Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/78BA33620CAB11F19F8C1DF0DAE4EC9C.roa
File: 78BA33620CAB11F19F8C1DF0DAE4EC9C.roa (raw, json)
Hash identifier: EfhNEtZHgHwV8LkqrvptXWv59SROsB2B1QqIwRftAKo=
Subject key identifier: 4B:53:95:1F:EF:92:80:F0:19:DB:B7:BF:EF:EA:04:4A:70:32:C7:91
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 04BF
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/78BA33620CAB11F19F8C1DF0DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 09:23:23 +0000
ROA not before: Wed 18 Feb 2026 09:23:17 +0000
ROA not after: Tue 31 Dec 2030 09:23:17 +0000
asID: 15964
IP address blocks: 2001:4268::/48 maxlen: 48
2001:4268:1::/48 maxlen: 48
2001:4268:2::/48 maxlen: 48
2001:4268:200::/48 maxlen: 48
2001:4268:220::/48 maxlen: 48
2001:4268:2a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Feb 18 09:23:17 2026 GMT
Not After : Dec 31 09:23:17 2030 GMT
Subject: CN=6995850b-0631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:66:58:f2:ab:1d:9e:2f:2e:72:1c:1f:fa:
b9:8e:9f:39:2c:d9:43:89:66:a0:6c:27:a4:a1:dd:
c6:0d:75:ca:a9:6a:40:a3:de:06:b5:6d:c3:d6:4c:
8a:6e:7d:c0:be:50:81:c7:46:cb:10:f8:3a:87:29:
fc:6c:c2:50:15:1b:f0:9e:58:d3:d7:93:de:0f:fe:
9b:7b:19:2f:28:07:02:d0:a1:3e:98:85:70:d0:aa:
4e:0b:25:8d:77:fe:b6:1b:fc:ca:f9:f8:ad:7f:6b:
a8:3b:fb:69:e8:2a:ae:74:40:c3:b4:f2:ea:17:3d:
a9:c6:c2:db:ab:39:0e:ab:e2:72:e3:30:02:e6:29:
e5:3e:04:a1:af:e6:05:d8:fc:bd:33:57:07:51:92:
af:5d:99:d0:d7:3d:c3:c2:2c:20:2f:b3:80:61:0b:
d5:ab:97:5a:b7:69:ab:9c:f0:f9:d3:51:06:ac:50:
e0:f5:a1:0d:34:4d:08:9e:dd:b2:80:cb:41:d5:5f:
a8:21:97:b1:63:9d:80:49:02:54:78:db:c3:02:0c:
6d:57:cf:f4:0c:ec:47:8f:32:05:57:4d:ce:69:89:
36:42:9c:0a:13:b7:71:27:95:e1:38:91:ee:49:ef:
56:41:f4:77:0b:ca:b7:08:4e:c7:0b:12:c8:22:9c:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:95:1F:EF:92:80:F0:19:DB:B7:BF:EF:EA:04:4A:70:32:C7:91
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/78BA33620CAB11F19F8C1DF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4268::-2001:4268:2:ffff:ffff:ffff:ffff:ffff
2001:4268:200::/48
2001:4268:220::/48
2001:4268:2a0::/48
Signature Algorithm: sha256WithRSAEncryption
94:36:5e:6f:40:8e:b5:e8:58:3d:42:f6:a4:9b:69:ee:73:e7:
4b:cc:52:db:a9:cd:5f:b9:ee:dd:44:1d:b8:c9:a5:50:46:e6:
16:19:6b:ec:19:ea:63:ad:46:19:aa:e7:67:11:c6:b8:b1:c2:
d4:c7:e8:2f:87:c9:98:0f:82:4f:ed:78:cf:b8:61:40:6c:72:
a7:39:6d:8d:75:23:29:bb:ba:8d:53:84:a9:12:f6:d4:97:48:
20:58:d4:6a:ab:9f:39:01:f5:7d:29:df:f1:23:cc:3b:b3:30:
29:45:82:17:b3:aa:03:29:4d:fd:ad:04:01:cc:0a:cf:21:de:
65:80:01:79:9d:b8:9e:33:81:47:df:be:37:74:5b:89:00:d7:
7e:9f:60:7b:d2:e1:79:c9:8d:8e:eb:57:1f:9b:a0:94:2f:35:
22:85:33:f8:58:04:8b:d9:ae:7c:b7:c6:7c:9d:de:ce:9b:da:
aa:4d:80:a8:22:52:90:30:e7:96:1d:84:dc:87:23:e8:93:07:
dd:47:8c:16:70:16:3e:83:14:2e:9b:f1:31:b4:41:ed:83:16:
d3:9f:70:e1:7d:c6:94:5c:db:49:ec:de:d1:8f:f3:07:a1:ed:
d2:53:4c:06:60:da:48:17:ce:23:c0:9b:af:d7:06:29:67:bb:
42:bf:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:39 2026 by rpki-client