Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/71CB76C01BC811F1B4BB27BADAE4EC9C.roa
File: 71CB76C01BC811F1B4BB27BADAE4EC9C.roa (raw, json)
Hash identifier: /Ve0RNx5Jc+k/t/SEN9lIJCeKWJyIR7/KUHPuJ/2upc=
Subject key identifier: 47:B5:28:1A:B3:3A:32:91:22:D8:C0:F3:D4:3D:D8:BB:CC:43:A1:3C
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 073B
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/71CB76C01BC811F1B4BB27BADAE4EC9C.roa
Signing time: Mon 09 Mar 2026 14:58:35 +0000
ROA not before: Mon 09 Mar 2026 14:58:29 +0000
ROA not after: Sun 09 Mar 2036 14:58:29 +0000
asID: 327901
IP address blocks: 102.215.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 14:58:29 2026 GMT
Not After : Mar 9 14:58:29 2036 GMT
Subject: CN=69aee01a-b4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:b1:1a:f2:8c:af:a9:0d:6f:fd:75:89:36:
0e:84:d8:c7:47:20:90:56:45:9c:ec:f8:78:78:d7:
a1:1c:dd:11:61:20:26:64:0d:45:55:85:df:32:67:
67:a0:6e:87:a0:3c:83:c6:e4:96:63:ad:3e:24:40:
5e:8e:75:10:bb:08:3d:aa:3c:22:cf:f8:e8:c1:a3:
11:8e:4d:b9:af:22:e7:72:d4:ef:87:6f:4c:39:4d:
8a:d0:54:84:b9:76:9d:f0:36:e2:3b:25:ee:20:dd:
14:c7:60:34:d8:c4:77:4f:1a:b9:f6:a6:07:fa:2c:
ad:69:12:59:12:bb:53:5e:f4:be:3d:c4:1c:73:0c:
29:4e:b6:4f:ef:13:84:0b:64:96:af:03:c0:31:0e:
8f:c1:0d:13:91:67:18:41:32:18:b4:a7:e9:82:52:
17:18:2f:f0:87:bb:be:2d:2f:d7:86:bc:78:80:cb:
3e:f1:02:00:d7:59:2c:c2:0c:27:2b:5c:28:20:10:
0c:38:09:5d:c9:e3:fc:ed:7d:17:c8:f1:c6:41:0f:
6f:47:41:4f:bd:80:65:4d:4f:8b:e3:35:8d:8e:e8:
48:3b:7d:5d:0d:91:12:37:f2:0b:bf:75:7f:6c:ee:
74:65:6a:b2:c9:9d:9f:74:a0:ba:63:ce:5b:80:48:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:28:1A:B3:3A:32:91:22:D8:C0:F3:D4:3D:D8:BB:CC:43:A1:3C
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/71CB76C01BC811F1B4BB27BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.100.0/22
Signature Algorithm: sha256WithRSAEncryption
31:cf:6e:4a:4e:aa:93:45:fd:c8:63:8e:82:d6:97:5e:01:16:
09:4f:72:cb:4f:52:b4:90:e8:13:30:9f:c8:ce:89:22:ab:a8:
7f:8d:c2:37:2a:aa:8b:62:e4:cb:80:d1:04:5b:33:fb:f2:48:
d0:a6:dd:91:ab:79:b4:37:5e:e3:89:eb:ca:1f:73:6d:fc:85:
c7:3e:05:ab:1f:09:88:72:4f:6a:c9:d9:dd:94:8d:78:9b:08:
f3:fb:54:89:47:f7:03:82:c3:0d:9c:82:f4:92:85:02:14:6d:
8b:ce:f4:05:d6:05:45:f9:b8:8a:e8:77:83:f9:7c:48:76:65:
85:4e:99:93:24:63:31:f4:12:8a:ac:c5:5f:dc:b9:03:20:cc:
97:72:0e:6e:f0:4a:49:2d:a1:80:33:a8:92:f8:4e:ba:4a:2e:
b0:fc:ee:7a:ad:6c:c7:e7:06:08:92:2b:61:03:e6:63:05:a1:
3e:bc:8b:69:95:c8:00:24:ee:e9:7c:01:e7:9a:50:c6:7a:9e:
2a:d6:93:5a:db:78:db:6c:40:ed:96:b2:fa:7f:0c:c4:15:d9:
95:34:38:d9:7e:cc:18:96:ba:af:b2:9e:a0:c4:67:c4:fe:2d:
17:01:82:26:c6:4d:9b:62:7f:5c:2f:2d:13:90:1c:e8:02:ec:
d0:d1:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:49 2026 by rpki-client