Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/122D36EC066D11F18E1FF791DAE4EC9C.roa
File: 122D36EC066D11F18E1FF791DAE4EC9C.roa (raw, json)
Hash identifier: jtB1Hhv1HwpPRBPDwK5yT3PXgecLmuqLhxaUNyALYGE=
Subject key identifier: 24:F0:49:5C:7B:74:7A:16:0B:FC:17:12:9D:81:91:DB:D6:F5:80:49
Certificate issuer: /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial: 70
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/122D36EC066D11F18E1FF791DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 10:41:35 +0000
ROA not before: Tue 10 Feb 2026 10:41:27 +0000
ROA not after: Thu 10 Feb 2028 10:41:27 +0000
asID: 329617
IP address blocks: 154.72.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Validity
Not Before: Feb 10 10:41:27 2026 GMT
Not After : Feb 10 10:41:27 2028 GMT
Subject: CN=698b0b5f-0775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:ad:76:a2:8f:8c:35:f6:fe:cb:c4:5c:87:
b5:d4:c6:f3:0b:d0:42:16:97:8d:0b:a0:e5:4f:bc:
52:ff:12:e7:ad:1a:15:3c:6f:03:94:52:88:c5:d4:
70:37:d5:75:3f:94:a7:c7:0d:4b:26:b2:8d:83:d9:
ee:96:e5:34:10:e2:cd:a7:5b:70:7a:7c:6a:52:d4:
07:1f:bc:8b:b4:0f:91:da:4e:c6:42:03:a7:43:e4:
64:0a:55:1d:5e:f4:3c:e3:ff:b1:d4:53:9c:35:eb:
1d:35:2d:95:f2:88:8f:41:cb:c4:a3:29:e8:00:4d:
c6:27:6a:8d:69:c7:48:e5:de:bb:a4:2a:aa:d0:64:
ed:c6:df:b9:f5:47:bb:16:95:fd:9e:36:4b:3b:f9:
ad:2f:21:03:4f:65:bc:b9:9d:30:10:76:e5:f5:b4:
26:86:fe:23:d4:26:7c:00:7e:cb:7c:bd:88:fb:4f:
47:b4:6c:16:8e:4c:35:3d:02:24:df:14:64:dd:87:
f9:6d:31:e7:32:84:d3:a5:f0:4c:1a:83:a2:cd:63:
f3:29:62:95:a4:61:8a:05:2d:8b:9e:d9:27:47:49:
ee:33:90:96:3d:5a:1f:c0:94:98:41:cd:b8:09:af:
f0:e0:5d:33:96:cd:5b:08:8d:ad:90:c6:2d:ee:d5:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:49:5C:7B:74:7A:16:0B:FC:17:12:9D:81:91:DB:D6:F5:80:49
X509v3 Authority Key Identifier:
keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/122D36EC066D11F18E1FF791DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.16.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b3:40:49:75:0e:40:bd:5a:66:71:e4:08:b7:5f:29:41:09:
23:d5:61:07:8a:40:a7:86:ed:e5:1d:34:9e:75:88:85:8d:5f:
45:f6:f3:4e:96:ed:09:7b:09:d5:5e:ad:1d:2d:82:69:0d:20:
57:77:6d:38:06:dc:02:de:5a:56:5e:59:72:6b:25:d6:ee:55:
d7:63:98:51:57:6b:61:1c:b9:6e:16:07:0d:bf:fb:a3:20:3a:
c1:06:87:f3:db:6a:a4:c0:09:97:3a:ec:4a:a1:8b:83:94:09:
a6:0b:ef:0f:76:8d:63:79:60:4f:44:8b:ff:f8:45:61:c3:32:
9b:ef:a9:4f:8f:91:e6:8b:d9:5e:ef:e1:f2:e4:e0:5c:8a:a5:
c8:b5:cb:b1:6a:f9:75:5d:5c:e4:a8:b4:64:05:56:2a:ad:75:
f1:c9:b6:b3:b3:59:b0:ac:ca:06:0f:2c:b6:91:5f:a6:30:21:
51:97:78:a0:1c:24:62:1d:a0:8a:da:36:7e:39:96:d4:85:87:
88:74:66:79:68:a7:8c:52:8a:7a:82:05:8e:37:fb:ec:f6:be:
eb:91:8b:a4:0a:af:dc:86:53:b4:3e:04:2c:d8:24:c9:a9:d6:
50:53:f8:63:b0:d0:a9:62:84:c9:3b:a3:6d:0a:fe:5f:83:20:
75:30:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:14 2026 by rpki-client