Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/2B2109A84D3A11F1B51418F6CE1D38B0.roa
File: 2B2109A84D3A11F1B51418F6CE1D38B0.roa (raw, json)
Hash identifier: p6YGQVuKp4XLjWUIWfEggxIPgjmQh2vroWbj2tU2BPI=
Subject key identifier: 45:07:88:9A:D1:19:C3:B9:B1:BA:57:6C:64:A2:DC:B2:EC:A6:A7:00
Certificate issuer: /CN=F361CA27AF/serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Certificate serial: 63
Authority key identifier: 90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/2B2109A84D3A11F1B51418F6CE1D38B0.roa
Signing time: Mon 11 May 2026 13:06:06 +0000
ROA not before: Mon 11 May 2026 13:05:59 +0000
ROA not after: Tue 11 May 2027 13:05:59 +0000
asID: 329615
IP address blocks: 102.204.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361CA27AF, serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Validity
Not Before: May 11 13:05:59 2026 GMT
Not After : May 11 13:05:59 2027 GMT
Subject: CN=6a01d43e-c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:2d:dd:96:39:b7:9b:b8:d8:19:db:e4:56:
29:ef:4b:99:2a:75:9f:9c:73:44:ec:5d:e8:27:e6:
9f:5e:e1:59:9d:a2:21:c6:15:f9:10:b4:d7:eb:72:
47:0c:96:5c:43:c2:19:4f:e5:51:64:ba:20:4e:1e:
f3:83:b5:03:23:1c:5b:c0:5c:9e:db:43:22:9f:b7:
9c:14:31:f5:03:80:bc:58:9f:18:13:bd:15:92:46:
52:f0:9f:8b:32:b7:f5:85:65:92:8d:76:f8:0a:69:
8c:f1:ee:72:8c:94:c0:ef:45:c6:14:25:71:c8:76:
aa:66:0c:6a:e8:5f:49:42:8b:6c:c6:d1:e2:5a:b5:
26:47:9d:32:90:ad:0a:aa:4c:fc:7c:09:4a:28:e5:
75:7c:69:f8:ed:ed:94:c2:91:16:be:77:9e:87:91:
0c:09:5f:f2:96:69:a2:43:0d:b0:c0:3e:a3:d9:92:
28:55:e8:1e:c6:89:11:14:a7:0a:f8:50:d2:75:7b:
ed:ff:db:95:04:f1:5c:69:1e:7c:9a:be:4b:70:53:
2d:18:af:74:49:06:35:34:fd:81:98:96:b9:23:e3:
da:df:35:7e:69:6c:16:cb:b5:94:22:ae:e0:85:a7:
ed:a0:7b:81:bc:be:64:3e:59:89:a2:60:dd:ba:77:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:88:9A:D1:19:C3:B9:B1:BA:57:6C:64:A2:DC:B2:EC:A6:A7:00
X509v3 Authority Key Identifier:
keyid:90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/2B2109A84D3A11F1B51418F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:42:81:47:5e:19:10:16:34:f9:a7:90:b8:06:3e:4f:23:0c:
19:3d:92:e0:35:42:d5:58:e7:65:15:79:67:9c:7b:a1:f4:3c:
19:34:29:37:7b:e3:e9:ed:70:8c:46:1c:2a:b3:51:fb:26:37:
c1:32:92:ba:57:09:4b:e3:06:c0:b4:11:07:86:d9:e3:62:f1:
c6:c1:ea:ca:e5:b0:de:a8:5f:78:7d:03:4a:66:8b:39:7a:25:
d8:f5:b7:23:92:95:93:5a:3a:16:14:78:07:29:a8:9b:a2:64:
ad:f3:97:ba:6a:1c:61:f6:af:b2:e5:b7:52:c5:e7:a6:fc:c6:
47:76:94:41:19:1d:e1:4f:3f:7f:c5:de:96:68:07:45:3f:27:
09:16:6e:63:e5:0a:b8:20:54:1b:e4:32:fc:49:e2:b7:89:47:
42:80:03:9d:7b:4c:35:86:c9:ad:3d:03:dd:f9:7c:5c:34:66:
ab:39:19:6c:1e:c3:a4:6e:5c:ce:f9:3c:64:35:88:a0:02:e1:
7c:8c:f6:ab:71:c6:b2:cd:79:1e:cc:dc:68:3a:fe:95:67:3f:
c1:00:12:57:a3:f4:4f:c1:2f:fd:a9:07:d8:de:68:53:9f:b9:
74:fb:19:f6:5e:73:56:b2:69:10:4b:f8:f7:82:ae:a6:06:ea:
45:21:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:33 2026 by rpki-client