Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/30569F3C0C9411F1BE9799E5DAE4EC9C.roa
File: 30569F3C0C9411F1BE9799E5DAE4EC9C.roa (raw, json)
Hash identifier: SaqHcwD+guZ1feoju2N/bp3ZmAIiJzcI5uUiy12YasU=
Subject key identifier: C0:C6:7C:B9:69:B5:66:7E:E2:3E:7A:5B:98:6F:AC:E0:7D:9F:79:44
Certificate issuer: /CN=F36412BEAF/serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Certificate serial: 02
Authority key identifier: 00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/30569F3C0C9411F1BE9799E5DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 06:36:43 +0000
ROA not before: Wed 18 Feb 2026 06:36:32 +0000
ROA not after: Fri 18 Feb 2028 06:36:32 +0000
asID: 328531
IP address blocks: 102.36.181.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36412BEAF, serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Validity
Not Before: Feb 18 06:36:32 2026 GMT
Not After : Feb 18 06:36:32 2028 GMT
Subject: CN=69955dfb-02cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:b7:1b:9a:a2:f7:bb:82:0e:c5:7d:95:92:
0f:b3:e1:7f:30:6f:64:c5:7b:34:65:ae:5a:67:ab:
1a:89:e8:6c:41:58:16:d9:6d:f4:ff:46:75:ff:31:
e7:46:32:5f:6c:68:08:60:ab:1f:7f:78:80:58:7b:
f2:e7:38:e9:c4:e2:27:8c:cd:4c:f5:9d:66:eb:f1:
5a:7b:d7:45:22:cb:3b:4c:59:5c:3f:b4:f6:d9:3c:
49:7a:28:0d:70:93:39:0a:40:0a:ec:71:2b:13:d9:
ee:15:cc:13:93:a5:8c:d5:cf:7f:78:e7:95:5b:34:
f2:5d:1c:5a:aa:6b:bb:4b:f6:d0:56:30:58:67:57:
5e:34:d3:3f:7d:0d:90:a1:8c:26:d9:ad:94:37:06:
44:04:58:84:3f:ba:d8:72:16:50:1b:db:e8:39:d8:
4e:1f:79:3e:0d:d2:d4:40:1c:26:f8:c1:02:72:6e:
03:93:46:c1:a5:5a:05:25:38:79:d2:2f:f0:09:a8:
3f:05:0f:b7:55:ca:7d:b1:0c:d6:aa:9f:f5:c2:51:
30:16:82:5a:ad:c0:a2:c1:b1:43:6e:86:32:36:8f:
4f:4e:8c:b7:55:1e:51:54:70:ed:6c:4a:48:4d:98:
ed:ab:19:88:a3:d4:c3:c6:12:75:b2:47:b9:77:45:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:7C:B9:69:B5:66:7E:E2:3E:7A:5B:98:6F:AC:E0:7D:9F:79:44
X509v3 Authority Key Identifier:
keyid:00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/30569F3C0C9411F1BE9799E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.181.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5e:c9:e5:3d:c8:dd:95:be:16:c9:d6:a9:fc:c5:9a:1d:5e:
e9:35:07:de:30:8c:ed:f1:9f:ef:05:a4:49:a6:ea:7c:b4:42:
57:8b:71:ae:fa:56:3c:17:59:e1:f9:56:90:bc:c4:13:78:c8:
f0:e0:ac:e7:bf:12:1b:bb:3f:73:fd:10:67:ca:a0:83:95:d6:
ee:48:10:8f:bf:0f:52:59:e4:0b:81:be:f6:d2:43:f6:3d:8a:
d8:f6:e6:f7:1f:1b:fc:3f:f2:0f:9e:8b:6d:fe:72:4b:72:98:
e2:d6:6c:73:5b:64:2a:6e:ff:c8:b1:a2:ba:f3:61:15:78:17:
54:c6:48:b9:80:92:5f:48:e1:9a:f5:90:6c:4d:a7:3f:32:62:
dd:3f:db:4b:53:73:eb:f7:d3:8d:27:27:08:dd:d8:c8:e7:ce:
e1:3a:b7:0a:e8:6a:e3:9f:8f:cf:b8:96:c9:9c:9d:5c:bc:fd:
35:1e:84:ec:67:dc:4b:5f:9c:c6:93:16:f2:b7:53:6e:8b:ab:
cf:8a:6e:6f:47:29:99:c4:07:aa:d2:27:db:4a:55:3b:e7:7a:
e8:ac:95:71:fc:2f:cc:cf:29:bb:7c:7b:ee:5c:6d:3e:16:31:
9f:6c:a0:e0:27:7c:a6:d0:ba:9f:77:0c:6d:b8:2c:39:0f:75:
39:c2:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:14 2026 by rpki-client