Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa
File: 261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa (raw, json)
Hash identifier: RDOBBGsvJhE0OkAO2/KgMOs6/gp2HdgBOnY1YQ2CAy4=
Subject key identifier: 82:6D:A6:D9:24:67:69:2C:2A:E2:09:C5:EB:8B:73:3F:57:C8:F6:71
Certificate issuer: /CN=F3626FA1AF/serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Certificate serial: C1
Authority key identifier: 5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:00:36 +0000
ROA not before: Fri 20 Feb 2026 13:00:32 +0000
ROA not after: Wed 20 Feb 2036 13:00:32 +0000
asID: 329408
IP address blocks: 102.209.156.0/22 maxlen: 22
102.209.156.0/24 maxlen: 24
102.209.157.0/24 maxlen: 24
102.209.158.0/24 maxlen: 24
102.209.159.0/24 maxlen: 24
2c0f:2f40::/32 maxlen: 32
2c0f:2f40:100::/40 maxlen: 40
2c0f:2f40:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626FA1AF, serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Validity
Not Before: Feb 20 13:00:32 2026 GMT
Not After : Feb 20 13:00:32 2036 GMT
Subject: CN=69985af4-acf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:eb:1b:ca:04:b6:15:63:60:a0:e1:a8:80:
31:c5:8f:46:74:cb:63:7b:ca:92:fd:b9:0d:a9:a4:
da:95:52:04:bd:83:38:5e:c9:ba:ac:f4:78:f9:eb:
24:8f:90:ea:7a:a0:a8:ad:52:a7:ee:27:81:a0:24:
6e:c9:f1:bf:9b:35:bc:ec:fa:6c:ee:f4:17:12:70:
84:c1:71:2a:c7:86:c1:c2:1e:c7:ff:dc:4b:d5:7f:
54:01:63:60:30:8c:c3:0f:ad:ac:ee:4c:b2:c0:38:
aa:cc:a1:14:47:56:a5:96:53:1a:d3:c0:50:91:8a:
2f:40:34:2c:c1:a8:06:de:6c:3f:c5:23:9f:70:8c:
eb:36:ea:5a:3f:03:a1:bb:71:88:6f:fc:67:85:1b:
46:a3:d2:19:51:7c:99:72:b6:5e:fb:69:58:ce:17:
29:03:8b:50:c8:3e:27:b6:71:da:0a:c1:39:cc:0a:
21:6a:04:6e:01:db:37:ca:d8:42:3f:10:a5:e9:ab:
b7:d8:c6:d2:b7:47:1c:51:5b:c1:ff:8e:60:30:dc:
bf:0f:86:7a:d8:2f:d3:7e:0a:66:52:dc:66:be:df:
8c:73:8f:15:9e:e2:36:2f:45:12:ba:11:79:9a:ef:
13:0e:ac:5e:73:e3:de:09:02:77:77:4c:58:a1:37:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:A6:D9:24:67:69:2C:2A:E2:09:C5:EB:8B:73:3F:57:C8:F6:71
X509v3 Authority Key Identifier:
keyid:5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.156.0/22
IPv6:
2c0f:2f40::/32
Signature Algorithm: sha256WithRSAEncryption
c8:1d:01:65:36:d2:3f:34:4a:7e:dd:e1:1d:50:46:71:ab:22:
d1:9d:2c:ac:f0:8a:12:94:9c:ec:43:63:19:8d:21:a5:3b:81:
