Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/B6D306CA2D1111F1AF5753CDDAE4EC9C.roa
File: B6D306CA2D1111F1AF5753CDDAE4EC9C.roa (raw, json)
Hash identifier: i7QZyG/nMeWTcoiMA1ETxMPD9HBiOdVz3lcsX0wQVo0=
Subject key identifier: 30:D0:20:D4:29:A5:DC:5B:ED:0B:D2:2B:42:26:81:74:C0:50:27:F2
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 0284
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/B6D306CA2D1111F1AF5753CDDAE4EC9C.roa
Signing time: Tue 31 Mar 2026 14:55:53 +0000
ROA not before: Tue 31 Mar 2026 14:55:49 +0000
ROA not after: Sun 30 Mar 2036 14:55:49 +0000
asID: 37153
IP address blocks: 197.189.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 14:55:49 2026 GMT
Not After : Mar 30 14:55:49 2036 GMT
Subject: CN=69cbe079-8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:3c:70:83:a6:5b:d1:1d:1e:06:97:df:ef:
2e:16:59:d6:ae:e8:43:1d:8e:0d:38:2a:5b:07:82:
0f:f6:c3:33:97:fb:f5:ab:03:84:bb:ba:ea:f0:36:
85:f7:66:a7:62:6f:42:70:1e:c9:41:2e:a0:59:3e:
85:4a:22:25:95:b9:c1:7d:6e:5d:5c:a9:0f:71:c8:
1d:4d:39:97:7b:85:5e:01:2f:3e:8f:c9:a2:45:31:
b7:ab:57:79:7f:1f:3d:cd:6e:24:93:14:35:18:14:
40:a0:b0:fd:83:1e:34:23:27:c7:f9:b9:ed:e2:b3:
04:02:96:1e:10:53:93:0e:a4:33:b0:df:72:52:6f:
c5:5c:ff:77:d1:a2:8c:ad:8e:88:66:ce:ec:53:60:
47:59:94:ec:90:73:3c:ae:78:69:21:78:fa:e7:e2:
5b:76:24:48:e9:31:bf:30:38:e3:bd:89:bb:fa:b9:
86:98:ce:d4:3e:76:ad:24:45:6f:c7:9a:0e:ab:e7:
68:c8:b3:ca:a3:70:53:d5:1d:d1:6d:b4:a0:fc:04:
e3:b4:2a:76:bb:23:a4:38:10:ea:0a:91:d9:86:c8:
d6:cc:5c:78:bf:d2:26:05:9f:15:c2:07:86:4c:4f:
29:67:35:c5:15:d2:df:43:d8:80:76:df:8f:21:1d:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:20:D4:29:A5:DC:5B:ED:0B:D2:2B:42:26:81:74:C0:50:27:F2
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/B6D306CA2D1111F1AF5753CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.189.192.0/18
Signature Algorithm: sha256WithRSAEncryption
08:8e:e4:fc:1d:e4:91:7c:23:65:3c:7f:f3:88:37:6f:bf:bf:
94:9b:58:08:7c:5f:67:3d:a7:4b:7b:d3:e6:75:01:58:74:f9:
99:3b:a6:64:16:5b:39:30:e5:80:28:fd:ab:e3:b1:00:ea:bf:
1c:0b:7e:a9:3e:8d:8e:8d:3a:0a:89:c6:c5:49:36:e5:1f:b7:
3d:76:ea:6f:19:a4:35:3c:b6:70:2f:77:e2:d4:c6:09:ee:62:
7e:03:11:6d:c8:26:fb:b9:44:7b:c2:22:52:13:ac:0a:39:d3:
6d:97:20:a1:91:a5:b5:40:57:e1:10:88:87:a2:ec:06:27:e1:
c9:c1:24:79:5e:f1:09:14:22:9f:2c:13:03:3b:34:df:58:c7:
d1:23:a0:22:3a:c7:e2:ed:bf:48:4c:b7:78:61:3e:43:30:07:
a8:80:25:47:19:d8:be:87:9d:e7:5b:0f:e1:2c:cb:d8:a4:41:
97:fa:9a:ef:ee:7e:24:2a:ef:60:02:54:6c:68:f2:bc:32:8b:
91:5f:ca:de:de:d7:6f:d5:48:55:0f:4d:e8:03:84:f7:e4:5f:
ae:72:52:ee:9b:a9:d5:b7:9a:d0:fc:e1:dc:ff:6b:26:29:ea:
e6:51:4b:79:24:2c:49:ae:18:8a:76:06:37:7c:8b:ec:0b:ba:
33:d2:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:00 2026 by rpki-client