Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa
File: A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa (raw, json)
Hash identifier: mbg1nz27QWm2VugAeSuCncl+InKYGhLEQyQ7AG/9h3o=
Subject key identifier: D8:33:0A:61:FD:4E:FA:FE:77:EE:0A:3A:DE:BC:F6:D2:57:44:82:DC
Certificate issuer: /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial: 87
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 06:10:20 +0000
ROA not before: Tue 03 Mar 2026 06:10:16 +0000
ROA not after: Mon 06 Mar 2028 06:10:16 +0000
asID: 327727
IP address blocks: 154.72.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Validity
Not Before: Mar 3 06:10:16 2026 GMT
Not After : Mar 6 06:10:16 2028 GMT
Subject: CN=69a67b4c-d9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:d3:67:43:d1:f2:12:d7:3c:60:8b:3b:3c:
0e:c0:cc:78:8c:4c:30:c6:c9:d3:bd:27:e5:f4:a9:
31:a5:b9:93:71:63:32:f5:69:c9:0f:36:c5:77:9d:
92:2c:e4:b2:df:d3:22:19:55:56:94:78:58:28:02:
5b:93:f0:bf:ad:c0:bd:dc:5e:f9:b8:78:d5:1d:0f:
59:cc:b2:cb:7c:82:4c:97:20:f4:f7:0b:59:3e:9a:
05:6d:75:33:b9:e3:ed:f8:78:59:fd:20:98:12:28:
ca:97:91:fb:57:2d:f2:28:03:11:dd:42:b2:23:1b:
4a:46:b8:4b:57:7b:b4:56:68:5b:a1:9c:54:b8:c9:
5c:2c:82:76:f6:45:8c:97:5c:d6:c5:59:97:97:d2:
5a:69:c4:35:d2:b3:7a:87:ca:ed:cf:57:6e:8b:c1:
bc:4b:9e:14:d1:db:79:82:68:f8:b4:9d:f8:53:18:
d8:00:a3:eb:ee:22:f3:d7:ee:cd:ea:1c:58:c1:da:
4c:02:fe:3d:8d:8c:54:6c:15:b1:8d:7c:e4:d2:4f:
42:a4:7c:d5:c9:a2:79:33:1d:ae:22:3e:18:53:10:
92:75:46:6f:a1:93:e4:68:4e:74:73:cb:fa:59:48:
f0:ec:9d:84:79:dd:4a:34:38:3a:5d:12:34:53:9c:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:0A:61:FD:4E:FA:FE:77:EE:0A:3A:DE:BC:F6:D2:57:44:82:DC
X509v3 Authority Key Identifier:
keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d4:76:86:a7:58:55:f6:54:21:56:d0:4e:b3:40:79:56:79:
42:a2:74:3a:e8:82:0f:da:ef:ba:9d:a5:d8:0d:25:ed:67:a2:
63:8b:4c:aa:8d:60:d6:1d:2a:e8:cb:24:8d:38:58:46:8c:18:
0d:ee:0a:c1:dc:b3:7b:5a:94:99:ee:3d:97:e0:99:a1:fe:01:
e0:b8:cc:77:49:61:c9:ed:79:a0:81:b5:b9:61:8d:6d:86:da:
f3:e0:40:4b:bc:93:83:89:90:b5:91:63:77:ec:51:dc:9a:5b:
d2:d8:e7:da:37:ae:ce:ba:c1:41:0b:75:5a:9e:96:65:47:ba:
7b:92:51:d2:9a:9d:a7:d7:69:78:36:2a:72:27:7f:28:e8:9c:
69:71:f0:78:8e:e7:fd:4d:98:e7:17:4a:01:6e:db:8d:d0:dc:
de:7b:b8:03:ce:c2:48:17:94:16:25:95:75:79:0e:99:c5:25:
16:eb:93:df:60:2c:f0:a1:1e:42:39:e9:65:8e:74:84:6a:1c:
5f:b4:5f:3c:fd:0e:73:6e:c0:97:01:b7:cd:4f:1b:19:c6:71:
23:ac:e2:b5:52:a2:19:68:ea:e6:de:5f:e3:c4:bf:f0:23:20:
12:54:e6:b3:49:de:74:ab:2b:52:a3:0c:7d:a3:b9:48:14:94:
0e:48:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:25 2026 by rpki-client