d1:0f:99:c6:e2:a8:9e:53:bd:89:ea:67:11:94:ae:90:be:f6:
51:e7:82:fe:ab:c6:72:86:7d:55:d0:a8:4f:07:9c:89:e9:85:
b8:04:af:28:87:1b:88:82:29:df:2b:70:0e:d5:c6:fd:97:f4:
5d:52:eb:98:3e:ae:a8:df:7b:de:c1:d2:f6:83:22:38:25:8c:
8a:53:2b:34:46:77:f2:85:92:a4:47:92:d5:28:54:fd:62:b0:
6e:87:30:da:db:fe:13:38:78:51:f8:e6:26:79:e1:c2:ee:13:
e4:07:44:c1:41:7b:83:3e:b0:b4:71:1e:5d:d0:92:f7:31:8c:
4f:8e:d2:7d:35:9f:52:d1:1a:62:7d:64:e7:50:29:e7:74:7e:
e1:cb:6c:eb:1c:fe:b4:f8:9e:7f:13:b0:41:5b:c4:13:63:39:
c5:4c:e2:5d:ab:7f:c6:ad:1e:cb:ad:17:01:a8:81:ae:c4:ca:
78:88:7d:3f:8c:59:ae:92:fd:71:5c:67:79:71:bd:4a:fa:51:
8c:5e:28:31:4e:c9:78:d1:6b:67:fb:6d:bb:5e:5f:69:81:e8:
58:52:7a:f2
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjZGQTFBRjExMC8GA1UEBRMoNUZBMTJENzFFOTZFMkY4MThGQjkyNDkwQjM3OTZG
MEI3NzAxNjU2RDAeFw0yNjAyMjAxMzAwMzJaFw0zNjAyMjAxMzAwMzJaMBgxFjAU
BgNVBAMTDTY5OTg1YWY0LWFjZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzOusbygS2FWNgoOGogDHFj0Z0y2N7ypL9uQ2ppNqVUgS9gzheybqs9Hj5
6ySPkOp6oKitUqfuJ4GgJG7J8b+bNbzs+mzu9BcScITBcSrHhsHCHsf/3EvVf1QB
Y2AwjMMPrazuTLLAOKrMoRRHVqWWUxrTwFCRii9ANCzBqAbebD/FI59wjOs26lo/
A6G7cYhv/GeFG0aj0hlRfJlytl77aVjOFykDi1DIPie2cdoKwTnMCiFqBG4B2zfK
2EI/EKXpq7fYxtK3RxxRW8H/jmAw3L8PhnrYL9N+CmZS3Ga+34xzjxWe4jYvRRK6
EXma7xMOrF5z494JAnd3TFihNwm3AgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUgm2m
2SRnaSwq4gnF64tzP1fI9nEwHwYDVR0jBBgwFoAUX6EtceluL4GPuSSQs3lvC3cB
ZW0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2RkExLzM4Q0QxMkU4N0NCMzExRjBBNjBGNkFBQkRBRTRFQzlDL1g2RXRj
ZWx1TDRHUHVTU1FzM2x2QzNjQlpXMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1g2RXRjZWx1TDRHUHVTU1FzM2x2QzNjQlpXMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI2RkExLzM4Q0QxMkU4N0NCMzExRjBBNjBGNkFBQkRB
RTRFQzlDLzI2MTYwN0RDMEU1QzExRjFCRkRDQTlEOERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0ZwwDQQCAAIwBwMFACwP
L0AwDQYJKoZIhvcNAQELBQADggEBAMgdAWU20j80Sn7d4R1QRnGrItGdLKzwihKU
nOxDYxmNIaU7gdEPmcbiqJ5TvYnqZxGUrpC+9lHngv6rxnKGfVXQqE8HnInphbgE
ryiHG4iCKd8rcA7Vxv2X9F1S65g+rqjfe97B0vaDIjgljIpTKzRGd/KFkqRHktUo
VP1isG6HMNrb/hM4eFH45iZ54cLuE+QHRMFBe4M+sLRxHl3QkvcxjE+O0n01n1LR
GmJ9ZOdQKed0fuHLbOsc/rT4nn8TsEFbxBNjOcVM4l2rf8atHsutFwGoga7EyniI
fT+MWa6S/XFcZ3lxvUr6UYxeKDFOyXjRa2f7bbteX2mB6FhSevI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:50 2026 by rpki-client