Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/06A2C152243B11F194E4558FDAE4EC9C.roa
File: 06A2C152243B11F194E4558FDAE4EC9C.roa (raw, json)
Hash identifier: Gs/7SYfnrFy9UzL6yHUL31rN36pp3xbnoiybGkMCMFI=
Subject key identifier: 5B:06:06:FC:43:E6:6A:9C:F1:E4:45:B3:65:5D:B2:D3:B6:67:EE:DF
Certificate issuer: /CN=F36DE22AAF/serialNumber=58F5445C8A3A3511BCECDD1889542893F488C77A
Certificate serial: 0651
Authority key identifier: 58:F5:44:5C:8A:3A:35:11:BC:EC:DD:18:89:54:28:93:F4:88:C7:7A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/06A2C152243B11F194E4558FDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 08:58:57 +0000
ROA not before: Fri 20 Mar 2026 08:58:51 +0000
ROA not after: Wed 19 Mar 2036 08:58:51 +0000
asID: 36924
IP address blocks: 102.203.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.mft
rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1617 (0x651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE22AAF, serialNumber=58F5445C8A3A3511BCECDD1889542893F488C77A
Validity
Not Before: Mar 20 08:58:51 2026 GMT
Not After : Mar 19 08:58:51 2036 GMT
Subject: CN=69bd0c50-fa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:cd:35:81:9d:62:d5:e4:5d:66:08:38:d1:
59:ac:22:90:3a:db:67:3d:94:d5:bc:27:28:d9:12:
7d:b7:b8:e4:8d:69:24:3e:04:7c:48:8d:eb:ab:0c:
97:67:57:a9:f4:b2:4a:24:42:3e:fd:b0:49:b3:79:
ef:1f:a1:ce:b5:5c:38:31:79:e2:68:7f:26:2a:e3:
06:a4:b9:71:1d:25:f3:74:c7:f1:cc:db:3b:d2:e2:
96:c0:45:81:b5:7f:11:5b:80:30:74:bd:c1:06:2c:
10:63:49:b5:df:68:97:98:e1:a9:d5:c9:bc:5d:94:
30:79:d4:a1:ca:c4:95:98:cc:00:bd:33:ff:ac:a8:
3a:75:2b:00:83:cd:1d:13:22:d1:a5:96:4f:e5:dc:
43:ef:3e:84:19:cd:20:69:9d:5f:8d:62:85:88:ef:
7a:77:0c:68:1c:8f:ba:81:69:cd:b1:7e:0d:61:50:
b1:5f:5a:fa:e1:3b:af:32:44:c0:64:a4:44:a4:12:
ac:fc:0b:f9:36:64:b7:5a:b6:f9:3e:a3:80:98:b7:
e3:cc:3a:6e:63:bc:45:7a:55:d4:69:f5:75:cc:aa:
af:b9:50:13:9b:80:3e:b8:7b:29:b6:de:cb:6e:45:
07:a6:ac:f8:65:3e:9e:fc:5f:8f:55:19:2e:0d:80:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:06:06:FC:43:E6:6A:9C:F1:E4:45:B3:65:5D:B2:D3:B6:67:EE:DF
X509v3 Authority Key Identifier:
keyid:58:F5:44:5C:8A:3A:35:11:BC:EC:DD:18:89:54:28:93:F4:88:C7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/06A2C152243B11F194E4558FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:84:a9:15:d7:6f:e1:4c:78:09:aa:2b:72:d0:08:49:78:e6:
34:23:6a:29:59:b7:b9:a7:03:50:c2:33:e8:fe:be:a2:83:db:
28:ab:30:8b:3b:15:e0:60:ea:10:3e:f9:46:e0:10:ae:95:e9:
07:fa:3e:8c:3f:5a:7d:87:34:d6:30:75:4b:60:56:4d:03:26:
87:2c:55:eb:dc:08:03:4c:df:9b:43:ae:7a:3c:c4:8a:75:ac:
f7:de:7a:e0:24:65:fa:3b:ed:ea:30:81:7a:c9:7e:86:fd:1a:
a9:e8:19:66:f5:cd:80:2c:bb:ba:f6:f3:88:66:f3:ba:e0:89:
ec:4e:1f:63:3d:2c:fe:1d:be:1f:36:61:59:e2:3d:2a:2b:34:
4f:63:79:6d:b5:21:0f:0f:e4:39:ee:a4:df:e8:02:d8:da:81:
87:57:55:df:4f:6c:a6:e7:d6:cf:ec:a6:df:61:b6:11:0e:93:
c3:8f:b7:2d:d7:94:77:ae:ab:c1:4e:36:c3:c6:f7:39:4b:10:
e6:47:cb:e6:a7:21:0d:6b:c7:23:c4:e9:ac:01:8b:be:ee:d6:
a4:62:f5:ba:d7:8c:d1:f3:03:cc:ee:96:7a:52:aa:6e:e3:20:
cf:f4:f4:c1:7c:5d:f2:10:a2:fc:1b:44:97:3c:79:43:63:25:
b0:10:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:10 2026 by rpki-client