Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/FDC40B586F0E11F1BD52D3F6CE1D38B0.roa
File: FDC40B586F0E11F1BD52D3F6CE1D38B0.roa (raw, json)
Hash identifier: JvHfa8PbxLnLrnbEStFKCsSxCR5AFd3IjBiTnIAQW+Q=
Subject key identifier: 20:5A:46:15:D4:FC:89:42:58:12:0E:0D:E0:D6:A0:9A:29:F6:5F:27
Certificate issuer: /CN=F36D9331AF/serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Certificate serial: 02
Authority key identifier: DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/FDC40B586F0E11F1BD52D3F6CE1D38B0.roa
Signing time: Tue 23 Jun 2026 14:22:40 +0000
ROA not before: Tue 23 Jun 2026 14:22:31 +0000
ROA not after: Mon 01 Dec 2036 14:22:31 +0000
asID: 328757
IP address blocks: 102.202.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9331AF, serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Validity
Not Before: Jun 23 14:22:31 2026 GMT
Not After : Dec 1 14:22:31 2036 GMT
Subject: CN=6a3a96b0-5eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:df:aa:71:ca:db:f3:84:c9:70:4c:cc:d7:
17:b7:a8:ab:54:10:34:ad:1a:f3:f5:97:5c:f4:37:
bd:a2:54:19:ef:65:12:f7:b7:8a:1b:e5:1d:35:92:
ec:28:cb:ac:99:40:b4:df:98:f2:22:1d:ae:a1:f1:
91:b4:1a:ea:ef:bb:d5:73:6d:1f:ec:12:0c:91:c9:
4d:7f:b9:5c:35:e1:fd:ec:88:66:9e:1b:84:22:60:
8b:67:0a:be:9e:94:94:a5:b7:8a:64:6e:cd:58:0b:
0b:64:e9:1a:bb:10:50:d3:25:ff:36:e4:4d:4b:7e:
d1:d9:ef:2f:26:4e:5b:77:88:be:35:a3:d2:62:08:
da:9c:6e:3f:93:89:e5:f5:06:65:f2:85:ae:34:0f:
19:de:51:16:e1:69:78:b0:5e:bc:4b:bf:a6:c4:cf:
03:d8:88:02:7f:af:51:1f:8b:6f:97:6b:01:5b:ab:
17:0c:d2:b7:46:f8:38:55:4b:71:f9:7a:84:cc:dd:
8f:a8:2f:2b:01:68:e6:1c:5b:2e:5e:f8:59:69:2f:
95:5a:1a:08:f1:7e:2e:4c:f2:b8:11:82:db:01:a5:
7c:df:51:4b:c7:ee:98:18:68:48:b1:80:7e:97:d8:
d8:64:a4:03:8a:2a:4c:4e:40:4c:3c:20:77:ea:58:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:46:15:D4:FC:89:42:58:12:0E:0D:E0:D6:A0:9A:29:F6:5F:27
X509v3 Authority Key Identifier:
keyid:DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/FDC40B586F0E11F1BD52D3F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.66.0/23
Signature Algorithm: sha256WithRSAEncryption
55:67:9f:04:60:f7:82:fa:f5:1c:13:67:dc:eb:6d:74:f8:ad:
ae:c2:8f:00:fc:19:45:04:5e:02:9c:89:d2:ac:e1:ae:bf:04:
95:24:ab:f4:23:14:93:22:99:b0:aa:22:e7:b0:4d:9f:42:d8:
d6:6d:59:9a:82:f0:94:e7:e4:84:ff:62:85:07:f9:f0:c6:69:
bf:84:28:f7:4c:06:4b:27:f5:b5:0f:8e:32:3c:62:05:e5:a0:
a4:9c:4e:5b:75:95:d0:f7:7b:9b:a3:2e:68:ae:e0:41:7e:f9:
44:72:4a:d2:b7:40:8a:05:d1:d8:a6:8c:5e:bc:38:01:97:70:
43:e4:69:da:a6:3b:57:af:41:fb:83:77:b9:0f:f0:61:6d:4f:
67:ce:8c:10:cb:81:27:a6:4e:e8:08:4f:06:9a:fb:1d:12:bd:
bf:17:e7:8f:b8:7f:a7:c2:48:e1:9a:54:9b:3c:f9:c7:3f:65:
da:2b:26:d8:ca:89:c3:a7:1e:eb:b3:20:12:b1:5c:08:7c:7d:
11:70:71:35:b0:ac:67:2f:60:10:a3:14:02:8c:82:75:0b:37:
ac:be:b1:80:f8:f0:8c:c4:0d:f6:0c:91:a3:6d:40:d3:4d:69:
ce:10:b0:ff:bb:b9:c2:cc:d7:73:73:89:61:32:71:56:a0:14:
c9:15:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:05 2026 by rpki-client