Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/15B876EE277111F1B66636C4DAE4EC9C.roa
File: 15B876EE277111F1B66636C4DAE4EC9C.roa (raw, json)
Hash identifier: YUSH5OdcLTebUTDCuoOe6y6BSHYiSr9i3OG42WzbyWI=
Subject key identifier: 41:18:34:E6:CA:8C:64:1B:0E:94:06:15:C0:C2:42:03:8E:D7:C5:77
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 04CC
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/15B876EE277111F1B66636C4DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 11:03:28 +0000
ROA not before: Tue 24 Mar 2026 11:03:22 +0000
ROA not after: Tue 19 Mar 2030 11:03:22 +0000
asID: 53755
IP address blocks: 102.212.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Mar 24 11:03:22 2026 GMT
Not After : Mar 19 11:03:22 2030 GMT
Subject: CN=69c26f80-6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:93:42:68:91:ec:9f:6b:39:61:c0:a4:60:
eb:3d:e2:74:b0:0b:b2:b0:f8:b3:f6:14:fc:63:b6:
a9:95:bc:01:d3:56:a2:a8:1c:cc:8d:89:11:40:02:
c1:fe:26:bc:1e:67:73:2f:1c:86:4c:9b:09:1f:37:
d3:18:3a:3d:6f:18:62:46:e8:5e:7a:0e:91:ed:67:
86:07:ff:1c:32:7e:0d:d8:34:6a:6a:fe:d8:a8:de:
a3:dc:8e:bb:40:03:a7:cb:15:dc:61:6a:84:6e:3d:
98:61:5a:eb:4a:c4:6b:5d:05:5b:1f:90:11:aa:d8:
89:93:90:3e:7b:c2:f2:f3:f6:6b:45:8e:82:93:64:
37:d9:c4:2a:bd:86:3d:a1:c2:7b:f2:8b:81:ad:9a:
11:b9:b6:e5:b6:39:bd:1b:04:7d:73:d5:82:81:62:
9b:18:73:ad:c2:22:28:66:0b:53:51:05:04:6b:87:
1e:54:b2:87:5f:c2:0d:b5:f2:b9:60:38:c2:9b:3b:
bb:0b:8c:44:23:8a:48:72:b5:05:15:ee:01:41:45:
39:c0:a0:2a:84:ed:a5:ba:02:7c:26:a8:1d:27:78:
18:93:84:f4:84:26:81:3b:84:0c:97:bc:74:af:f1:
7f:cc:9d:be:57:e5:76:33:fc:09:9f:50:35:ef:35:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:34:E6:CA:8C:64:1B:0E:94:06:15:C0:C2:42:03:8E:D7:C5:77
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/15B876EE277111F1B66636C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.6.0/24
Signature Algorithm: sha256WithRSAEncryption
52:93:84:f0:52:86:99:e5:6f:01:27:99:d0:b2:49:1e:a5:6e:
f0:41:df:d1:53:b8:a6:f6:17:1d:c3:e8:c3:6e:2e:d4:3d:33:
0e:c4:8b:16:ce:1e:09:0a:f6:8a:23:42:7c:1d:f8:ae:ef:65:
34:d1:de:d4:01:f1:59:32:5c:c9:82:86:2d:73:ec:2a:45:57:
b8:4f:d0:f9:a1:9d:3a:6a:ce:6b:e4:f8:ee:be:c8:b5:c2:cb:
a9:fd:1a:c7:93:8e:ed:e9:6e:0d:af:7f:c0:51:18:59:c4:d5:
f1:9f:40:fb:cf:1d:7d:54:c9:04:ba:12:4b:5f:b2:3b:f1:e3:
0f:13:8c:b5:ae:a4:70:80:97:ec:ab:3f:6e:c6:57:8d:90:9f:
4b:3d:c0:c2:a8:2d:0c:b6:18:63:a8:aa:e0:d7:6c:4b:89:bd:
1c:28:78:62:62:64:eb:ea:b8:c4:0e:42:74:1d:d9:18:c4:09:
a4:a6:00:0f:3a:15:0c:c2:c3:14:dd:e1:3e:90:fa:9f:0b:ea:
96:79:ad:82:63:66:68:f3:60:05:74:5e:ca:02:b0:43:7f:c5:
64:5a:e6:c0:dd:a4:f6:25:a8:95:2d:3b:3a:bc:e2:f1:cb:ce:
19:5a:56:57:10:54:0d:f5:4f:fc:f1:81:5d:cd:db:62:a5:b2:
ae:a2:df:5c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNjAzMjQxMTAzMjJaFw0zMDAzMTkxMTAzMjJaMBgxFjAU
BgNVBAMTDTY5YzI2ZjgwLTY4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDq7ZNCaJHsn2s5YcCkYOs94nSwC7Kw+LP2FPxjtqmVvAHTVqKoHMyNiRFA
AsH+JrweZ3MvHIZMmwkfN9MYOj1vGGJG6F56DpHtZ4YH/xwyfg3YNGpq/tio3qPc
jrtAA6fLFdxhaoRuPZhhWutKxGtdBVsfkBGq2ImTkD57wvLz9mtFjoKTZDfZxCq9
hj2hwnvyi4GtmhG5tuW2Ob0bBH1z1YKBYpsYc63CIihmC1NRBQRrhx5Usodfwg21
8rlgOMKbO7sLjEQjikhytQUV7gFBRTnAoCqE7aW6AnwmqB0neBiThPSEJoE7hAyX
vHSv8X/Mnb5X5XYz/AmfUDXvNZgLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQRg0
5sqMZBsOlAYVwMJCA47XxXcwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDLzE1Qjg3NkVFMjc3MTExRjFCNjY2MzZDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1AYwDQYJKoZIhvcNAQEL
BQADggEBAFKThPBShpnlbwEnmdCySR6lbvBB39FTuKb2Fx3D6MNuLtQ9Mw7EixbO
HgkK9oojQnwd+K7vZTTR3tQB8VkyXMmChi1z7CpFV7hP0PmhnTpqzmvk+O6+yLXC
y6n9GseTju3pbg2vf8BRGFnE1fGfQPvPHX1UyQS6Ektfsjvx4w8TjLWupHCAl+yr
P27GV42Qn0s9wMKoLQy2GGOoquDXbEuJvRwoeGJiZOvquMQOQnQd2RjECaSmAA86
FQzCwxTd4T6Q+p8L6pZ5rYJjZmjzYAV0XsoCsEN/xWRa5sDdpPYlqJUtOzq84vHL
zhlaVlcQVA31T/zxgV3N22Klsq6i31w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:00:13 2026 by rpki-client