Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/E4EC7E3E1BC711F184492DB6DAE4EC9C.roa
File: E4EC7E3E1BC711F184492DB6DAE4EC9C.roa (raw, json)
Hash identifier: dJlPMXVObEwo3AvwV2RtE/DkyyhLg0pXaDBv/53yQcI=
Subject key identifier: 0C:5F:2F:7D:82:52:4A:E5:43:18:8F:B7:95:E8:49:46:E0:8E:A6:04
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 0735
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/E4EC7E3E1BC711F184492DB6DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 14:54:38 +0000
ROA not before: Mon 09 Mar 2026 14:54:34 +0000
ROA not after: Sun 09 Mar 2036 14:54:34 +0000
asID: 327901
IP address blocks: 102.217.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 14:54:34 2026 GMT
Not After : Mar 9 14:54:34 2036 GMT
Subject: CN=69aedf2e-ebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:25:fa:25:97:45:15:34:15:ec:d4:38:81:
e4:a1:fa:58:80:eb:ff:8a:68:91:2d:fe:d6:83:8c:
b3:b7:24:ab:91:7d:20:26:59:88:c6:eb:48:65:c3:
62:86:77:79:08:fb:0d:b2:79:8f:c9:70:5e:78:27:
58:7a:d0:44:c1:ae:96:3d:18:ad:d1:1c:97:11:b5:
eb:ff:31:52:39:bc:ff:ef:3d:5b:26:65:25:0d:3f:
70:73:4e:1f:2b:75:77:aa:66:93:fa:01:73:d9:a0:
6e:0b:fc:d5:cf:e9:5a:38:fb:c5:50:0e:1d:1e:20:
7c:ab:2c:ed:a5:6e:87:9d:e1:ea:35:27:c7:af:25:
22:0c:ff:24:41:88:ca:ee:e3:3e:b8:0c:89:71:2d:
a1:b5:e8:56:4c:f4:06:58:ae:1e:69:d3:61:e2:f9:
e5:9f:09:1f:e2:fc:ea:0d:7a:a6:8d:00:f2:99:b8:
77:52:60:1b:85:49:be:91:51:37:dd:1d:ea:14:c1:
45:36:c0:11:2f:67:87:19:96:fa:a7:5f:5c:59:b6:
c7:b8:a2:17:df:8c:3d:bf:0b:bb:c5:4b:46:b6:0d:
2d:27:8d:9e:d8:4d:b7:0e:b1:50:0a:1c:23:12:c7:
a0:9a:c4:d2:ed:88:a1:5c:c6:e3:c2:f9:7e:55:89:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:2F:7D:82:52:4A:E5:43:18:8F:B7:95:E8:49:46:E0:8E:A6:04
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/E4EC7E3E1BC711F184492DB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:6f:d3:23:6e:2d:6d:48:f7:16:dd:47:4b:3b:97:6f:b9:15:
8f:94:df:91:d6:de:d6:f6:c1:b0:90:13:41:2a:6e:ca:46:9f:
23:9d:71:5c:1e:e2:cf:af:96:7c:8b:5d:dc:1e:eb:c7:c5:ac:
4a:01:72:01:f3:89:c0:69:c9:59:c8:36:f9:5b:7f:85:6b:58:
b4:a1:9e:10:71:8a:be:ff:9c:ea:67:6f:e6:ef:ba:3e:ea:b5:
ca:59:cc:74:97:07:cc:2e:92:bb:53:99:5a:eb:fb:e4:15:01:
34:82:e4:1c:df:21:8f:fe:ad:c8:51:a7:b1:e0:5a:6e:f7:6e:
10:18:36:5a:64:5b:25:b8:a6:cb:43:cd:d2:74:62:e4:2f:22:
65:aa:e2:21:95:de:a0:70:4e:bc:72:2d:1c:0f:da:9a:1e:dc:
8d:b3:2c:f1:1f:81:56:f9:ac:72:83:bd:64:f6:96:f4:69:07:
b2:59:9c:74:30:04:26:eb:79:26:d9:d1:e0:e1:f3:52:76:43:
32:17:ce:ee:65:b6:ad:b0:ec:44:07:66:2c:32:97:5c:4c:9f:
87:16:26:d7:c6:10:e4:1b:9a:55:c9:08:47:48:8a:8c:ee:51:
3f:16:11:26:da:da:b2:42:27:71:17:db:1f:70:3f:3f:be:4e:
7c:39:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:29 2026 by rpki-client