Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/32250A2011A711F1A9FD248BDAE4EC9C.roa
File: 32250A2011A711F1A9FD248BDAE4EC9C.roa (raw, json)
Hash identifier: y4wM2ILtLtdNcUDwpGv7OoxbdddVN1pR20cZyIkpuQc=
Subject key identifier: 84:A6:FC:F8:C3:DC:43:2C:7C:26:1D:F4:7B:F3:E9:46:FB:5A:A4:30
Certificate issuer: /CN=F36A1387AF/serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Certificate serial: 0270
Authority key identifier: A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/32250A2011A711F1A9FD248BDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 17:35:22 +0000
ROA not before: Tue 24 Feb 2026 17:35:17 +0000
ROA not after: Sun 01 Jan 2040 17:35:17 +0000
asID: 329437
IP address blocks: 102.204.88.0/22 maxlen: 24
2c0f:3840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1387AF, serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Validity
Not Before: Feb 24 17:35:17 2026 GMT
Not After : Jan 1 17:35:17 2040 GMT
Subject: CN=699de15a-f04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:1d:dd:c4:00:11:39:32:47:7d:4b:e8:74:
c9:8b:3a:5c:82:4a:36:4e:9f:cb:3f:15:69:54:83:
e3:05:93:73:06:e0:d6:e5:2d:f2:93:1d:68:18:fb:
db:ff:0b:c7:84:9b:e1:45:5a:ae:d2:bd:1c:6c:44:
ae:3e:f9:8d:51:56:7d:47:a7:ef:18:27:82:37:be:
b9:94:9b:29:22:27:30:ad:34:33:83:92:d1:78:db:
3a:b4:73:95:3e:e8:fd:4f:55:53:07:a4:5c:1d:28:
60:d3:f8:a4:88:dc:b6:3f:59:a4:c0:6a:a3:37:ca:
97:39:e3:98:69:7e:45:8f:52:d4:89:e3:8b:53:35:
a6:73:ab:0c:c6:6c:eb:a6:6f:9f:79:61:a4:9b:b0:
5b:63:0a:09:00:7a:42:98:81:ae:64:05:58:14:13:
3c:00:d1:e2:2f:2d:50:1a:53:0d:e0:81:81:58:4b:
4c:71:18:2d:20:33:9b:d7:00:15:a9:ae:ab:79:2e:
85:81:dd:fc:52:e8:7e:e8:b2:03:5e:48:1d:b9:85:
e7:f6:c0:40:81:5d:90:c0:6a:67:8f:b1:c4:23:4a:
45:c8:7f:ac:e8:ea:37:27:14:93:3c:98:66:54:10:
2b:1d:58:42:2e:75:86:c0:3d:b9:22:1a:91:fe:77:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:FC:F8:C3:DC:43:2C:7C:26:1D:F4:7B:F3:E9:46:FB:5A:A4:30
X509v3 Authority Key Identifier:
keyid:A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/32250A2011A711F1A9FD248BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.88.0/22
IPv6:
2c0f:3840::/32
Signature Algorithm: sha256WithRSAEncryption
4c:d6:e7:16:22:ab:c9:da:35:7b:8a:5b:bf:b4:4a:fc:0c:bd:
b6:53:f8:03:d4:cb:a9:59:ed:08:6b:9b:45:31:82:17:c7:3d:
a5:d7:4b:0a:a6:35:14:a9:b0:55:6d:16:18:32:10:cf:87:90:
c0:8d:bd:a2:3b:3d:04:c8:ad:c5:03:70:63:dc:39:22:0c:21:
60:6f:c4:cb:91:6e:37:b4:9b:0c:36:12:52:11:8c:ea:92:e0:
d2:0f:6d:d5:87:19:61:2f:01:91:1d:aa:9a:71:13:03:80:fb:
81:86:e9:f3:ea:c1:c6:40:de:88:42:37:b2:23:35:9b:72:c5:
4c:1d:be:88:d4:b8:42:64:b0:04:c3:79:c0:17:2c:21:b0:1e:
b5:06:17:af:5e:40:42:4e:b0:01:c9:3a:d3:9f:ff:29:63:0f:
1b:83:e5:5a:c7:6f:22:58:3d:bc:6b:83:91:bf:8d:b0:79:41:
8e:b9:1d:5c:0a:cd:f7:e5:55:ce:0d:fb:82:46:52:fd:b1:17:
6d:16:da:6c:46:eb:58:e7:91:7a:d1:0e:7d:93:56:28:f9:63:
e9:7f:d0:e6:98:00:34:10:4c:7e:2e:ad:38:6a:2b:48:55:05:
26:6c:6f:89:19:4e:cd:17:b0:79:2b:ce:f4:27:d7:0a:38:65:
5b:48:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:57 2026 by rpki-client