Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/691543FE22B611F1AD41E6B3DAE4EC9C.roa
File: 691543FE22B611F1AD41E6B3DAE4EC9C.roa (raw, json)
Hash identifier: OcXC+95ot7At7Mu6jgi4eynHpzMzzE33mDt+ILGM0mU=
Subject key identifier: 75:BA:01:7C:FC:92:0B:3F:B1:F7:81:BA:1F:47:E7:7C:E7:8A:30:0F
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0A3E
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/691543FE22B611F1AD41E6B3DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 10:37:07 +0000
ROA not before: Wed 18 Mar 2026 10:37:02 +0000
ROA not after: Tue 18 Mar 2036 10:37:02 +0000
asID: 327733
IP address blocks: 102.212.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 01:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622 (0xa3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Mar 18 10:37:02 2026 GMT
Not After : Mar 18 10:37:02 2036 GMT
Subject: CN=69ba8053-e4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:23:ee:13:7a:99:fb:fc:93:04:f6:73:78:
4b:8e:26:e5:fa:11:dd:e1:94:b6:6b:f2:d4:e7:78:
96:90:e9:45:b5:1b:2d:76:ad:70:71:a0:55:ce:5f:
59:63:c7:d9:b7:1c:06:2b:17:3d:bf:79:15:96:9d:
4a:27:c3:a4:f2:1b:03:d3:0e:48:ca:ea:6d:31:b5:
f6:80:71:9f:d5:6f:3a:30:3a:8e:c5:8d:56:7d:b3:
e3:99:a9:bf:05:73:62:8b:57:df:d6:fb:2d:12:c4:
fb:d9:79:43:d4:3d:7b:4a:f4:d5:ba:0c:bd:95:6e:
91:a8:67:01:57:95:d7:67:75:0f:6e:a2:13:54:1a:
f9:77:ae:04:05:89:cc:e9:19:61:2f:ea:9f:0c:19:
ff:3d:e1:57:96:88:7a:ed:b8:d1:29:68:d5:8a:f4:
ea:3d:16:a4:c6:20:e8:6b:e4:5a:62:e0:f4:c3:de:
dc:da:39:5d:0a:c1:bf:5f:1f:a3:62:bc:34:37:91:
74:4b:55:bc:ac:bb:a7:63:93:9a:68:d4:ad:10:f2:
db:ea:77:85:28:fc:ab:d0:ad:13:cd:58:7f:39:f0:
9e:c6:e0:20:ec:46:08:d5:3a:ea:56:f8:de:be:e8:
0e:2b:38:f0:07:62:38:70:fe:c9:c9:4f:70:ac:ff:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:01:7C:FC:92:0B:3F:B1:F7:81:BA:1F:47:E7:7C:E7:8A:30:0F
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/691543FE22B611F1AD41E6B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:40:57:18:04:7e:92:e8:b5:92:b3:eb:91:9e:5e:ae:99:f6:
e7:3f:4f:76:1b:c5:0a:07:9d:eb:7e:cb:02:6a:f3:68:51:01:
04:1e:20:f1:4d:3b:8e:19:92:2b:13:e8:d6:25:ab:56:ba:e1:
f8:72:f6:b8:86:65:42:0a:b9:f7:1b:52:b5:d9:04:4d:0a:df:
68:61:5d:fa:4e:c7:77:f4:d7:4f:cc:e1:ca:0e:49:27:b3:55:
51:f6:7e:ae:f3:0a:3c:b6:af:29:f5:36:b7:59:62:f7:17:64:
2a:19:6e:ef:d4:85:47:22:a0:8c:4d:38:a6:22:46:3b:f3:d0:
61:13:6a:72:5e:5b:8f:fe:ff:d0:3d:a9:0e:4a:9d:5d:55:fb:
4f:04:27:ab:b1:28:8a:36:2e:bb:c5:83:94:98:6c:40:51:81:
c8:b3:16:50:32:ac:c3:ca:16:77:59:9f:f8:c5:57:3a:8c:20:
b4:47:23:12:19:13:29:91:8d:05:ad:53:85:7e:7b:9b:4a:b6:
13:f5:30:66:a0:91:5e:37:2c:6b:29:bd:c1:5c:4f:49:81:c9:
66:54:95:ca:05:1b:c1:ad:fd:98:ba:9e:fb:8f:46:13:2f:56:
1b:f7:76:cc:1c:fb:97:fd:98:34:41:c6:39:b3:4d:7e:6c:83:
4f:94:32:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yNjAzMTgxMDM3MDJaFw0zNjAzMTgxMDM3MDJaMBgxFjAU
BgNVBAMTDTY5YmE4MDUzLWU0ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC56yPuE3qZ+/yTBPZzeEuOJuX6Ed3hlLZr8tTneJaQ6UW1Gy12rXBxoFXO
X1ljx9m3HAYrFz2/eRWWnUonw6TyGwPTDkjK6m0xtfaAcZ/VbzowOo7FjVZ9s+OZ
qb8Fc2KLV9/W+y0SxPvZeUPUPXtK9NW6DL2VbpGoZwFXlddndQ9uohNUGvl3rgQF
iczpGWEv6p8MGf894VeWiHrtuNEpaNWK9Oo9FqTGIOhr5Fpi4PTD3tzaOV0Kwb9f
H6NivDQ3kXRLVbysu6djk5po1K0Q8tvqd4Uo/KvQrRPNWH858J7G4CDsRgjVOupW
+N6+6A4rOPAHYjhw/snJT3Cs/wAJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdboB
fPySCz+x94G6H0fnfOeKMA8wHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4
QUVBMjI4LzY5MTU0M0ZFMjJCNjExRjFBRDQxRTZCM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1DAwDQYJKoZIhvcNAQEL
BQADggEBACpAVxgEfpLotZKz65GeXq6Z9uc/T3YbxQoHnet+ywJq82hRAQQeIPFN
O44ZkisT6NYlq1a64fhy9riGZUIKufcbUrXZBE0K32hhXfpOx3f010/M4coOSSez
VVH2fq7zCjy2ryn1NrdZYvcXZCoZbu/UhUcioIxNOKYiRjvz0GETanJeW4/+/9A9
qQ5KnV1V+08EJ6uxKIo2LrvFg5SYbEBRgcizFlAyrMPKFndZn/jFVzqMILRHIxIZ
EymRjQWtU4V+e5tKthP1MGagkV43LGspvcFcT0mByWZUlcoFG8Gt/Zi6nvuPRhMv
Vhv3dswc+5f9mDRBxjmzTX5sg0+UMjI=
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:54:40 2026 by rpki-client