Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/3909DF84194311F1967206D1DAE4EC9C.roa
File: 3909DF84194311F1967206D1DAE4EC9C.roa (raw, json)
Hash identifier: LHcL0cV+KONw4V1xSlrim2xW+5USwBAGMby3PnPtDBY=
Subject key identifier: 42:58:A8:96:4D:8E:C1:CF:DC:3B:5D:65:62:96:11:3A:80:04:D7:89
Certificate issuer: /CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Certificate serial: 0574
Authority key identifier: 24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/3909DF84194311F1967206D1DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 09:59:54 +0000
ROA not before: Fri 06 Mar 2026 09:59:50 +0000
ROA not after: Thu 06 Mar 2036 09:59:50 +0000
asID: 329084
IP address blocks: 102.215.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361E497AF, serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Validity
Not Before: Mar 6 09:59:50 2026 GMT
Not After : Mar 6 09:59:50 2036 GMT
Subject: CN=69aaa599-5113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:35:d9:d0:cc:18:55:08:96:ea:89:94:b1:
a2:0c:a6:42:b6:c9:10:e9:14:55:7d:39:63:5a:a9:
7e:1b:f0:82:7f:36:28:86:48:cd:96:45:32:26:87:
c2:0d:36:f0:47:54:f5:4e:a5:dc:37:3c:68:b3:99:
0f:6e:93:98:d4:5d:f0:ed:91:bd:b7:66:eb:22:63:
eb:2d:f0:46:44:7a:30:d5:50:3b:38:cc:52:c3:e2:
6f:13:3e:f8:9e:2c:e3:28:e8:6d:4a:36:c0:64:39:
9c:60:cb:74:8f:0c:0a:ad:e0:2d:43:7c:57:2c:e7:
0b:21:e5:2d:12:7e:c4:da:f5:e8:a8:c7:12:e2:eb:
40:e7:28:9a:67:d6:b6:c0:22:98:ff:1b:38:bf:4a:
d8:20:2f:5d:ca:92:d9:04:e6:2d:bd:f1:02:af:4d:
55:43:23:d2:f5:2a:7b:9e:ae:56:ca:24:a0:fb:e7:
c2:4e:fe:7f:18:5f:c7:91:8a:9b:1f:09:72:95:59:
b5:60:8b:9b:02:40:17:dc:4d:5d:c7:6f:26:1a:e0:
8b:41:bf:6e:d1:df:05:b8:29:c5:4d:d8:3b:04:c7:
ff:a4:73:65:28:53:b3:e6:92:11:65:bd:98:3c:63:
68:90:92:37:4a:78:18:4a:83:4a:2e:be:45:8c:33:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:A8:96:4D:8E:C1:CF:DC:3B:5D:65:62:96:11:3A:80:04:D7:89
X509v3 Authority Key Identifier:
keyid:24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/3909DF84194311F1967206D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.154.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c9:ab:4e:9c:49:43:b2:47:aa:d1:a7:4c:59:3b:a0:fd:e4:
81:db:8a:e9:19:b2:6d:c5:ed:59:84:9a:23:c3:bb:f3:8a:4e:
ca:25:30:ce:c2:ec:ae:f5:4c:b1:1c:92:f2:11:a9:e6:73:14:
39:50:d0:8d:19:ad:7e:d7:0f:fa:9f:cd:35:64:10:8b:90:28:
f7:ef:ce:97:73:0f:e8:e7:69:ee:1f:2f:81:d1:38:c5:49:dd:
e4:8e:2f:75:d7:9c:b7:f4:99:87:11:d3:9a:11:15:65:88:af:
6f:94:da:43:17:e2:fd:32:d5:a2:8a:5c:5b:fd:59:ca:cd:7f:
82:3b:33:ea:85:e9:00:00:91:ac:2b:b9:91:2d:2e:06:6e:12:
87:52:c9:b3:63:8e:da:a7:23:c5:84:f0:48:67:fe:34:1d:fb:
15:be:38:6c:72:8a:96:c5:7a:b6:85:ea:2c:38:1d:0a:1b:9b:
eb:e4:d3:e5:65:23:dc:8b:1f:2d:58:7c:cd:fd:d4:25:e3:dd:
d5:f5:58:a8:04:b4:fb:64:62:5a:2d:30:1c:f4:bb:0f:c8:12:
f8:ff:e3:93:a6:04:a2:08:ca:bd:01:47:9f:9c:e9:48:0c:e9:
2b:1f:9f:cb:df:9d:45:44:ed:be:32:23:06:2c:84:97:27:cf:
0b:4e:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:31 2026 by rpki-client