Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/759FE886276611F1AE61E588DAE4EC9C.roa
File: 759FE886276611F1AE61E588DAE4EC9C.roa (raw, json)
Hash identifier: 2rumQMHsgGx3ykIi8xEgx4NeyhLSv49ebW1PiSlTkDI=
Subject key identifier: B3:C7:7B:22:8F:EC:70:5F:E1:1A:7F:4A:58:A4:99:8D:AF:1D:A7:CC
Certificate issuer: /CN=F36A1387AF/serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Certificate serial: 0290
Authority key identifier: A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/759FE886276611F1AE61E588DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 09:47:24 +0000
ROA not before: Tue 24 Mar 2026 09:47:19 +0000
ROA not after: Fri 01 Mar 2041 09:47:19 +0000
asID: 329437
IP address blocks: 102.204.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1387AF, serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Validity
Not Before: Mar 24 09:47:19 2026 GMT
Not After : Mar 1 09:47:19 2041 GMT
Subject: CN=69c25dac-f532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:ae:7e:58:f4:dd:32:75:18:36:cf:8a:52:
f1:c7:04:02:2e:20:ad:07:e4:f8:aa:b0:c8:b8:f7:
15:a6:77:38:8e:a8:d0:24:5e:8e:bc:af:75:91:ed:
e7:6f:ff:c7:a7:fb:56:d5:1a:c1:1f:ff:5b:b9:82:
0d:03:62:c4:79:24:00:e1:c3:9c:e6:86:45:8b:12:
4a:e7:6d:54:c5:2b:b5:dc:75:d0:6b:b3:4e:17:e1:
38:31:2b:81:01:0f:c5:59:e1:ec:48:e0:83:06:f2:
3f:41:14:a0:38:44:3e:87:fe:f3:f2:b4:4a:2a:09:
00:d4:25:54:ce:48:38:41:fd:9c:6a:cd:2d:43:c9:
53:af:82:08:3d:6e:c4:4d:b8:ee:cc:e0:1a:12:74:
90:da:84:bb:41:c3:ab:d8:3a:95:d2:c0:27:26:a5:
c1:64:cb:f6:63:e0:b7:9e:55:50:d5:ef:e9:b7:9d:
8e:ee:dc:7c:ec:04:90:dd:ba:ec:9b:52:1d:be:28:
fe:b4:22:c8:ac:24:fb:f7:a9:be:f5:48:79:04:c6:
e5:59:d5:6e:3c:29:15:0e:89:5b:92:fb:8e:66:ec:
fe:e9:00:79:bf:24:7d:93:f1:96:1d:38:f9:f6:c9:
6a:b8:85:ef:85:f6:6a:45:86:8c:f9:9a:21:c1:2a:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:7B:22:8F:EC:70:5F:E1:1A:7F:4A:58:A4:99:8D:AF:1D:A7:CC
X509v3 Authority Key Identifier:
keyid:A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/759FE886276611F1AE61E588DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4a:2f:82:ad:41:dc:b8:30:ae:99:a6:bf:b0:19:0d:c8:cc:
72:6f:03:98:43:4a:f8:60:ea:36:da:ae:ec:44:78:c4:cf:93:
ef:5e:24:95:67:4f:ed:c9:81:ec:2e:82:be:82:45:56:51:e2:
92:fc:f8:6a:12:85:c5:74:39:df:70:20:13:b7:75:6e:85:5e:
a2:49:d2:cf:08:c3:38:db:ef:6e:0d:24:a9:97:88:57:ad:1a:
30:6a:42:36:c8:d7:ef:3d:69:ff:60:d6:af:41:e6:49:18:4d:
78:bb:2a:37:82:9b:ce:1f:e8:00:55:e0:04:02:11:16:91:37:
ff:0f:3e:91:bc:2d:90:04:48:d9:97:f5:94:f7:c1:d1:c9:6a:
0d:ad:61:2a:5e:1f:55:43:e9:6b:9a:7e:b6:88:76:0f:1d:90:
53:a2:d9:39:c8:9b:8e:51:b2:cd:52:f6:39:cd:23:04:25:3d:
c5:94:39:59:d7:a9:e7:a8:ce:f8:d3:b0:f7:36:24:f2:79:a4:
eb:80:05:da:99:a5:47:25:fb:ff:16:a3:02:1f:2d:a8:1d:69:
69:57:ba:b1:9a:24:d1:0f:a3:e0:29:90:26:ff:4b:af:4e:cb:
a3:d8:f9:cf:8a:39:6b:2a:18:a8:27:44:43:72:4a:60:c0:37:
bf:0e:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:26:25 2026 by rpki-client