Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/150822CE1DE611F1B4804FA0DAE4EC9C.roa
File: 150822CE1DE611F1B4804FA0DAE4EC9C.roa (raw, json)
Hash identifier: m5l4R7beJ99O446kObM+YWG4NxgnnKfqNcuCkJvLtfA=
Subject key identifier: 44:85:48:EE:C6:8A:2D:4C:B7:08:AB:8E:14:B4:51:6C:5E:F8:2A:F7
Certificate issuer: /CN=F361B08DAF/serialNumber=0D24CFE5FF586C3299DDEB79A0EF552EC27AA9A1
Certificate serial: 09EF
Authority key identifier: 0D:24:CF:E5:FF:58:6C:32:99:DD:EB:79:A0:EF:55:2E:C2:7A:A9:A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/150822CE1DE611F1B4804FA0DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 07:35:46 +0000
ROA not before: Thu 12 Mar 2026 07:35:41 +0000
ROA not after: Wed 12 Mar 2036 07:35:41 +0000
asID: 328350
IP address blocks: 102.132.0.0/20 maxlen: 24
2c0f:1980::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.mft
rsync://rpki.afrinic.net/repository/afrinic/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B08DAF, serialNumber=0D24CFE5FF586C3299DDEB79A0EF552EC27AA9A1
Validity
Not Before: Mar 12 07:35:41 2026 GMT
Not After : Mar 12 07:35:41 2036 GMT
Subject: CN=69b26cd2-c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:1e:d7:40:3b:bf:10:49:f0:77:e3:8e:fb:
29:44:44:84:e8:3e:17:93:46:ff:45:2f:46:34:15:
6e:aa:3a:02:22:9d:8c:e4:04:7d:27:63:d2:b0:ba:
92:a2:94:e3:5f:f8:3f:b1:c6:55:ad:49:1f:6e:22:
8e:37:a5:e8:82:14:a5:a3:2b:58:df:14:81:f4:f9:
27:f2:99:c2:77:0c:77:66:e0:44:58:bd:c1:8d:9a:
56:b5:94:d3:51:32:cc:3a:98:4f:29:bc:8f:19:f5:
6d:ef:6d:c4:98:a9:2d:e2:86:16:90:6a:c4:aa:c1:
7b:6f:d4:b3:c8:3f:27:f4:5c:23:2d:d6:4e:03:17:
25:8f:ef:e5:0a:84:2d:66:24:50:77:e0:7e:b1:f9:
ad:ec:61:01:f7:ca:29:79:75:75:03:fa:6e:33:be:
2e:76:a2:05:c2:ed:5a:7d:8e:8d:8d:7b:09:08:48:
ec:dd:17:fe:8c:6c:4f:30:a2:1b:e5:9d:a4:6d:b5:
a0:07:68:45:b2:a8:7d:f8:5d:a4:33:af:71:03:37:
02:20:10:25:b3:3d:38:31:8c:41:4f:7c:a2:83:73:
f1:94:d1:53:b3:90:a5:4d:4d:78:f8:ca:42:48:95:
8c:62:14:c7:d8:1f:ed:d5:ae:9c:de:5c:e4:68:fd:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:48:EE:C6:8A:2D:4C:B7:08:AB:8E:14:B4:51:6C:5E:F8:2A:F7
X509v3 Authority Key Identifier:
keyid:0D:24:CF:E5:FF:58:6C:32:99:DD:EB:79:A0:EF:55:2E:C2:7A:A9:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/150822CE1DE611F1B4804FA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.132.0.0/20
IPv6:
2c0f:1980::/32
Signature Algorithm: sha256WithRSAEncryption
22:08:c4:3c:e9:57:cb:fe:02:05:43:4e:e8:4d:61:75:84:1b:
04:77:0d:d1:c1:7e:3a:4f:28:3a:4a:05:2d:30:b5:07:1b:00:
d8:78:ba:1b:41:1d:ea:d4:87:9c:29:11:72:c0:02:40:95:0e:
93:b6:07:3e:b1:4e:49:33:42:07:57:39:56:87:25:26:9e:aa:
16:cb:48:22:c8:64:99:ff:9b:23:4d:78:07:5e:5b:1b:65:2c:
5e:72:eb:fd:dd:1e:16:c4:75:be:66:4e:f6:f0:3d:79:7f:bc:
c7:43:a6:75:72:c9:d2:9e:a7:f3:41:3e:87:8f:c8:74:4d:d1:
60:93:49:29:08:16:00:9e:e5:46:a0:5d:12:41:58:4e:37:f4:
b8:53:f5:f0:68:f4:26:aa:80:a1:46:bd:55:94:81:ce:cf:31:
f3:ca:d2:31:7d:49:fa:fb:87:7b:26:79:bb:4e:bd:68:8b:8f:
a3:f3:b8:a1:b2:cd:7d:e8:7d:f7:77:fb:38:1c:f7:f9:65:82:
a9:55:72:46:d5:2a:20:69:4a:03:5c:11:f4:77:ed:cc:a2:38:
6f:0e:17:a6:d6:38:63:b0:45:59:dc:0e:62:b9:34:ca:bd:7a:
75:87:de:e1:1a:76:8e:6a:f8:c4:0f:83:2a:85:87:76:e1:8c:
42:83:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:10 2026 by rpki-client