Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/8AC4F086164911F1A8774280DAE4EC9C.roa
File: 8AC4F086164911F1A8774280DAE4EC9C.roa (raw, json)
Hash identifier: TsEXsAOb1P1Z9SBrBAp6WkxB87bKGdHI81a+X5aibs8=
Subject key identifier: 60:0F:2A:F2:C1:5A:3C:BC:BC:6A:94:05:7F:6B:09:10:A9:6A:A7:4F
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 04BA
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/8AC4F086164911F1A8774280DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:07:34 +0000
ROA not before: Mon 02 Mar 2026 15:07:30 +0000
ROA not after: Sat 02 Mar 2030 15:07:30 +0000
asID: 33763
IP address blocks: 197.234.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 15:07:30 2026 GMT
Not After : Mar 2 15:07:30 2030 GMT
Subject: CN=69a5a7b6-4cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:1a:9c:2d:b8:45:15:a3:3a:ec:e9:8f:2b:
77:9e:83:6d:53:e0:8e:ba:59:f4:e2:38:43:bf:1b:
88:cf:75:05:69:f2:3a:17:40:38:3a:25:f2:03:bb:
72:a6:8a:4f:65:21:46:8f:e8:8d:0a:d2:af:d9:2e:
ab:41:4c:d9:15:86:32:1f:10:45:26:bd:81:e6:c5:
49:54:7b:24:df:ec:0a:bb:df:ac:2a:b4:f3:f3:91:
15:4b:16:b8:71:7b:bb:f2:28:e2:26:de:92:87:14:
b9:7b:5f:0e:84:9a:83:16:98:5e:2b:89:1a:aa:fc:
33:a7:c4:32:c1:af:d0:b9:c8:2b:65:d2:55:27:c2:
d9:45:b3:19:71:79:c8:81:ab:50:23:4b:e9:65:fc:
f4:4e:d6:1e:89:87:14:56:6d:e8:53:4c:42:d5:8b:
eb:8a:3c:4f:65:dd:06:af:00:02:a8:23:14:86:c4:
ca:aa:4e:ba:82:0f:f5:80:b9:92:ce:94:b4:e1:5e:
af:31:9b:34:d7:fc:52:d4:91:cb:a3:0e:1e:3c:b6:
2c:d6:56:a2:9b:d4:fc:92:e0:6c:76:b9:24:4d:cd:
85:7f:40:23:e4:57:6d:4f:56:f1:38:da:94:d4:5d:
3c:d0:34:26:20:8f:60:0d:a3:58:ba:b2:1c:2d:ac:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:2A:F2:C1:5A:3C:BC:BC:6A:94:05:7F:6B:09:10:A9:6A:A7:4F
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/8AC4F086164911F1A8774280DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
98:2b:28:dd:4f:7f:9a:aa:72:0a:8b:67:83:a6:ca:8e:40:ba:
8e:11:54:d9:df:1b:6d:78:a8:ca:f8:5d:1f:22:16:77:8f:03:
7d:eb:98:99:39:98:19:09:0a:82:ce:bd:1a:93:72:fc:e4:01:
92:b4:34:9a:96:87:9a:b6:50:a0:72:f7:ec:1c:ee:82:45:b4:
36:19:54:fc:46:e7:08:22:d8:f2:40:91:45:6c:00:ca:25:a8:
9a:61:da:b6:02:81:1a:10:af:b5:85:f7:4c:22:74:30:7a:44:
ec:dc:9c:8f:98:8f:9a:7c:ae:92:74:c3:d0:05:a5:12:4a:a9:
a4:b8:10:f2:01:3f:8a:7f:56:fb:8d:a4:e1:28:81:1c:b9:a9:
86:f3:be:a6:a5:d0:3f:c4:8f:a6:ba:35:0c:1a:7a:83:81:ec:
a3:e0:df:d8:d4:40:38:31:c2:46:4b:05:48:69:b0:31:8f:ea:
d7:e9:18:e4:00:b3:01:8b:98:13:5c:d5:c1:0e:9b:f8:e2:c2:
f7:4d:57:c7:54:32:f9:b2:10:2b:8e:36:a3:ab:55:05:0d:0b:
e8:b8:84:6f:00:d1:60:8c:95:fc:59:29:a3:82:51:b6:9a:61:
65:93:a5:5c:61:64:47:f8:06:da:3b:b8:0a:12:86:28:dd:df:
ab:8c:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:50:01 2026 by rpki-client