Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/19B9413CFCE311F08D92B5F3DAE4EC9C.roa
File: 19B9413CFCE311F08D92B5F3DAE4EC9C.roa (raw, json)
Hash identifier: OaHAvwD7VhPYSaqXYJiSsSDEzTplTOge19ddbfh4NBw=
Subject key identifier: 09:DC:EA:E5:31:AA:27:CF:6A:12:F3:B5:2F:3B:28:CE:E6:FA:CD:15
Certificate issuer: /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial: 017E
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/19B9413CFCE311F08D92B5F3DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 07:21:17 +0000
ROA not before: Thu 29 Jan 2026 07:21:12 +0000
ROA not after: Fri 31 Jul 2026 07:21:12 +0000
asID: 5511
IP address blocks: 102.210.60.0/24 maxlen: 24
102.210.61.0/24 maxlen: 24
102.210.62.0/24 maxlen: 24
102.210.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Validity
Not Before: Jan 29 07:21:12 2026 GMT
Not After : Jul 31 07:21:12 2026 GMT
Subject: CN=697b0a6d-66cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:ca:2c:80:ac:56:c5:36:aa:ed:d6:67:3d:
b1:85:be:de:e8:73:92:55:c2:73:53:a5:1f:d2:2b:
f8:a0:c8:89:16:e4:e8:0a:19:81:eb:c1:ee:d9:3e:
cc:be:e8:06:3e:0e:92:aa:c2:74:6d:15:af:f3:49:
ce:ae:1e:ef:0e:4c:a6:37:cc:d2:e5:15:db:f5:61:
c1:6f:82:48:8b:a8:b4:77:4e:98:f1:b5:db:2b:ac:
e1:4e:b0:87:eb:5d:49:c4:30:49:8b:a2:c5:22:e1:
af:04:42:cd:12:21:2e:0b:6d:46:f2:8a:c8:1f:70:
52:c0:9b:69:65:15:e2:63:dc:f7:ab:8a:0f:3c:1d:
ac:e9:0a:f1:cf:fe:3b:c7:1c:75:e2:4c:f5:4f:1f:
ff:31:af:f8:2d:64:a8:b3:46:54:e2:5d:31:79:1a:
c8:d3:09:ff:6b:64:82:a9:a4:f4:90:93:d3:1a:db:
10:fb:07:cd:30:02:1e:b7:55:cb:c7:f9:62:a5:ea:
ef:cd:43:7f:70:90:49:02:bf:8e:c2:97:43:7c:d5:
5d:bc:48:fc:14:2b:04:9d:40:f2:23:ac:bb:a1:6c:
8d:d2:13:96:b8:93:7b:b4:f1:60:96:d1:fc:84:56:
72:c8:58:ec:bf:56:3d:20:24:7f:3e:3e:c5:c9:50:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:EA:E5:31:AA:27:CF:6A:12:F3:B5:2F:3B:28:CE:E6:FA:CD:15
X509v3 Authority Key Identifier:
keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/19B9413CFCE311F08D92B5F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6a:56:d0:6f:5c:0e:ad:6e:af:a1:6f:9a:94:48:ee:00:2b:
6c:5e:3f:ae:df:e3:12:c9:2b:d3:69:8f:5c:5a:1e:90:8d:83:
1c:7d:61:5d:9f:a9:d8:8f:ba:fa:35:1f:da:95:74:2d:a2:63:
04:87:cb:9f:70:a8:6f:a6:94:23:58:bb:fc:ca:65:c5:be:af:
ae:93:02:85:21:f4:a7:bf:a3:d3:b3:77:60:fb:99:d5:76:26:
67:15:20:40:21:6f:93:56:36:91:f0:f0:8a:19:1c:0f:04:b3:
98:dc:42:c7:e1:a2:c7:d1:0a:5a:8d:9f:03:a9:1a:23:d2:1f:
1d:9f:b9:a7:3b:0e:dc:c6:57:23:18:9e:cb:b8:ae:51:1f:d6:
77:96:f1:df:20:19:b4:9d:f1:4d:56:29:19:92:e5:67:71:ef:
e9:41:30:db:9a:d6:94:d2:6f:c7:d0:92:b5:0f:84:b9:1a:f8:
bb:ad:4d:0f:65:f1:73:30:19:52:7b:6b:ff:f8:95:ef:92:a6:
fb:87:c1:e6:ba:cc:4c:c1:7b:f5:d8:75:97:b8:9c:8f:6d:9a:
46:14:33:0a:33:ba:19:41:49:7b:f8:f4:20:c8:ce:2b:83:e5:
b2:e5:fc:f0:a4:d7:56:76:55:ef:21:f5:ff:9b:2f:a8:8c:f6:
50:f5:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:30 2026 by rpki-client