06:fb:
4e:11:fc:d9:4d:21:1d:00:23:74:9c:1e:9d:1f:b0:
fa:b9:6c:bd:6d:be:32:5d:4c:01:17:1f:a6:f5:18:
7f:5e:bb:7c:58:a7:cc:a1:45:f7:55:26:ef:ca:f0:
e3:66:e7:65:46:49:f7:a5:de:e4:71:7f:6e:0d:9b:
69:b3:69:6a:89:49:77:d9:c9:32:2a:e6:d4:7b:1b:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:7F:26:EA:D5:CA:A1:1B:DF:AA:C2:8D:2F:60:F6:E0:23:CA:EC
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/56B5035C1BC711F1A35E3FB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.240.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:ad:6d:23:56:1b:62:98:cf:cb:48:3c:4f:25:ec:e5:56:8c:
ed:4e:4c:03:39:b5:74:d8:4b:07:02:17:b9:b8:d2:a1:c0:96:
71:b2:ad:83:c7:e4:0f:ec:7b:bc:a8:e8:94:ec:00:55:ab:2d:
4c:1c:92:d5:cf:0e:6c:40:89:6e:96:bf:ac:89:d3:7b:41:a9:
8f:94:26:8e:25:ae:9f:2c:42:ad:e6:c5:a4:89:b0:e1:e7:5e:
f1:97:fe:09:55:62:8d:1f:4a:75:dd:6c:14:b7:27:9d:87:6c:
e4:c0:24:64:73:a1:00:d6:4c:35:b4:4b:68:b9:c2:ab:d8:09:
b9:ad:20:1b:b6:c8:ed:59:6a:be:37:aa:f1:b6:f5:d3:a8:ec:
d8:cf:31:03:45:8e:db:d4:e5:ac:e5:46:f9:a4:07:dc:68:e1:
88:56:c3:df:9b:36:ea:2f:46:71:0a:e8:7a:64:7b:5a:5d:6b:
d7:38:34:31:8e:79:2a:96:aa:88:e9:a3:40:15:02:0c:1b:2c:
4b:08:28:00:80:c1:31:18:67:88:72:75:58:3a:46:c3:10:1b:
07:e2:03:08:44:a7:bf:98:e5:66:d9:83:d7:3d:aa:84:6d:33:
62:86:f1:0b:20:97:8d:58:7f:8c:bc:d5:e6:72:4a:40:e1:ee:
cc:6a:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:47:50 2026 by rpki-client