Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/61252ABC115C11F195A7B0C6DAE4EC9C.roa
File: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (raw, json)
Hash identifier: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=
Subject key identifier: EC:29:F8:A9:32:BF:99:93:8E:40:AE:83:4D:F5:4A:19:DA:D8:FB:E9
Certificate issuer: /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial: 02
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/61252ABC115C11F195A7B0C6DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 08:39:49 +0000
ROA not before: Tue 24 Feb 2026 08:39:45 +0000
ROA not after: Wed 24 Feb 2027 08:39:45 +0000
asID: 37473
IP address blocks: 154.115.192.0/18 maxlen: 24
2c0f:f710::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Validity
Not Before: Feb 24 08:39:45 2026 GMT
Not After : Feb 24 08:39:45 2027 GMT
Subject: CN=699d63d5-333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:37:c6:16:e5:d0:b4:5c:81:25:86:47:01:
fa:38:4f:6e:30:71:fb:c0:43:c7:c7:36:6a:3a:94:
c4:fc:be:3e:da:86:53:10:8b:81:87:54:cc:e0:56:
0a:9d:58:c7:8b:81:6e:71:30:18:9f:6b:0d:1b:35:
d3:a1:6a:5c:ce:dd:1f:dc:6c:9a:00:ab:ba:42:95:
c1:9d:3f:be:5b:ea:d5:32:1d:28:e7:f5:64:c8:20:
a6:65:53:dc:72:b2:dd:4f:33:c7:47:59:91:11:21:
00:52:74:a9:c9:94:09:19:ee:05:05:7e:25:e3:66:
61:7c:75:8a:03:6a:7f:26:50:f1:14:77:9f:64:e7:
8b:25:c6:8e:1c:23:08:e6:68:90:ec:a8:d3:40:c7:
2e:36:08:03:b1:9d:dd:e2:77:fa:6d:59:d9:14:fb:
5a:29:ba:f0:86:21:48:48:02:c9:4f:22:8a:d4:e7:
3b:83:0d:e2:d0:6a:71:9c:20:ae:9a:78:e9:e4:c0:
63:b6:ab:bd:b3:76:55:c5:c1:db:3a:3b:8e:91:fb:
0f:a2:4c:66:5e:b8:06:3b:6a:c4:e8:7d:9f:ac:29:
85:29:b8:6b:6d:05:74:2c:62:5a:3d:48:a3:0e:0f:
73:6d:b8:ae:d1:61:c1:90:62:fe:3c:7d:59:05:3a:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:F8:A9:32:BF:99:93:8E:40:AE:83:4D:F5:4A:19:DA:D8:FB:E9
X509v3 Authority Key Identifier:
keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/61252ABC115C11F195A7B0C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.115.192.0/18
IPv6:
2c0f:f710::/32
Signature Algorithm: sha256WithRSAEncryption
9c:73:cf:4d:c2:6f:56:c7:e9:64:0f:2d:53:c2:c9:bb:d8:2b:
d0:a1:a2:25:cb:eb:3b:2e:b7:c6:93:93:9c:2a:17:ea:f4:98:
89:95:ff:6d:dc:8d:f5:c6:88:08:43:c6:0d:3b:af:b9:dd:1d:
08:a6:98:fd:f1:af:9c:17:74:a2:ed:1e:d7:d1:60:bc:e7:a3:
8d:1e:db:3d:c5:12:e3:7f:3e:b7:bd:81:d7:c2:28:19:71:29:
d0:4e:84:91:45:37:61:c8:72:c9:76:cc:0f:53:21:12:e3:4c:
53:f2:7c:b4:60:1d:82:cd:d0:ab:4e:ed:a2:14:e5:87:78:78:
86:09:9a:60:05:fd:56:5d:19:0c:69:86:2b:5d:a7:fe:7c:d2:
26:4e:e8:a3:3b:7c:78:ab:04:c6:60:39:d8:03:94:34:4d:73:
f9:56:ab:cb:ef:a2:d8:6d:d5:03:e3:1a:31:7a:61:62:03:25:
d7:d6:29:99:29:ba:44:5c:5f:f6:95:f8:e6:81:bc:70:ab:58:
e4:d3:8b:93:bc:bc:58:66:7c:88:72:d9:95:95:78:02:d2:d4:
94:1c:b3:f9:b8:f3:e3:ec:54:8e:06:88:20:8e:0b:9b:3f:38:
4a:24:d0:8f:f2:35:47:c9:dc:61:e2:47:81:13:0d:9c:61:23:
97:cb:ee:58
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
RTQzMEFGMTEwLwYDVQQFEygyMkIxQzI0QzRGRTQ5QzY4QzE3NjYyOEZEQTY0RTY4
MTczRjYxRTBGMB4XDTI2MDIyNDA4Mzk0NVoXDTI3MDIyNDA4Mzk0NVowGDEWMBQG
A1UEAxMNNjk5ZDYzZDUtMzMzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPIQN8YW5dC0XIElhkcB+jhPbjBx+8BDx8c2ajqUxPy+PtqGUxCLgYdUzOBW
Cp1Yx4uBbnEwGJ9rDRs106FqXM7dH9xsmgCrukKVwZ0/vlvq1TIdKOf1ZMggpmVT
3HKy3U8zx0dZkREhAFJ0qcmUCRnuBQV+JeNmYXx1igNqfyZQ8RR3n2TniyXGjhwj
COZokOyo00DHLjYIA7Gd3eJ3+m1Z2RT7Wim68IYhSEgCyU8iitTnO4MN4tBqcZwg
rpp46eTAY7arvbN2VcXB2zo7jpH7D6JMZl64BjtqxOh9n6wphSm4a20FdCxiWj1I
ow4Pc224rtFhwZBi/jx9WQU6EyECAwEAAaOCArQwggKwMB0GA1UdDgQWBBTsKfip
Mr+Zk45AroNN9UoZ2tj76TAfBgNVHSMEGDAWgBQiscJMT+ScaMF2Yo/aZOaBc/Ye
DzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0U0MzAvQzFDNjVFRkUxMTU3MTFGMUJBRkQxMEFCREFFNEVDOUMvSXJIQ1RF
X2tuR2pCZG1LUDJtVG1nWFAySGc4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSXJIQ1RFX2tuR2pCZG1LUDJtVG1nWFAySGc4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0U0MzAvQzFDNjVFRkUxMTU3MTFGMUJBRkQxMEFCREFF
NEVDOUMvNjEyNTJBQkMxMTVDMTFGMTk1QTdCMEM2REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBppzwDANBAIAAjAHAwUALA/3
EDANBgkqhkiG9w0BAQsFAAOCAQEAnHPPTcJvVsfpZA8tU8LJu9gr0KGiJcvrOy63
xpOTnCoX6vSYiZX/bdyN9caICEPGDTuvud0dCKaY/fGvnBd0ou0e19FgvOejjR7b
PcUS438+t72B18IoGXEp0E6EkUU3YchyyXbMD1MhEuNMU/J8tGAdgs3Qq07tohTl
h3h4hgmaYAX9Vl0ZDGmGK12n/nzSJk7oozt8eKsExmA52AOUNE1z+Vary++i2G3V
A+MaMXphYgMl19YpmSm6RFxf9pX45oG8cKtY5NOLk7y8WGZ8iHLZlZV4AtLUlByz
+bjz4+xUjgaIII4Lmz84SiTQj/I1R8ncYeJHgRMNnGEjl8vuWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:55 2026 by rpki-client