Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/213A16D822B411F19F2100A8DAE4EC9C.roa
File: 213A16D822B411F19F2100A8DAE4EC9C.roa (raw, json)
Hash identifier: +REceu3vGyfkElasQapk8ytHIl0xpyt/9IoQ658hAK8=
Subject key identifier: F2:3B:2D:EB:52:98:8C:92:39:01:53:A9:47:B4:BF:1C:3C:2F:D9:98
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0A37
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/213A16D822B411F19F2100A8DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 10:20:48 +0000
ROA not before: Wed 18 Mar 2026 10:20:43 +0000
ROA not after: Tue 18 Mar 2036 10:20:43 +0000
asID: 327733
IP address blocks: 102.212.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Mar 18 10:20:43 2026 GMT
Not After : Mar 18 10:20:43 2036 GMT
Subject: CN=69ba7c80-5c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:b1:3f:c9:f8:58:ee:4d:e8:6f:85:50:0e:
94:6b:25:f7:ad:bb:9d:c0:ac:a5:f4:c3:62:bf:59:
5d:39:09:aa:25:25:b8:7c:f8:04:55:87:59:2a:30:
6d:f8:0e:06:68:16:a2:28:23:62:45:af:a3:ee:71:
2e:10:35:2e:0f:79:00:9d:3c:55:91:0c:d0:da:47:
00:c2:11:31:13:77:3c:df:6e:38:37:7a:d1:a5:3e:
40:e9:0f:2f:bd:c6:e4:61:7f:d5:0e:8f:6a:e1:84:
d9:46:9c:79:78:1d:64:95:b1:d5:1a:14:7c:f5:58:
3e:a6:fa:1e:4d:b2:76:79:04:30:4e:72:2d:20:44:
13:88:cc:cc:be:f1:e2:87:1b:f4:01:a8:4e:21:d9:
4f:ab:30:18:b9:db:56:16:f8:03:b9:23:0a:10:62:
54:06:a8:b6:76:33:b0:79:f9:33:fc:85:f0:06:e2:
45:1e:9d:c6:1d:49:d0:8e:8c:71:81:b5:84:4b:d6:
6b:37:92:16:df:9a:e1:e5:49:54:a5:fb:54:34:41:
77:5b:7d:2a:18:01:77:c6:d2:ac:52:fe:09:2d:48:
5c:7d:16:e7:dc:8a:9b:05:ab:ee:d1:dd:15:fa:80:
97:71:e7:cc:66:f9:a2:f0:f4:e1:c7:8a:3e:32:6e:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:2D:EB:52:98:8C:92:39:01:53:A9:47:B4:BF:1C:3C:2F:D9:98
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/213A16D822B411F19F2100A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.48.0/22
Signature Algorithm: sha256WithRSAEncryption
21:23:8c:cd:14:5d:c9:04:4a:a3:69:52:fa:b1:8a:1e:1b:20:
6e:a5:26:c4:cb:3d:01:20:e0:80:9c:c1:65:44:c4:81:a3:ab:
fa:4e:99:43:a5:8f:e0:f2:b3:77:73:31:80:84:ff:71:51:e2:
8f:8c:b1:68:24:7d:cd:a1:d6:8a:b8:ef:63:1a:fe:3d:af:64:
6f:62:1a:2d:0b:d6:6f:bb:4c:cd:76:11:d9:05:d3:95:a6:b5:
e4:c4:bf:24:0e:f0:35:c7:c0:05:b0:3b:04:0c:e5:ec:f4:66:
e7:57:84:58:8c:81:2c:90:c4:5c:e1:c8:da:ad:bb:94:78:15:
d0:a0:c7:5c:53:50:df:15:0e:83:75:bc:d2:36:f9:44:b4:26:
9e:f7:94:90:c2:1f:41:41:c0:65:4a:0a:10:9e:d4:84:97:97:
f5:64:c9:5b:b9:58:04:e5:0d:b4:07:4b:f5:43:3c:d4:21:fc:
86:8e:f5:c3:b4:fb:97:84:ef:57:76:e1:b2:2b:5d:72:1f:f1:
85:8e:89:af:1b:7c:84:8c:ad:68:51:81:a6:10:c1:fd:8d:53:
c9:bb:aa:a3:d9:89:0e:d5:3e:5a:2c:86:81:31:2d:9f:aa:07:
70:86:c5:23:10:b9:4f:6b:1f:3a:17:c8:2a:5a:0d:92:d8:c9:
5a:86:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:32 2026 by rpki-client