Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/886DFE761BC711F1B5905FB4DAE4EC9C.roa
File: 886DFE761BC711F1B5905FB4DAE4EC9C.roa (raw, json)
Hash identifier: wo5lir3SPXlykEy+v0a16oO7+HgzN0guf6Y22e8cK+8=
Subject key identifier: F4:D4:74:16:BC:C7:00:E4:0F:73:76:71:B3:8B:95:17:1B:F5:28:B2
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 0730
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/886DFE761BC711F1B5905FB4DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 14:52:03 +0000
ROA not before: Mon 09 Mar 2026 14:51:58 +0000
ROA not after: Sun 09 Mar 2036 14:51:58 +0000
asID: 327901
IP address blocks: 102.217.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 14:51:58 2026 GMT
Not After : Mar 9 14:51:58 2036 GMT
Subject: CN=69aede93-3db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:14:0b:b0:ce:74:38:bc:fb:fd:13:e1:d3:
06:8b:90:82:fd:fc:a0:2f:a2:3c:b8:1e:0c:7b:c3:
1b:45:5b:e6:12:a1:b0:3f:0f:6d:05:f6:a1:4e:fe:
a2:4b:8b:65:15:c1:ba:28:76:6c:5d:3a:3d:71:cb:
6e:cf:62:c4:0f:81:8c:4f:e4:fc:ab:1e:44:4e:b8:
38:e1:a3:d9:29:e1:7d:5b:4b:32:34:ed:7d:67:dc:
11:9c:84:e0:f3:49:cc:29:2f:ce:e8:a5:b8:7e:80:
c3:c5:b2:91:ca:2f:f5:1a:dd:f3:14:8c:22:87:a0:
21:ae:2c:a7:02:a0:55:ca:38:18:14:d4:51:a3:ca:
89:e6:1a:62:88:6c:7b:d6:8e:6d:6d:30:4a:33:8c:
77:92:f2:83:ca:73:4f:8b:73:d3:87:c7:b9:96:c5:
6f:2e:17:06:59:ff:d7:28:a3:d1:04:14:5d:64:a3:
9b:3f:24:82:76:2e:43:6e:27:47:4e:75:41:52:44:
3d:c7:82:2e:0e:4d:0a:f0:6b:3d:a3:8d:c1:d1:c9:
b4:cf:93:61:db:69:5b:7c:ad:87:38:89:10:80:d5:
e4:e2:c0:f1:90:06:92:1c:89:f1:e1:50:2b:71:4f:
b0:e6:fc:b9:4a:02:e5:df:73:a4:ae:0f:6f:39:16:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:74:16:BC:C7:00:E4:0F:73:76:71:B3:8B:95:17:1B:F5:28:B2
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/886DFE761BC711F1B5905FB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.224.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f8:26:8f:87:ea:22:76:d9:2c:69:0a:a6:10:5d:4c:f5:3e:
7f:5d:b4:a0:1a:6d:ba:bd:9f:9a:d7:35:31:49:f5:82:25:b9:
2b:60:7b:f2:aa:45:72:41:51:f2:17:a6:80:cc:0b:98:52:01:
07:d2:2e:68:98:98:5d:98:2d:31:e3:0c:03:b2:c2:08:b7:42:
1e:db:12:bf:2b:1b:36:30:69:98:df:ed:8c:07:3d:18:ff:88:
c5:e0:76:f1:e5:70:c0:a6:68:5f:1c:f6:b1:80:0c:52:32:18:
81:83:02:22:5c:bb:31:14:c2:2c:18:fc:7c:53:0e:93:28:9e:
2f:0d:f2:12:98:f8:41:97:a0:53:d0:30:47:21:e6:5e:6b:71:
6d:5c:19:a0:d5:51:77:73:8e:57:e7:c3:32:a2:ba:6f:4c:a8:
63:3c:a9:0d:dc:24:47:8c:a5:62:ed:4e:91:00:ec:dc:9e:ba:
9b:a2:fa:94:5c:44:38:30:cf:7b:d9:8a:29:98:bb:60:c7:11:
97:90:e7:b5:65:c9:91:88:8f:30:cf:79:56:63:c3:5f:64:d1:
02:f9:aa:a2:d9:56:7b:1a:7c:fc:66:74:2a:66:4c:16:d9:39:
ca:2c:39:dc:29:4b:a7:77:4a:3f:22:41:1a:d5:c4:b7:84:ee:
65:68:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:15 2026 by rpki-client