Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/90942EAE22B611F1B2F2A6B5DAE4EC9C.roa
File: 90942EAE22B611F1B2F2A6B5DAE4EC9C.roa (raw, json)
Hash identifier: B2oH+YLYL80SnvHNj5we7c9W00Nmw5CHyRiieTPA9Fk=
Subject key identifier: 72:12:8A:B9:59:2F:9C:E1:2D:4C:C8:85:AA:1A:E5:1C:AC:F6:04:F9
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0A40
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/90942EAE22B611F1B2F2A6B5DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 10:38:13 +0000
ROA not before: Wed 18 Mar 2026 10:38:08 +0000
ROA not after: Tue 18 Mar 2036 10:38:08 +0000
asID: 327733
IP address blocks: 102.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Mar 18 10:38:08 2026 GMT
Not After : Mar 18 10:38:08 2036 GMT
Subject: CN=69ba8095-f29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:be:24:7a:cd:f5:04:9f:8c:60:dc:d4:63:
f8:92:13:01:a5:4e:50:9c:51:95:f4:33:d3:88:79:
1d:89:80:45:3b:5c:09:fb:ab:28:4b:ef:ae:a1:e5:
30:85:e2:5f:1d:63:28:87:96:72:18:f2:4f:89:92:
c2:da:f3:1f:17:32:96:69:fd:17:bc:37:cb:f9:42:
d9:d6:b5:ed:27:a2:f8:48:74:6e:06:8f:3b:7e:82:
ec:aa:12:f9:76:aa:36:03:72:38:1d:3c:65:39:9e:
2d:42:5d:e3:a1:3a:6c:26:4d:95:4b:28:8c:de:0b:
79:dc:9c:be:0d:8b:45:82:7d:75:9b:fc:25:71:8c:
a8:99:24:17:1b:e6:92:a6:32:20:93:b7:ec:01:f8:
91:cd:4e:81:7d:b9:05:3c:45:a7:d6:10:88:13:bf:
dd:ef:c9:7c:e0:c4:58:be:0d:36:42:d9:9f:fb:13:
23:47:ae:09:26:f9:6a:32:b0:47:bb:cc:e7:7d:cf:
29:e7:d4:04:95:28:9f:f2:4b:75:c2:bb:cf:3d:e9:
43:f2:ce:f1:d6:d9:d0:bc:ef:6c:2b:f6:3d:14:c2:
b3:3b:e4:67:00:77:cc:62:d4:b6:80:26:78:61:ad:
28:8b:f8:0e:da:1a:34:f5:c3:33:86:b3:3c:51:94:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:8A:B9:59:2F:9C:E1:2D:4C:C8:85:AA:1A:E5:1C:AC:F6:04:F9
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/90942EAE22B611F1B2F2A6B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4d:af:4a:af:cf:82:7c:58:26:d5:9c:7c:60:32:54:33:5b:
21:36:3c:74:fe:43:49:40:86:d5:7e:a8:6c:9e:0b:3b:16:70:
ce:ce:bd:34:1a:e4:12:53:5c:1f:fc:86:a3:40:6d:d3:2c:aa:
21:18:93:fd:f5:95:1c:a3:c0:15:bd:6a:8a:95:7a:d3:8e:20:
b4:61:a1:2f:aa:1b:98:3e:32:58:6f:22:ed:86:47:57:61:33:
c8:ec:1c:58:0d:17:9a:35:23:4c:07:91:8f:dc:90:14:1e:74:
61:b6:54:de:7b:80:57:5a:df:76:22:46:8d:9d:ab:73:c1:e0:
bf:ac:a5:b8:72:e3:ef:18:b1:7f:b0:03:b2:c9:1e:5e:a5:3b:
31:c5:25:29:a0:39:a4:44:79:75:63:98:c1:e4:65:46:76:fe:
2d:ee:8c:ed:68:dc:43:7d:80:ba:6f:3d:d0:03:47:b8:3c:ff:
52:0b:ff:29:40:ba:9a:08:39:df:d8:d0:64:7f:62:e9:32:36:
7a:e2:87:f4:11:8e:ff:39:df:5e:27:34:14:8f:e4:a2:e3:75:
6b:9d:84:35:4e:60:38:8c:c4:92:0d:bd:8f:79:7c:88:5e:c4:
63:bf:91:91:ad:34:40:07:a7:ea:e6:5a:11:cb:43:e1:04:0c:
93:4e:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:17:58 2026 by rpki-client