Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa
File: 6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa (raw, json)
Hash identifier: HbhtB0uC4Bt3yw5ALLFqBczkyPmNpkmfX/VyCDRCkCo=
Subject key identifier: 23:A8:5F:50:44:8F:1C:70:6B:B3:DA:5A:80:FF:5C:0B:FD:18:9B:C3
Certificate issuer: /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial: 016E
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 08:20:48 +0000
ROA not before: Thu 29 Jan 2026 08:20:43 +0000
ROA not after: Thu 31 Dec 2026 08:20:43 +0000
asID: 327814
IP address blocks: 102.134.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Validity
Not Before: Jan 29 08:20:43 2026 GMT
Not After : Dec 31 08:20:43 2026 GMT
Subject: CN=697b1860-975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:b7:af:03:60:c8:ac:8f:5a:92:e7:44:3e:
f6:c4:03:e8:0a:c9:06:50:11:cd:f4:b2:5d:e0:a4:
1b:7c:73:4a:be:99:f5:5b:7c:40:4c:46:21:43:39:
92:46:af:06:e0:9b:85:53:14:35:9f:7c:4b:42:8f:
ab:ed:b0:d9:be:dc:91:05:6a:d7:b2:1c:4b:68:32:
44:27:a9:35:d9:80:12:5b:75:d9:23:67:a8:2f:83:
e3:1b:97:3d:9a:cd:1f:30:db:f9:d3:b7:de:e2:51:
96:5e:7e:7b:10:d0:e7:8d:3d:78:60:e0:1e:90:42:
32:ae:5a:e7:85:33:c8:0e:d4:c1:b9:de:fd:db:4c:
05:f8:7d:5e:40:f2:d8:eb:aa:ee:96:74:61:15:95:
93:a0:cd:ca:e1:c4:18:58:70:c0:bf:14:a5:03:78:
90:23:d6:45:6f:9d:cf:8e:39:0a:d8:86:0d:f9:63:
71:e9:6c:65:3c:8c:40:41:a0:e1:ad:57:48:55:19:
ff:90:ff:07:68:be:d9:20:33:65:7b:86:86:51:b2:
48:81:77:e9:db:c7:7c:d0:ad:23:58:7f:36:b2:42:
23:42:49:7f:6a:f9:bf:3c:0f:e1:f1:8d:28:a3:71:
03:8a:ec:61:bc:10:ca:20:9f:87:ad:ab:b0:ef:d6:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:5F:50:44:8F:1C:70:6B:B3:DA:5A:80:FF:5C:0B:FD:18:9B:C3
X509v3 Authority Key Identifier:
keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:82:fa:44:d0:1c:43:f8:f4:bf:35:db:b9:b8:58:c3:f1:dd:
8a:8c:1c:38:35:b5:2b:7f:39:90:0a:bb:0a:08:5e:b8:7d:16:
06:3e:53:58:74:b8:f6:7e:c1:8e:d8:fa:55:30:f3:94:95:82:
54:91:ef:04:6c:ae:ee:1c:e1:b6:e9:3b:c4:27:c3:a5:c9:38:
b2:d8:fc:96:67:a6:bf:36:c5:ec:4c:8c:55:87:56:72:61:67:
06:58:e7:28:1e:cc:40:b5:e2:90:3e:fb:46:ed:75:38:90:cd:
b2:8e:0a:80:f1:28:7b:57:1b:cc:f9:d4:52:ab:fc:c5:6a:73:
56:53:4a:51:84:0c:0e:52:df:4e:27:75:d1:fa:b8:94:f6:65:
db:06:ca:3f:68:62:81:ff:74:a6:6c:fe:58:5c:76:d4:e1:34:
16:2a:18:5c:62:9c:f9:02:ad:ac:57:7b:03:2a:b1:e1:8c:fe:
ea:18:e1:86:10:c3:66:08:d2:51:b5:6d:2b:a1:3e:e9:bb:55:
22:e7:6c:f3:09:bc:b1:29:1e:cd:9e:5e:af:34:a5:cd:c3:5f:
29:f5:97:af:38:fe:86:d0:f8:b2:b2:20:99:63:01:bd:b1:8f:
0a:64:c6:08:48:06:fc:d7:0f:37:e9:40:ed:48:b8:b6:23:3d:
d1:42:ee:07
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjE3REZBRjExMC8GA1UEBRMoMzg0RjZBM0QwQzhBOTFDNUYyREYzN0ExMUY1QTdC
OUM1MjVCRUUxNjAeFw0yNjAxMjkwODIwNDNaFw0yNjEyMzEwODIwNDNaMBgxFjAU
BgNVBAMTDTY5N2IxODYwLTk3NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM6revA2DIrI9akudEPvbEA+gKyQZQEc30sl3gpBt8c0q+mfVbfEBMRiFD
OZJGrwbgm4VTFDWffEtCj6vtsNm+3JEFateyHEtoMkQnqTXZgBJbddkjZ6gvg+Mb
lz2azR8w2/nTt97iUZZefnsQ0OeNPXhg4B6QQjKuWueFM8gO1MG53v3bTAX4fV5A
8tjrqu6WdGEVlZOgzcrhxBhYcMC/FKUDeJAj1kVvnc+OOQrYhg35Y3HpbGU8jEBB
oOGtV0hVGf+Q/wdovtkgM2V7hoZRskiBd+nbx3zQrSNYfzayQiNCSX9q+b88D+Hx
jSijcQOK7GG8EMogn4etq7Dv1qNDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUI6hf
UESPHHBrs9pagP9cC/0Ym8MwHwYDVR0jBBgwFoAUOE9qPQyKkcXy3zehH1p7nFJb
7hYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxN0RGLzU0QkRCQjI0RTkzODExRUY5OThBNjY3OTc2MkU5NTFBL09FOXFQ
UXlLa2NYeTN6ZWhIMXA3bkZKYjdoWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09FOXFQUXlLa2NYeTN6ZWhIMXA3bkZKYjdoWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxN0RGLzU0QkRCQjI0RTkzODExRUY5OThBNjY3OTc2
MkU5NTFBLzZBMTg1OTk0RkNFQjExRjBBNUJGMkFBN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmhhwwDQYJKoZIhvcNAQEL
BQADggEBADuC+kTQHEP49L8127m4WMPx3YqMHDg1tSt/OZAKuwoIXrh9FgY+U1h0
uPZ+wY7Y+lUw85SVglSR7wRsru4c4bbpO8Qnw6XJOLLY/JZnpr82xexMjFWHVnJh
ZwZY5ygezEC14pA++0btdTiQzbKOCoDxKHtXG8z51FKr/MVqc1ZTSlGEDA5S304n
ddH6uJT2ZdsGyj9oYoH/dKZs/lhcdtThNBYqGFxinPkCraxXewMqseGM/uoY4YYQ
w2YI0lG1bSuhPum7VSLnbPMJvLEpHs2eXq80pc3DXyn1l684/obQ+LKyIJljAb2x
jwpkxghIBvzXDzfpQO1IuLYjPdFC7gc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:40 2026 by rpki-client