Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/B312FDDE066911F1BDF62B7CDAE4EC9C.roa
File: B312FDDE066911F1BDF62B7CDAE4EC9C.roa (raw, json)
Hash identifier: buD5JSkUfeJCoxOUevkIVwfQkCScIrrjXbWb3f7GhrE=
Subject key identifier: 83:0B:97:2C:78:42:9E:0C:C3:D1:64:E6:5F:DF:C4:A6:32:7D:06:50
Certificate issuer: /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial: 6D
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/B312FDDE066911F1BDF62B7CDAE4EC9C.roa
Signing time: Tue 10 Feb 2026 10:17:27 +0000
ROA not before: Tue 10 Feb 2026 10:17:22 +0000
ROA not after: Fri 11 Feb 2028 10:17:22 +0000
asID: 329617
IP address blocks: 154.72.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Validity
Not Before: Feb 10 10:17:22 2026 GMT
Not After : Feb 11 10:17:22 2028 GMT
Subject: CN=698b05b7-c08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:01:97:3f:e3:f1:30:42:35:62:7b:e2:b1:
73:a4:e9:41:6a:0d:91:c4:36:5f:21:2f:13:64:bf:
f5:74:9b:f3:26:6a:c3:29:b1:b1:5f:05:be:44:99:
4f:c3:61:a8:68:b8:ef:52:26:c5:9b:af:20:05:1b:
2b:77:f1:7f:db:82:a0:0a:8b:8e:04:7e:d7:7e:78:
73:86:19:5d:d2:6c:fe:86:de:f7:bb:bc:04:14:0c:
70:ab:6b:b5:f0:10:b0:03:49:d8:83:0f:5c:84:40:
19:7a:40:47:82:78:17:f7:a4:1c:f1:9f:ca:a7:a6:
82:31:6a:ed:bd:55:53:01:8f:4e:9b:cd:d6:2f:eb:
10:6b:2b:77:c8:66:f4:52:6d:1f:12:55:9d:f2:94:
0d:ce:a6:ef:fa:d3:ce:f6:ba:c6:f1:5e:23:95:64:
38:91:e5:b3:3a:9a:97:47:88:ae:55:15:ac:f3:7f:
4b:3b:01:f8:6d:06:c5:79:66:69:5a:10:55:4f:db:
f2:e4:2a:32:19:eb:f2:e1:74:2a:a0:00:58:0f:e0:
ce:ca:e9:5e:d3:96:62:d6:61:3d:05:b2:59:14:03:
07:41:d7:8e:2a:05:42:bf:f8:9b:f7:90:d7:91:b3:
eb:33:7b:87:cb:a6:b4:60:6a:73:88:e6:37:85:c4:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:97:2C:78:42:9E:0C:C3:D1:64:E6:5F:DF:C4:A6:32:7D:06:50
X509v3 Authority Key Identifier:
keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/B312FDDE066911F1BDF62B7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.18.0/24
Signature Algorithm: sha256WithRSAEncryption
91:29:0b:4d:47:bc:a0:59:25:f8:3d:a0:e6:f0:0d:9d:66:8c:
a7:cd:ff:ad:34:f4:0c:56:06:7b:7b:99:2f:a5:8c:0f:ff:6d:
c4:58:7f:7f:35:90:31:5c:2c:5b:47:41:34:9a:80:0b:d5:89:
d7:d5:82:6b:57:0a:82:6c:2d:63:5d:cd:ab:4b:65:52:44:30:
d7:da:5d:bc:2c:e8:a9:54:7a:cb:3c:b0:a5:2b:01:04:5c:47:
e4:08:d2:6a:d8:35:d9:fc:5a:d1:84:bd:9d:58:d4:77:af:08:
4f:7f:97:5e:78:5c:0b:82:ea:49:54:11:30:82:4d:7b:d6:26:
2a:32:9a:9c:d2:aa:da:3a:dd:61:6e:07:f1:97:94:c4:a5:dc:
1e:d2:6a:7f:4f:52:0d:05:11:b4:4c:8f:b1:45:c7:e9:34:b2:
5a:49:fe:5d:fc:c2:38:c3:7f:39:ed:0c:65:98:77:a1:23:09:
21:15:fd:b1:f6:ba:25:b9:8e:d1:e7:93:a1:a8:5d:e2:c3:07:
22:f1:e6:b4:0f:e2:23:5c:8d:73:e5:a7:e5:14:91:fd:49:12:
db:8b:27:67:87:3b:19:d0:9a:8b:da:5a:b6:7f:59:67:cc:56:
b5:9d:9d:e0:13:aa:09:61:75:65:08:f6:3e:a9:a8:b7:0b:9f:
1e:cb:bd:93
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
RERCMkFGMTEwLwYDVQQFEyhBNUNBNEU1QTZGQ0FGRDk4NzA2NTIzRDMxNDVDNTZC
QkNFQzcwOTQwMB4XDTI2MDIxMDEwMTcyMloXDTI4MDIxMTEwMTcyMlowGDEWMBQG
A1UEAxMNNjk4YjA1YjctYzA4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzlAZc/4/EwQjVie+Kxc6TpQWoNkcQ2XyEvE2S/9XSb8yZqwymxsV8FvkSZ
T8NhqGi471ImxZuvIAUbK3fxf9uCoAqLjgR+1354c4YZXdJs/obe97u8BBQMcKtr
tfAQsANJ2IMPXIRAGXpAR4J4F/ekHPGfyqemgjFq7b1VUwGPTpvN1i/rEGsrd8hm
9FJtHxJVnfKUDc6m7/rTzva6xvFeI5VkOJHlszqal0eIrlUVrPN/SzsB+G0GxXlm
aVoQVU/b8uQqMhnr8uF0KqAAWA/gzsrpXtOWYtZhPQWyWRQDB0HXjioFQr/4m/eQ
15Gz6zN7h8umtGBqc4jmN4XEYcECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSDC5cs
eEKeDMPRZOZf38SmMn0GUDAfBgNVHSMEGDAWgBSlyk5ab8r9mHBlI9MUXFa7zscJ
QDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkREQjIvN0M3MTU5MENCRUYxMTFGMEExRTQ5OUE0REFFNEVDOUMvcGNwT1dt
X0tfWmh3WlNQVEZGeFd1ODdIQ1VBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcGNwT1dtX0tfWmh3WlNQVEZGeFd1ODdIQ1VBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkREQjIvN0M3MTU5MENCRUYxMTFGMEExRTQ5OUE0REFF
NEVDOUMvQjMxMkZEREUwNjY5MTFGMUJERjYyQjdDREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJpIEjANBgkqhkiG9w0BAQsF
AAOCAQEAkSkLTUe8oFkl+D2g5vANnWaMp83/rTT0DFYGe3uZL6WMD/9txFh/fzWQ
MVwsW0dBNJqAC9WJ19WCa1cKgmwtY13Nq0tlUkQw19pdvCzoqVR6yzywpSsBBFxH
5AjSatg12fxa0YS9nVjUd68IT3+XXnhcC4LqSVQRMIJNe9YmKjKanNKq2jrdYW4H
8ZeUxKXcHtJqf09SDQURtEyPsUXH6TSyWkn+XfzCOMN/Oe0MZZh3oSMJIRX9sfa6
JbmO0eeToahd4sMHIvHmtA/iI1yNc+Wn5RSR/UkS24snZ4c7GdCai9patn9ZZ8xW
tZ2d4BOqCWF1ZQj2PqmotwufHsu9kw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:06 2026 by rpki-client