Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/B61D2CFA108411F1ADE2BA9FDAE4EC9C.roa
File: B61D2CFA108411F1ADE2BA9FDAE4EC9C.roa (raw, json)
Hash identifier: 2qZXAQI56bgc2DXv4vRTW6vQ2QZ8YolH3jT9pqajF1U=
Subject key identifier: 56:98:62:1F:6A:49:20:CE:30:E1:3A:89:86:FF:23:0D:13:F1:A0:69
Certificate issuer: /CN=F3633DE5AF/serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
Certificate serial: 04
Authority key identifier: 5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/B61D2CFA108411F1ADE2BA9FDAE4EC9C.roa
Signing time: Mon 23 Feb 2026 06:56:00 +0000
ROA not before: Mon 23 Feb 2026 06:55:55 +0000
ROA not after: Mon 01 Mar 2027 06:55:55 +0000
asID: 328555
IP address blocks: 102.36.228.0/24 maxlen: 24
102.36.229.0/24 maxlen: 24
102.36.230.0/24 maxlen: 24
102.36.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 03:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633DE5AF, serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
Validity
Not Before: Feb 23 06:55:55 2026 GMT
Not After : Mar 1 06:55:55 2027 GMT
Subject: CN=699bfa00-fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:55:35:17:24:cd:f9:5d:8b:60:18:51:22:
88:94:9a:05:90:dd:52:0e:99:98:9a:8e:45:a9:09:
09:1d:06:fb:85:82:08:1f:07:96:dc:ab:10:29:01:
33:b8:5e:04:ea:c5:93:d1:6e:e3:12:4b:55:d6:6f:
31:62:25:2d:04:c5:30:22:f8:c0:07:e3:c8:5a:6c:
e4:e4:40:b2:f6:0c:da:b9:7a:2a:52:fa:fe:97:fb:
4b:b4:bc:42:8e:83:26:d2:51:f7:7d:56:ce:d0:69:
1c:91:d7:35:b3:2c:5d:5d:74:66:84:8e:12:97:d3:
a1:aa:0d:b6:19:44:51:c8:14:44:7b:e2:35:74:3b:
03:17:c1:dc:4a:a9:32:d3:03:97:16:9c:e3:50:d6:
9d:c0:96:db:56:95:b6:0e:76:13:72:2b:72:58:cd:
32:82:81:75:00:9d:35:20:60:0d:4d:e5:c5:32:a3:
b1:f7:51:f0:06:7b:18:c8:c3:e8:1b:cf:5e:e8:32:
7b:3b:12:ae:81:60:b0:13:2c:ad:7f:6c:6c:3a:ac:
6c:28:e1:aa:60:87:17:89:ba:43:30:4b:77:de:0b:
eb:b0:a7:a8:96:01:f7:23:87:6c:7f:6b:d7:8d:99:
1f:20:47:08:c1:29:1d:f2:69:c2:48:9b:06:07:b0:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:62:1F:6A:49:20:CE:30:E1:3A:89:86:FF:23:0D:13:F1:A0:69
X509v3 Authority Key Identifier:
keyid:5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/B61D2CFA108411F1ADE2BA9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.228.0/22
Signature Algorithm: sha256WithRSAEncryption
16:f9:cf:45:57:d0:b0:f2:74:9a:74:0a:e3:24:92:88:df:28:
86:ef:b3:4f:89:91:15:e4:bb:d8:46:5e:8e:37:6f:15:58:f3:
d1:9b:3e:dd:8e:e2:c2:64:4f:af:92:db:d8:ed:d7:fe:1b:d4:
e3:a9:01:ed:7f:55:fd:6e:22:4c:21:2f:70:17:54:84:9d:7d:
d1:df:a4:df:f7:6e:de:99:e9:f1:71:d6:cf:06:5e:8d:e7:66:
3a:89:aa:23:16:95:11:e4:9b:58:e9:d4:cc:11:4a:23:92:92:
1b:28:d0:94:78:4e:52:a4:07:9b:dd:26:b4:d1:3c:bb:58:7a:
12:db:51:37:69:ef:53:4c:92:5f:84:53:54:ac:d0:6f:56:a4:
98:35:88:bc:93:69:6d:40:1b:9d:39:3b:12:75:a7:33:38:b7:
76:78:73:75:4e:9b:f8:91:4b:f9:26:df:37:e2:32:8b:b4:b4:
b8:e6:4c:e7:38:4b:c7:cd:d6:df:b6:b6:72:66:74:9c:db:64:
dd:a5:d4:69:41:a6:5f:a9:dc:e5:42:7a:e6:58:63:a6:eb:67:
0c:20:5d:ef:ce:ba:b0:95:aa:f0:8d:08:0f:6c:ff:52:03:cb:
16:7b:11:82:00:d3:0d:b3:d3:af:f4:16:f0:e9:61:8b:59:4e:
69:9a:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:40 2026 by rpki-client