Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/89B3F2A6195E11F19D35F978DAE4EC9C.roa
File: 89B3F2A6195E11F19D35F978DAE4EC9C.roa (raw, json)
Hash identifier: baGYyd6gk5MAgEJKDFBx1V6tWNd0Wz/VZWyHzFiNi+Y=
Subject key identifier: 79:FC:34:65:83:57:D9:BC:A0:C8:8D:55:E2:CC:D8:43:9E:13:2F:FF
Certificate issuer: /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial: 0586
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/89B3F2A6195E11F19D35F978DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:15:25 +0000
ROA not before: Fri 06 Mar 2026 13:15:21 +0000
ROA not after: Thu 06 Mar 2036 13:15:21 +0000
asID: 327991
IP address blocks: 102.211.188.0/23 maxlen: 23
102.211.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Validity
Not Before: Mar 6 13:15:21 2026 GMT
Not After : Mar 6 13:15:21 2036 GMT
Subject: CN=69aad36d-5959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:a6:9f:02:9b:31:b6:df:b0:fc:16:d2:1a:
e2:e3:d9:ab:78:49:82:6a:a3:b9:aa:5e:e9:d4:8f:
fc:c4:4e:fa:dc:8f:69:18:55:71:e5:16:cc:c9:98:
e5:66:44:95:7d:03:45:fc:81:9d:b1:e0:f6:09:a1:
d1:69:d7:9e:e6:b4:b1:b2:57:53:bb:8f:d4:f9:64:
70:51:e3:6b:3b:27:80:ef:9b:8e:89:e6:3b:df:fd:
f7:89:47:db:01:a1:8c:6d:51:af:c2:41:66:5d:24:
37:c4:64:b0:65:1e:99:34:6d:48:4f:e9:fc:06:ec:
d6:a6:ff:51:e3:d8:6c:fe:d9:d3:dd:33:91:02:93:
dc:04:32:64:2a:bc:89:2c:87:96:7c:43:a6:fd:ae:
8f:44:bb:96:b9:d5:ab:fc:cb:5c:9b:25:1c:05:cb:
bf:5d:87:65:d6:60:7b:f2:cf:2a:0d:99:e9:b9:d9:
37:b4:75:7a:4d:d8:25:5c:f8:aa:33:38:b1:f2:b6:
51:4b:f4:ad:02:66:60:fa:f9:1d:09:26:e6:30:84:
56:d8:b6:d1:96:68:74:f5:34:56:2b:a4:37:56:47:
6b:32:09:f2:53:98:c3:e4:ac:19:53:1a:e4:39:ba:
d9:c7:50:9e:44:92:e3:19:67:5c:84:ff:bb:c1:c2:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:34:65:83:57:D9:BC:A0:C8:8D:55:E2:CC:D8:43:9E:13:2F:FF
X509v3 Authority Key Identifier:
keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/89B3F2A6195E11F19D35F978DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
61:27:8b:bb:0f:e2:27:6e:9b:7c:3c:c4:41:ea:d3:d8:e4:ff:
fd:b1:45:6e:0f:ed:3c:bd:a6:68:e3:0c:e9:9a:bd:8c:b2:ef:
45:8a:df:4e:6b:38:8f:57:0b:ba:97:44:72:fc:57:9d:8c:ab:
f0:de:b9:eb:6b:e0:bb:7c:5f:9f:c0:f4:5a:03:ae:12:12:2d:
3a:c9:71:04:1e:8c:92:21:3a:a8:ba:23:05:85:69:37:09:1c:
2a:21:5f:f3:0b:a5:a8:3a:27:17:a7:c6:21:64:0a:2e:46:62:
13:de:28:d0:c8:6d:f3:43:f0:b5:f8:32:ae:62:ce:4c:a9:6e:
0a:d0:63:ef:49:a1:00:20:b1:37:f3:e2:82:f4:4b:3d:1f:9f:
bc:ac:a6:e0:17:cb:29:20:4e:bc:a6:c2:ad:99:4c:57:e7:7e:
ac:38:b1:c5:d2:bf:5d:85:d7:de:e9:57:fb:da:71:31:9e:58:
4d:17:7b:6a:54:6b:f0:18:ee:ce:33:3e:da:3d:e5:8d:29:52:
44:99:9f:af:19:6e:8e:b7:58:d9:10:ac:a3:05:18:97:28:af:
cb:6c:46:7b:38:4a:bc:47:24:ec:35:9f:2c:c8:53:a9:84:fe:
42:00:63:f8:69:82:83:e0:a5:92:e3:39:01:fa:87:e9:50:29:
b9:16:e1:aa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTc2RThBRjExMC8GA1UEBRMoREJGNjhDOUM1QzAxRDY4RUJDMEM5MERFRTRDMDc0
OURBMjNBMkZENjAeFw0yNjAzMDYxMzE1MjFaFw0zNjAzMDYxMzE1MjFaMBgxFjAU
BgNVBAMTDTY5YWFkMzZkLTU5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLp6afApsxtt+w/BbSGuLj2at4SYJqo7mqXunUj/zETvrcj2kYVXHlFszJ
mOVmRJV9A0X8gZ2x4PYJodFp157mtLGyV1O7j9T5ZHBR42s7J4Dvm46J5jvf/feJ
R9sBoYxtUa/CQWZdJDfEZLBlHpk0bUhP6fwG7Nam/1Hj2Gz+2dPdM5ECk9wEMmQq
vIksh5Z8Q6b9ro9Eu5a51av8y1ybJRwFy79dh2XWYHvyzyoNmem52Te0dXpN2CVc
+KozOLHytlFL9K0CZmD6+R0JJuYwhFbYttGWaHT1NFYrpDdWR2syCfJTmMPkrBlT
GuQ5utnHUJ5EkuMZZ1yE/7vBwjtlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUefw0
ZYNX2bygyI1V4szYQ54TL/8wHwYDVR0jBBgwFoAU2/aMnFwB1o68DJDe5MB0naI6
L9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU3NkU4L0MzODA4OTg2RkM2MTExRUNCMTdFMjJBQkYxMjIyNDY4LzJfYU1u
RndCMW82OERKRGU1TUIwbmFJNkw5WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJfYU1uRndCMW82OERKRGU1TUIwbmFJNkw5WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU3NkU4L0MzODA4OTg2RkM2MTExRUNCMTdFMjJBQkYx
MjIyNDY4Lzg5QjNGMkE2MTk1RTExRjE5RDM1Rjk3OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm07wwDQYJKoZIhvcNAQEL
BQADggEBAGEni7sP4idum3w8xEHq09jk//2xRW4P7Ty9pmjjDOmavYyy70WK305r
OI9XC7qXRHL8V52Mq/Deuetr4Lt8X5/A9FoDrhISLTrJcQQejJIhOqi6IwWFaTcJ
HCohX/MLpag6JxenxiFkCi5GYhPeKNDIbfND8LX4Mq5izkypbgrQY+9JoQAgsTfz
4oL0Sz0fn7yspuAXyykgTrymwq2ZTFfnfqw4scXSv12F197pV/vacTGeWE0Xe2pU
a/AY7s4zPto95Y0pUkSZn68Zbo63WNkQrKMFGJcor8tsRns4SrxHJOw1nyzIU6mE
/kIAY/hpgoPgpZLjOQH6h+lQKbkW4ao=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:42 2026 by rpki-client