Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/9B6B0CAE27AB11F1B13F3492DAE4EC9C.roa
File: 9B6B0CAE27AB11F1B13F3492DAE4EC9C.roa (raw, json)
Hash identifier: OyHdwYsi0a7Z5txkvaXDbKIXqxlGasLwR7MLr8RcILw=
Subject key identifier: BB:1B:65:44:E6:86:EA:BE:BA:63:F0:4F:CE:85:CD:24:90:41:E3:9C
Certificate issuer: /CN=F36DDABEAF/serialNumber=1E43F675C5655A48B5C1F2D1253B65BFC245BBB7
Certificate serial: 1A
Authority key identifier: 1E:43:F6:75:C5:65:5A:48:B5:C1:F2:D1:25:3B:65:BF:C2:45:BB:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HkP2dcVlWki1wfLRJTtlv8JFu7c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/9B6B0CAE27AB11F1B13F3492DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:02:23 +0000
ROA not before: Tue 24 Mar 2026 18:02:18 +0000
ROA not after: Thu 23 Mar 2028 18:02:18 +0000
asID: 33763
IP address blocks: 102.214.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/HkP2dcVlWki1wfLRJTtlv8JFu7c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/HkP2dcVlWki1wfLRJTtlv8JFu7c.mft
rsync://rpki.afrinic.net/repository/afrinic/HkP2dcVlWki1wfLRJTtlv8JFu7c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DDABEAF, serialNumber=1E43F675C5655A48B5C1F2D1253B65BFC245BBB7
Validity
Not Before: Mar 24 18:02:18 2026 GMT
Not After : Mar 23 18:02:18 2028 GMT
Subject: CN=69c2d1af-cb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:39:1b:46:4f:42:dd:eb:a5:37:4b:4a:e7:
a1:f8:54:05:8f:c1:0e:2d:e9:3c:f8:b2:9a:48:35:
47:27:e9:93:24:89:82:d0:ec:99:d1:76:13:26:9c:
70:e1:4d:df:68:5e:b9:11:2e:20:5d:b1:e4:5e:1d:
cb:3f:17:0d:e0:31:41:23:d7:7c:f7:04:70:6d:51:
35:32:17:db:7d:82:e0:6a:a5:70:67:51:13:be:f0:
32:09:86:0c:1b:9d:71:b1:a2:47:75:c2:75:6e:c2:
f3:85:ec:33:c1:36:df:d3:64:80:4f:ac:d2:0c:14:
a4:8b:93:ba:7e:21:10:c6:24:29:72:ac:e3:25:82:
b7:2c:0a:79:23:0f:f2:fa:40:60:d1:a0:c7:c4:52:
e3:29:16:f7:89:f1:d1:48:aa:fd:e2:fe:51:1c:9e:
13:ae:d6:c2:e0:ae:d4:64:54:00:31:06:9d:2f:14:
9e:6b:0a:3b:47:06:2a:7a:9f:41:2a:e8:72:32:72:
67:70:19:b3:1b:48:51:9d:84:71:b0:a7:aa:72:d8:
55:97:12:91:e2:09:07:c3:da:e6:f3:47:ae:27:80:
1f:52:c6:a4:15:44:79:ed:eb:e0:f9:21:6d:d9:aa:
e1:24:4b:1a:7a:cd:4e:a4:db:2e:ff:5c:82:10:a0:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:65:44:E6:86:EA:BE:BA:63:F0:4F:CE:85:CD:24:90:41:E3:9C
X509v3 Authority Key Identifier:
keyid:1E:43:F6:75:C5:65:5A:48:B5:C1:F2:D1:25:3B:65:BF:C2:45:BB:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/HkP2dcVlWki1wfLRJTtlv8JFu7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HkP2dcVlWki1wfLRJTtlv8JFu7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/9B6B0CAE27AB11F1B13F3492DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:3d:62:a7:4e:2f:cd:47:ad:ac:3d:bd:7a:49:21:c6:a9:e8:
40:0d:75:f4:ab:90:d2:b5:c1:8c:4b:df:0b:e5:ea:ef:c1:b4:
31:0c:fa:48:4c:59:35:3a:ec:5c:fa:30:79:8f:66:cc:c6:86:
5e:ef:bc:e3:57:e3:a8:d6:23:18:15:12:b4:84:c2:17:20:e7:
34:9f:52:de:a6:13:29:b4:7b:fb:04:ac:bb:38:b0:ea:3d:88:
ba:6b:40:2d:f1:61:6d:cc:5a:c3:19:2f:7f:4e:03:37:0e:28:
d2:10:4b:ce:e8:4b:ab:72:3f:06:eb:23:2f:0c:d2:25:4a:f1:
63:9f:47:06:41:c1:a3:3c:f3:07:5e:41:ef:aa:47:bd:c8:7b:
8e:fa:fc:00:6c:0d:98:11:88:a9:aa:00:92:82:93:63:88:b9:
d2:bd:15:ed:10:26:88:c5:e4:71:68:e0:52:0c:ba:33:fe:6d:
e4:63:08:de:94:3b:17:e5:5b:9b:5d:e3:93:b4:9b:8b:2e:b5:
3b:68:0e:da:27:aa:af:60:ab:3e:8f:66:e5:e1:2d:db:15:83:
5c:ce:19:eb:58:e1:fa:66:7a:07:85:7c:dc:60:7f:0c:e9:d3:
7c:f0:e2:0c:de:c1:84:9d:7c:e8:45:93:3f:10:6a:a5:5f:92:
25:6b:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:51 2026 by rpki-client