Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/4A5868D04DD911F1ABB268C4CE1D38B0.roa
File: 4A5868D04DD911F1ABB268C4CE1D38B0.roa (raw, json)
Hash identifier: u0pAqj+9c5bW6sNCCZBPt13ns/bNVxnzw0j3JVWmkPI=
Subject key identifier: 03:DB:D7:14:44:3F:70:4C:EB:8F:57:7F:63:E7:A5:C1:A6:B1:C1:E1
Certificate issuer: /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial: A4
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/4A5868D04DD911F1ABB268C4CE1D38B0.roa
Signing time: Tue 12 May 2026 08:05:08 +0000
ROA not before: Tue 12 May 2026 08:05:03 +0000
ROA not after: Sun 09 May 2027 08:05:03 +0000
asID: 14618
IP address blocks: 102.208.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 08:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Validity
Not Before: May 12 08:05:03 2026 GMT
Not After : May 9 08:05:03 2027 GMT
Subject: CN=6a02df34-4a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:c3:bf:80:e8:54:48:2d:05:51:8d:00:92:
10:1b:b4:d5:b2:3d:89:db:87:84:c9:f8:0c:b8:8b:
9f:8a:c8:fd:84:29:8b:5a:94:fb:f5:11:13:03:70:
aa:bd:5a:c6:a1:ec:6b:fd:e9:80:dd:c6:43:9f:67:
c0:99:25:ed:63:61:85:c5:52:0b:85:d5:16:8c:05:
48:0c:b8:3d:1f:8d:7b:d6:63:0d:62:25:8c:63:10:
78:33:90:4c:b3:e8:6a:dd:25:55:80:05:d0:e9:b8:
aa:21:b9:45:3b:a0:22:08:f9:b4:21:5f:68:1c:6b:
f4:84:51:91:f2:06:69:8c:2c:70:bd:79:b8:e8:1b:
40:ab:8a:da:8c:c2:4c:20:36:7a:f8:3a:00:49:69:
5e:cf:7b:25:2f:d4:4e:9d:39:f6:c6:34:20:16:b4:
13:5e:68:22:a4:d8:39:41:91:5c:ec:ca:07:84:2f:
53:c9:6a:56:a2:41:63:33:04:46:fb:bb:3b:c0:63:
17:af:b1:13:e8:5f:21:7a:47:91:6d:f3:04:b8:ee:
8e:68:06:8c:3c:e5:b8:57:ff:e1:44:80:ec:b1:e0:
0b:7e:a7:c8:f0:99:3e:37:cf:db:87:39:0e:9b:3f:
42:15:b4:91:85:cc:20:af:b1:e6:4f:f9:e9:de:31:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:D7:14:44:3F:70:4C:EB:8F:57:7F:63:E7:A5:C1:A6:B1:C1:E1
X509v3 Authority Key Identifier:
keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/4A5868D04DD911F1ABB268C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:57:eb:51:ad:46:c0:e2:7e:86:e0:f0:32:1d:1a:5d:df:f8:
89:8d:15:f2:01:0b:6a:53:ba:fa:78:08:80:61:82:41:5a:0a:
c3:89:82:ca:5b:49:49:92:51:db:c1:20:70:38:3f:17:a2:63:
a7:cf:f0:eb:fa:f0:fc:2f:f8:58:d4:0d:0d:ed:eb:c3:ef:b0:
5e:b3:09:dc:3d:eb:d2:3a:71:1f:d6:0a:81:ed:90:03:be:de:
ac:49:26:8c:ea:48:66:cb:84:85:1f:3f:ed:d4:48:da:70:81:
e1:33:13:c9:1c:94:e0:46:39:00:89:c4:0b:71:cf:ac:37:f1:
73:4b:9d:5d:43:b0:20:0a:d7:16:8b:2e:56:24:0e:2b:70:9d:
f2:9e:e4:72:0f:83:26:fb:bc:2e:03:31:d2:6b:b8:09:20:1b:
97:5b:84:37:de:1d:66:d7:2a:82:00:01:d0:eb:05:02:c6:78:
fe:04:fe:69:14:46:b3:5d:44:5a:96:8a:48:9e:83:a0:4e:ef:
23:7e:07:37:be:68:9e:28:46:fa:e9:40:db:81:da:8c:b3:c2:
ed:0b:8d:50:38:29:a1:54:74:c0:77:92:72:4c:bb:11:b2:b6:
da:0e:f2:80:82:c2:80:0e:16:67:89:b5:76:8b:32:ed:34:80:
2f:de:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:47 2026 by rpki-client