Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa
File: ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa (raw, json)
Hash identifier: Lg3vE54geb/W/HK9e5QX9UvaE5HfR3V6ZT67toBAsnk=
Subject key identifier: B9:DB:61:02:8B:59:AA:15:C7:5D:A9:EB:96:F2:70:DD:D7:99:CC:7E
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0A44
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 10:40:49 +0000
ROA not before: Wed 18 Mar 2026 10:40:44 +0000
ROA not after: Tue 18 Mar 2036 10:40:44 +0000
asID: 327733
IP address blocks: 102.212.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2628 (0xa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Mar 18 10:40:44 2026 GMT
Not After : Mar 18 10:40:44 2036 GMT
Subject: CN=69ba8131-1046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:c3:7d:39:94:c1:59:47:9a:95:17:a5:81:
09:35:a1:cf:fd:9f:f7:5a:e9:11:3d:53:9d:3e:5f:
65:31:05:ff:31:d5:29:15:b2:9a:50:c6:15:cf:a4:
11:07:cb:d4:2e:a3:26:a7:21:30:3b:5c:7a:fb:be:
bd:50:a3:3c:98:fd:5d:e4:d6:ca:99:36:1c:f1:03:
e8:93:b8:09:60:f6:ff:e1:24:4d:eb:ee:ff:37:d7:
dc:00:be:1f:99:72:dd:e9:4e:5e:1c:fe:e8:d7:28:
92:bb:9e:77:d3:b7:ce:36:60:ca:a3:e3:37:4e:65:
10:13:64:de:4e:48:b1:da:9f:98:cd:6e:a1:c2:a2:
57:1d:29:fd:c2:61:39:29:f1:91:15:ee:49:a4:df:
05:90:9f:a1:d6:ce:13:7a:cf:e3:fb:b4:7f:ed:bf:
d8:e3:1d:63:0b:43:03:98:ed:3d:60:99:b2:52:20:
a6:7e:50:cb:0a:c5:5d:59:be:b6:b5:5c:41:80:00:
00:2f:20:18:0a:38:33:05:89:87:df:fe:dd:04:76:
24:1c:ec:80:61:0a:92:40:22:d7:df:21:ed:b6:df:
2f:cc:5c:2c:70:44:56:49:c2:3b:44:46:15:a7:cb:
52:ba:70:82:b8:f8:96:9c:f0:f9:89:d4:4c:cb:82:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DB:61:02:8B:59:AA:15:C7:5D:A9:EB:96:F2:70:DD:D7:99:CC:7E
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.51.0/24
Signature Algorithm: sha256WithRSAEncryption
24:77:59:72:be:07:7d:63:b6:7f:ac:c5:d8:3e:3f:e4:fe:cf:
f0:e5:31:79:fd:d8:fd:b8:4c:f4:17:d4:24:e6:28:05:be:cd:
fd:57:08:cb:e1:18:62:aa:91:69:20:2b:b9:b7:3d:16:44:38:
b7:52:bf:9b:03:c5:23:5f:99:21:1f:37:65:7f:54:12:f6:92:
56:0f:3e:55:ed:a6:c8:5a:ba:b3:e1:60:ae:2c:b6:6c:58:f1:
da:88:81:99:a0:fe:db:70:01:00:ec:5a:e9:11:52:52:f5:4a:
b5:e4:fd:02:c3:8c:a7:1e:22:36:53:6a:35:ac:c0:16:64:8d:
53:9f:72:72:11:8d:78:e3:50:07:39:d4:e3:bb:15:4a:8b:ec:
a3:40:e1:82:b6:d7:e9:f8:b3:d9:ad:d7:05:33:70:c5:d9:66:
30:5b:1c:94:71:2c:49:c0:eb:3b:e4:43:76:01:9a:0a:0d:be:
2e:59:dd:ce:9e:98:eb:16:c6:a4:ef:09:f6:57:25:63:f4:e8:
48:67:d3:99:85:2f:01:66:f9:04:a2:d4:4e:5b:3d:d4:12:17:
ce:98:67:4f:6c:32:93:48:58:b3:c8:89:05:d5:07:f1:32:96:
5e:81:43:dc:58:a6:c6:5d:83:19:05:ea:e0:2a:80:2a:a7:6b:
8a:fd:33:0b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yNjAzMTgxMDQwNDRaFw0zNjAzMTgxMDQwNDRaMBgxFjAU
BgNVBAMTDTY5YmE4MTMxLTEwNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDArsN9OZTBWUealRelgQk1oc/9n/da6RE9U50+X2UxBf8x1SkVsppQxhXP
pBEHy9QuoyanITA7XHr7vr1QozyY/V3k1sqZNhzxA+iTuAlg9v/hJE3r7v8319wA
vh+Zct3pTl4c/ujXKJK7nnfTt842YMqj4zdOZRATZN5OSLHan5jNbqHColcdKf3C
YTkp8ZEV7kmk3wWQn6HWzhN6z+P7tH/tv9jjHWMLQwOY7T1gmbJSIKZ+UMsKxV1Z
vra1XEGAAAAvIBgKODMFiYff/t0EdiQc7IBhCpJAItffIe223y/MXCxwRFZJwjtE
RhWny1K6cIK4+Jac8PmJ1EzLguZdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUudth
AotZqhXHXanrlvJw3deZzH4wHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4
QUVBMjI4L0VEOEQ5MERDMjJCNjExRjFCRkVGQzlCN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1DMwDQYJKoZIhvcNAQEL
BQADggEBACR3WXK+B31jtn+sxdg+P+T+z/DlMXn92P24TPQX1CTmKAW+zf1XCMvh
GGKqkWkgK7m3PRZEOLdSv5sDxSNfmSEfN2V/VBL2klYPPlXtpshaurPhYK4stmxY
8dqIgZmg/ttwAQDsWukRUlL1SrXk/QLDjKceIjZTajWswBZkjVOfcnIRjXjjUAc5
1OO7FUqL7KNA4YK21+n4s9mt1wUzcMXZZjBbHJRxLEnA6zvkQ3YBmgoNvi5Z3c6e
mOsWxqTvCfZXJWP06Ehn05mFLwFm+QSi1E5bPdQSF86YZ09sMpNIWLPIiQXVB/Ey
ll6BQ9xYpsZdgxkF6uAqgCqna4r9Mws=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:38 2026 by rpki-client