Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/919388B622BD11F1A94843DDDAE4EC9C.roa
File: 919388B622BD11F1A94843DDDAE4EC9C.roa (raw, json)
Hash identifier: OLUp35+2w0tLdAcmz320f+qriBziGZ0j/K2+JxNEgks=
Subject key identifier: 6A:57:74:25:F1:AA:EC:3E:53:F9:BD:68:3D:4A:FD:FB:65:93:DE:89
Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial: 0A24
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/919388B622BD11F1A94843DDDAE4EC9C.roa
Signing time: Wed 18 Mar 2026 11:28:22 +0000
ROA not before: Wed 18 Mar 2026 11:28:17 +0000
ROA not after: Tue 18 Mar 2036 11:28:17 +0000
asID: 36982
IP address blocks: 2001:4200:300::/44 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAF, serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Validity
Not Before: Mar 18 11:28:17 2026 GMT
Not After : Mar 18 11:28:17 2036 GMT
Subject: CN=69ba8c56-70eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:58:cd:97:48:41:91:65:af:5e:2f:78:83:
58:25:a6:25:f0:d2:48:85:ee:91:34:a8:35:2f:45:
85:88:2c:c1:23:04:98:90:a4:8e:2d:e7:4e:c0:c4:
74:f7:40:e0:b8:c7:a8:9b:90:8e:85:75:66:3e:d5:
93:d6:ec:6a:c6:55:c5:4b:cd:db:dc:14:24:9b:4e:
96:a3:bb:ea:2b:82:81:1e:b6:8f:a4:34:a7:12:8d:
8b:94:33:22:45:25:f7:d2:3d:df:c9:12:d0:3b:32:
7e:c3:e4:2b:d5:1f:8f:8b:db:13:44:98:cb:0e:6b:
ab:f6:be:8f:a2:02:d3:41:07:36:d6:c0:40:06:ca:
e3:33:99:21:d1:39:2d:7e:e9:97:8e:9f:64:ff:05:
e9:70:af:0f:0a:1b:d0:29:da:97:fc:bd:ce:db:21:
c4:2e:38:b4:82:fb:19:ad:35:a2:f2:01:44:0e:22:
b4:e7:a8:53:5f:ab:3b:82:c5:db:02:90:50:8f:68:
01:a7:23:c4:40:10:9d:c8:8d:02:66:0c:58:1b:b0:
5d:e0:d6:c6:9f:ff:fd:a1:a8:a0:4b:18:9f:e9:72:
0b:00:2e:82:2a:70:66:2f:e1:41:8b:4e:54:ab:d7:
e5:db:be:79:37:d2:1c:1a:9d:02:f8:da:d6:7a:6e:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:74:25:F1:AA:EC:3E:53:F9:BD:68:3D:4A:FD:FB:65:93:DE:89
X509v3 Authority Key Identifier:
keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/919388B622BD11F1A94843DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4200:300::/44
Signature Algorithm: sha256WithRSAEncryption
21:9f:10:e2:9e:b8:45:07:5b:fd:64:42:bf:64:c4:e9:36:82:
ea:06:b5:b1:18:e0:c5:9e:98:4e:60:e3:aa:55:65:45:f9:0d:
48:7f:19:70:dd:dd:d6:5e:b3:8c:82:0c:da:5b:4e:35:5c:6e:
51:3c:d5:61:8e:e5:3a:d3:86:01:a2:df:73:b8:e6:5d:52:2b:
52:cd:10:6f:e0:93:b0:00:4c:bf:96:a7:8d:52:b2:6e:6b:34:
5e:90:8d:84:7e:a6:fb:7d:6b:9f:b8:fd:8c:e1:d2:6c:3f:09:
a0:b0:bf:e5:b8:23:1c:32:27:eb:29:e0:03:b9:8c:e4:7a:91:
ea:7b:90:59:22:5a:1b:db:66:c2:c1:7b:a6:aa:c4:32:bf:26:
97:d4:72:0b:09:f2:32:cc:13:83:c4:8e:81:54:0f:d0:15:e6:
ae:c4:da:93:7c:60:7e:6a:be:0a:aa:a5:d0:22:46:b4:76:cd:
94:3b:bf:e0:12:a0:7c:92:18:27:43:0f:f5:46:8d:65:e8:29:
b9:29:1b:07:66:f1:1b:5c:4a:17:99:fd:35:44:70:60:e7:0a:
c5:c5:d0:22:36:84:7e:90:01:3a:ae:0c:78:77:4e:ab:a8:3b:
fb:af:b3:60:52:fd:c7:a4:62:4c:dc:2b:01:e9:b4:41:d5:d1:
b9:95:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:24:32 2026 by rpki-client