Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C25C0D2A1BC811F1B18E4BBCDAE4EC9C.roa
File: C25C0D2A1BC811F1B18E4BBCDAE4EC9C.roa (raw, json)
Hash identifier: hhR0xPXrEMKwJdPRYu4lOTroB0RsLqhZXni+oqKK3dE=
Subject key identifier: 68:85:75:FA:91:66:11:81:76:FD:45:DE:E5:22:90:E9:25:45:7D:24
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 073E
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C25C0D2A1BC811F1B18E4BBCDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 15:00:50 +0000
ROA not before: Mon 09 Mar 2026 15:00:45 +0000
ROA not after: Sun 09 Mar 2036 15:00:45 +0000
asID: 327901
IP address blocks: 102.141.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 15:00:45 2026 GMT
Not After : Mar 9 15:00:45 2036 GMT
Subject: CN=69aee0a2-cd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:e1:3a:79:9f:80:a3:d2:8b:e4:62:e1:ff:
9a:59:15:2c:05:72:d2:83:9e:9e:87:66:90:74:33:
96:28:b8:44:c9:a2:17:22:43:b3:95:8f:d7:dc:e3:
e2:1e:9f:fe:13:c2:50:ac:0d:9d:be:e6:72:eb:fd:
16:29:c9:0e:75:ab:14:43:48:d8:db:ca:59:ba:0c:
0c:d8:83:db:45:fc:d1:1f:ea:d3:4e:02:90:9e:d9:
74:57:e8:54:bc:1d:d8:4c:9b:f5:37:3d:d3:d1:71:
d2:d1:fc:a0:48:9d:b7:c1:9e:e4:89:19:1f:eb:39:
f6:ba:95:c2:24:7f:a7:d0:11:34:9c:4b:50:7b:58:
d2:89:e8:c0:d8:0a:35:07:20:90:d3:2a:ca:e5:72:
86:8b:c9:4b:ea:05:3e:d2:12:95:a3:6c:6d:f9:7b:
25:4a:6a:a4:8b:b1:cf:13:39:a4:01:4f:6b:ab:33:
f0:61:57:54:96:f2:69:88:3a:ec:25:c6:3d:28:eb:
5c:5d:01:0d:97:f0:1c:30:c4:b7:20:2d:21:33:5b:
b1:12:b6:f3:fe:34:3c:f5:4c:96:f8:71:f3:da:f7:
df:34:16:fc:6d:7a:3d:0e:38:a9:a8:e3:f4:ec:7b:
7a:fa:d5:3b:76:18:d3:05:32:af:cd:c1:18:b2:43:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:75:FA:91:66:11:81:76:FD:45:DE:E5:22:90:E9:25:45:7D:24
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C25C0D2A1BC811F1B18E4BBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.141.128.0/18
Signature Algorithm: sha256WithRSAEncryption
29:99:b2:45:63:67:c8:fc:f9:c6:47:74:a2:34:c1:4d:fa:28:
81:ad:d5:b2:94:2e:b8:79:4b:80:5c:62:fc:c6:c1:db:16:46:
98:24:bb:13:1d:ad:4b:45:75:44:4b:2c:77:0e:60:ec:26:ae:
5f:46:f3:ef:c7:f3:f9:7b:fd:b2:0c:76:44:10:7d:4c:4c:21:
8f:01:30:84:88:cd:1e:1a:2c:d3:7f:7a:eb:7e:4f:48:58:da:
b2:53:94:9f:f2:f2:3a:d5:3a:fa:a8:04:81:bd:bd:2b:b6:1a:
3c:af:0c:7a:5e:1f:b5:0f:84:63:40:c9:37:ff:f9:0d:37:0c:
35:7f:74:88:5e:ae:7b:85:d7:9e:0e:13:bf:29:d1:88:30:fe:
d6:cd:99:8a:28:7c:a0:90:a5:c9:ae:67:bd:d3:d1:14:62:95:
c7:e8:16:3e:bd:9b:08:ac:6b:53:99:72:8a:09:31:62:41:07:
98:37:66:5c:7e:2c:11:0c:b8:fa:fd:42:6b:2c:66:43:e8:a9:
8e:3a:09:14:42:4a:8c:f2:23:3d:5d:f7:38:41:26:0a:9c:bc:
c6:cb:24:a1:3e:d3:65:d6:b7:fe:b3:59:88:c5:4f:ae:02:17:
af:8e:c0:56:41:2a:c4:07:f6:ef:93:f0:c5:35:e9:3a:4f:17:
7f:9a:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:24 2026 by rpki-client