Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C1A3/769DEE4026AD11F19BB3D2CEDAE4EC9C/218F21C826B011F18811C4DCDAE4EC9C.roa
File: 218F21C826B011F18811C4DCDAE4EC9C.roa (raw, json)
Hash identifier: GLyOP+TtNZglZt+VeMR/aoAN2lPyb9QJj+8skc5yuRE=
Subject key identifier: A0:F7:75:F3:AE:2A:78:9F:F3:A4:05:5F:84:BA:79:BE:2F:74:F1:C1
Certificate issuer: /CN=F361C1A3AF/serialNumber=0E3570AB8B8B546A9B3DCD7EFF66C4FAC63088BC
Certificate serial: 02
Authority key identifier: 0E:35:70:AB:8B:8B:54:6A:9B:3D:CD:7E:FF:66:C4:FA:C6:30:88:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DjVwq4uLVGqbPc1-_2bE-sYwiLw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C1A3/769DEE4026AD11F19BB3D2CEDAE4EC9C/218F21C826B011F18811C4DCDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 12:02:15 +0000
ROA not before: Mon 23 Mar 2026 12:02:10 +0000
ROA not after: Mon 31 Mar 2036 12:02:10 +0000
asID: 327984
IP address blocks: 102.176.192.0/19 maxlen: 19
196.32.96.0/20 maxlen: 20
2c0f:f5b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C1A3/769DEE4026AD11F19BB3D2CEDAE4EC9C/DjVwq4uLVGqbPc1-_2bE-sYwiLw.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C1A3/769DEE4026AD11F19BB3D2CEDAE4EC9C/DjVwq4uLVGqbPc1-_2bE-sYwiLw.mft
rsync://rpki.afrinic.net/repository/afrinic/DjVwq4uLVGqbPc1-_2bE-sYwiLw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C1A3AF, serialNumber=0E3570AB8B8B546A9B3DCD7EFF66C4FAC63088BC
Validity
Not Before: Mar 23 12:02:10 2026 GMT
Not After : Mar 31 12:02:10 2036 GMT
Subject: CN=69c12bc7-84e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:60:3f:3e:74:62:e0:bf:04:d8:58:21:84:
24:cd:d1:c7:53:11:a3:26:d0:4f:41:4e:b9:d5:ec:
3e:e9:10:29:73:d2:04:99:51:03:20:91:52:c6:09:
17:4b:59:72:fd:41:2f:40:a1:4b:5a:46:0b:1a:8b:
e6:21:33:77:c5:b1:df:aa:9a:8c:cf:63:9a:26:2b:
a1:b0:38:5a:36:42:4d:a1:36:5b:dd:9a:8f:06:9a:
ad:fc:65:1c:08:ac:6c:c5:af:60:4d:61:6c:32:30:
e0:c9:39:fe:bb:8a:9a:27:88:bc:cf:e6:01:f4:17:
89:ad:a5:15:b8:04:3c:f7:7f:65:a1:dc:44:d7:2f:
06:75:dc:55:58:b4:0d:6e:bb:71:f9:5a:9b:86:fd:
46:4c:87:71:58:b3:f4:00:ba:a4:16:e8:b3:3a:46:
07:0e:00:f7:98:81:4e:e9:75:0a:48:9e:23:d1:00:
be:65:92:cc:a2:71:c2:a1:ed:b0:03:df:47:9f:f6:
3e:0d:08:44:dd:ce:25:fb:65:d1:40:60:e3:84:01:
52:62:ba:09:4b:3d:85:4f:93:bc:50:76:ae:7e:f9:
63:01:c9:76:0f:01:0e:64:37:c1:b8:3b:d0:f7:57:
1d:05:50:6a:8e:e6:1b:e0:a8:5e:24:ac:a7:0e:8c:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:75:F3:AE:2A:78:9F:F3:A4:05:5F:84:BA:79:BE:2F:74:F1:C1
X509v3 Authority Key Identifier:
keyid:0E:35:70:AB:8B:8B:54:6A:9B:3D:CD:7E:FF:66:C4:FA:C6:30:88:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C1A3/769DEE4026AD11F19BB3D2CEDAE4EC9C/DjVwq4uLVGqbPc1-_2bE-sYwiLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DjVwq4uLVGqbPc1-_2bE-sYwiLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C1A3/769DEE4026AD11F19BB3D2CEDAE4EC9C/218F21C826B011F18811C4DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.176.192.0/19
196.32.96.0/20
IPv6:
2c0f:f5b0::/32
Signature Algorithm: sha256WithRSAEncryption
66:4f:74:68:7e:2b:43:1b:39:be:43:84:30:c4:f4:c8:11:b7:
47:1d:99:f9:cb:de:0a:18:6d:25:4b:84:47:61:bb:b5:d9:2e:
92:14:62:64:41:a7:d0:4a:b6:d3:8f:15:4f:8b:6c:3b:82:58:
4a:8d:1c:bc:ca:82:ab:32:73:53:30:fe:60:4b:96:b3:6d:d8:
55:67:c2:6f:6d:9b:8e:79:40:3a:f2:6b:83:4e:26:03:92:00:
ee:a7:ec:ca:7b:c4:fe:e4:46:65:d0:44:43:aa:11:4d:b4:0c:
68:d4:8f:9e:d3:0b:84:3f:43:c0:d9:67:77:cb:78:0d:6f:e3:
ef:33:24:55:c2:59:f2:20:b5:c7:a7:5f:e4:5d:31:47:ce:28:
b5:d6:63:84:54:43:69:29:6a:39:c5:d7:31:b9:70:b0:c2:a4:
30:8b:38:81:1f:ec:63:4b:21:c7:95:51:cc:b1:47:35:28:47:
8c:42:1a:16:7c:ba:b2:9b:5f:94:3d:a8:c8:95:35:3e:18:85:
52:80:62:60:ef:f7:92:c9:46:65:74:a7:a9:95:c2:5d:4c:76:
55:74:cb:62:ef:d3:45:9e:f0:0c:94:b5:bc:57:ad:02:5e:7d:
2c:17:23:22:a7:b5:60:29:88:b3:41:3f:8d:76:65:a3:45:e5:
1f:80:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:36 2026 by rpki-client