Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/B12CB62E195E11F189CC1679DAE4EC9C.roa
File: B12CB62E195E11F189CC1679DAE4EC9C.roa (raw, json)
Hash identifier: qHoQ6d/3gZBEDfhM/jAJ1S6dJN+igIoj4x/FpVhkFJI=
Subject key identifier: 0A:B0:41:48:C7:5F:21:DB:7B:57:15:7B:93:2E:07:EF:C0:30:7D:21
Certificate issuer: /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial: 0588
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/B12CB62E195E11F189CC1679DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:16:31 +0000
ROA not before: Fri 06 Mar 2026 13:16:28 +0000
ROA not after: Thu 06 Mar 2036 13:16:28 +0000
asID: 327991
IP address blocks: 102.211.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Validity
Not Before: Mar 6 13:16:28 2026 GMT
Not After : Mar 6 13:16:28 2036 GMT
Subject: CN=69aad3af-0baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:ee:30:f0:5b:c6:e5:1f:a0:31:55:2a:93:
f7:aa:aa:99:22:65:40:4d:84:92:34:c1:51:63:9e:
08:58:26:4d:84:68:72:ac:61:0c:a8:0d:c4:1e:8b:
48:1e:3e:cb:1b:1c:e0:24:93:35:bf:f6:c5:e7:d6:
f7:27:8b:4d:0b:7d:1d:8f:3c:da:51:ef:bc:1b:29:
b7:95:b3:a0:d9:03:79:b7:17:d2:8f:ee:52:b3:18:
d3:bf:6f:06:5c:6c:80:76:c4:c0:e4:de:12:e1:98:
44:96:01:d9:25:af:08:09:e1:8e:85:c5:6c:cd:b2:
80:26:26:f6:2e:24:f6:e0:20:d6:ce:70:f2:7d:d4:
46:30:93:4b:c6:28:0c:70:27:eb:fc:5a:cc:14:97:
d9:ff:87:1b:30:9a:9d:ad:ae:f7:74:c2:e1:56:18:
dd:f8:aa:e6:b5:b4:30:64:0d:c5:27:77:1b:8c:aa:
2c:65:11:4b:b1:40:64:cf:fa:8c:e9:e1:3a:f5:42:
f5:97:53:66:c1:70:3f:52:df:9d:f9:54:32:10:bd:
a8:64:b0:2f:61:51:ee:06:86:82:e4:8c:7f:29:f7:
1d:99:e4:ea:21:8d:fe:30:31:cf:8f:4f:f1:71:ce:
c1:2d:cd:1a:63:e0:fc:93:69:36:21:f3:0c:cc:99:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:41:48:C7:5F:21:DB:7B:57:15:7B:93:2E:07:EF:C0:30:7D:21
X509v3 Authority Key Identifier:
keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/B12CB62E195E11F189CC1679DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
23:d5:05:74:d2:86:79:53:86:5e:36:61:98:6f:f7:b8:4d:f3:
ca:c9:ab:60:fc:34:d4:cf:ad:a0:4f:22:77:20:09:18:ca:f3:
a3:48:48:61:48:18:28:7c:a7:0f:7f:9e:5d:ab:81:03:b2:14:
d4:53:05:b3:b8:9e:d3:f7:f3:9c:aa:4a:09:51:8b:73:ed:5b:
77:fd:89:a2:ac:ee:e2:69:90:2e:a2:49:73:da:4e:c8:b0:8d:
bb:3a:be:7a:ba:34:7a:0b:a5:88:e3:7e:56:a9:d4:f4:04:d9:
c5:3c:ff:42:7a:b0:f6:61:f7:29:57:dc:c3:50:0d:d6:d1:f5:
41:7a:9b:e1:ff:af:3f:41:65:2a:84:c0:11:17:96:8c:a4:c9:
fb:c5:0e:dc:71:6c:f5:70:74:b5:3c:04:49:64:c6:30:dc:81:
3c:e2:3c:2a:ad:b5:04:29:ea:5e:74:fc:2e:a4:fb:e0:b4:e0:
4d:86:3c:92:4e:15:51:13:93:5f:8a:83:3d:13:61:67:7c:11:
38:c6:59:43:73:82:38:76:74:ae:37:43:e1:b5:b4:8e:d4:32:
a4:f5:7e:d7:1b:7d:d6:93:9b:2a:2f:27:7e:bb:83:64:54:d1:
5d:01:24:10:4a:0b:58:69:77:ee:3b:c8:95:60:36:75:07:b7:
70:70:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:43 2026 by rpki-client