Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/DEC02F5E28CB11F19DF8BCA7DAE4EC9C.roa
File: DEC02F5E28CB11F19DF8BCA7DAE4EC9C.roa (raw, json)
Hash identifier: QG4MgBoLVMH9mncdgz6VjEgC+bzdC7DdbHcSL/0kUPw=
Subject key identifier: FC:14:E5:D6:80:5C:08:B3:05:A3:BE:59:33:B5:55:8B:8B:20:35:6F
Certificate issuer: /CN=F369BAF0AF/serialNumber=27319BFD9C6EC5953E5629599AFFE2D26A9404F2
Certificate serial: 0693
Authority key identifier: 27:31:9B:FD:9C:6E:C5:95:3E:56:29:59:9A:FF:E2:D2:6A:94:04:F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/DEC02F5E28CB11F19DF8BCA7DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 04:25:51 +0000
ROA not before: Thu 26 Mar 2026 04:25:46 +0000
ROA not after: Wed 26 Mar 2036 04:25:46 +0000
asID: 328068
IP address blocks: 196.61.224.0/22 maxlen: 22
196.61.224.0/23 maxlen: 23
196.61.225.0/24 maxlen: 24
196.61.226.0/23 maxlen: 23
196.61.226.0/24 maxlen: 24
196.61.227.0/24 maxlen: 24
196.61.228.0/24 maxlen: 24
196.61.229.0/24 maxlen: 24
196.61.230.0/24 maxlen: 24
196.61.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft
rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BAF0AF, serialNumber=27319BFD9C6EC5953E5629599AFFE2D26A9404F2
Validity
Not Before: Mar 26 04:25:46 2026 GMT
Not After : Mar 26 04:25:46 2036 GMT
Subject: CN=69c4b54f-2179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:a9:df:09:56:43:25:b6:b5:8b:50:9e:27:
5e:96:e9:1d:fb:55:3a:af:af:db:58:6a:d9:04:32:
78:f9:4f:ee:16:bb:e2:4b:48:b7:cc:ee:fa:17:14:
33:71:5c:2f:3b:c6:aa:fa:8a:7d:7a:4a:bc:1a:8b:
de:c3:a4:b6:96:e3:26:a2:45:aa:4e:36:f6:65:4e:
03:9d:e4:52:ea:46:a5:ae:a0:5d:2f:b4:07:33:e9:
82:17:7a:04:c3:ee:0b:e8:22:82:1e:3e:1b:a9:08:
83:7c:af:96:71:84:8f:44:fb:a5:4c:0c:2d:60:f2:
56:b3:61:3a:39:6a:f0:c7:fa:ff:ff:f1:75:a4:45:
a4:f8:e5:fe:54:b7:b8:4b:b8:0b:ea:98:dc:76:a0:
26:9e:03:26:dd:e1:3e:61:88:61:e1:2b:97:90:f4:
e5:4c:5d:27:83:0e:72:2a:01:99:11:4b:63:21:da:
0a:ad:c9:4d:ce:d5:91:47:3f:fe:2d:0b:4a:94:b4:
aa:0f:b1:22:71:7b:f7:6a:9f:15:69:80:78:93:e2:
88:81:ff:82:0d:73:87:71:3d:ed:db:39:5a:0d:cc:
5a:2f:72:ca:d6:b7:84:ff:ab:a6:95:c9:46:a1:5b:
65:e8:8c:ed:ae:4c:9e:b0:84:54:1e:ea:86:24:8f:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:E5:D6:80:5C:08:B3:05:A3:BE:59:33:B5:55:8B:8B:20:35:6F
X509v3 Authority Key Identifier:
keyid:27:31:9B:FD:9C:6E:C5:95:3E:56:29:59:9A:FF:E2:D2:6A:94:04:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/DEC02F5E28CB11F19DF8BCA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.61.224.0/21
Signature Algorithm: sha256WithRSAEncryption
54:4e:99:91:1a:1d:d8:73:47:9e:4e:94:f9:41:db:b4:f6:d8:
34:18:37:97:6d:1c:1c:97:ab:2a:0f:7d:99:54:88:b0:64:c9:
32:20:4a:37:49:3f:aa:07:36:47:a0:ef:a6:ec:27:8f:2f:37:
7c:55:13:82:83:1a:ec:d6:90:ca:37:1f:ba:f7:48:48:e8:14:
48:a6:49:ad:aa:db:06:1d:b3:4a:f1:fd:72:18:d4:ef:6a:1f:
7e:5e:bd:4d:8b:a0:00:d8:a5:3b:f9:e4:e9:4a:a5:09:47:d2:
cc:6a:26:73:e8:ab:0a:9d:12:61:b8:00:a7:2f:f9:2e:41:05:
b2:a7:c9:82:40:de:74:a5:46:0b:f2:57:3a:12:db:4d:e6:6c:
cf:00:48:95:a1:f2:26:bd:45:13:ac:59:1a:7d:27:6b:c7:85:
92:b6:65:c2:40:07:39:1b:dd:bf:08:67:af:02:e9:f7:29:f1:
6c:3c:b4:f6:5e:ca:1e:40:e6:9a:ba:65:f0:ba:ef:4b:ee:b3:
19:26:4b:b1:2b:72:36:dc:a5:c8:c4:a0:2a:ca:69:a4:37:ab:
33:82:3a:0e:72:7d:7d:89:8c:fd:c8:b0:a4:2a:75:8a:58:91:
88:4c:e6:af:8d:b8:f4:ce:c1:96:5c:1c:05:6d:38:8a:55:4b:
de:77:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:25:12 2026 by rpki-client