Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/B60F2378335A11F18E8191B1CE1D38B0.roa
File: B60F2378335A11F18E8191B1CE1D38B0.roa (raw, json)
Hash identifier: PSeiG4gCj8s4yIE58jv3DbNRgxuPJSXI1vD2+d6k2Yc=
Subject key identifier: 37:B2:49:C8:BD:FE:AF:11:CA:B0:90:A1:8C:1A:80:50:A7:EB:56:32
Certificate issuer: /CN=F36D9927AF/serialNumber=9D6F817CFEDF6BD09D9A4A965E148E60506F3A6E
Certificate serial: 09
Authority key identifier: 9D:6F:81:7C:FE:DF:6B:D0:9D:9A:4A:96:5E:14:8E:60:50:6F:3A:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/B60F2378335A11F18E8191B1CE1D38B0.roa
Signing time: Wed 08 Apr 2026 14:53:32 +0000
ROA not before: Wed 08 Apr 2026 14:53:27 +0000
ROA not after: Tue 30 Apr 2030 14:53:27 +0000
asID: 329721
IP address blocks: 102.202.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 05:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9927AF, serialNumber=9D6F817CFEDF6BD09D9A4A965E148E60506F3A6E
Validity
Not Before: Apr 8 14:53:27 2026 GMT
Not After : Apr 30 14:53:27 2030 GMT
Subject: CN=69d66bec-132d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c6:f3:51:31:dc:87:2b:20:d7:1b:6c:b1:b1:
23:03:ea:06:d3:a8:2a:e4:1f:79:3f:1b:af:39:7d:
43:11:fb:b3:94:c3:1f:f4:9e:bc:d3:a8:a6:69:52:
cc:2a:df:89:e6:16:4f:4b:f6:80:b5:52:ce:01:58:
63:03:1d:08:83:57:dd:bb:ed:72:e8:00:d6:b2:e2:
a3:9d:4d:5d:b6:73:80:46:22:9b:1e:26:4e:c8:72:
16:21:5b:a7:8b:1f:79:bf:f4:8a:c2:85:88:60:3d:
24:d5:bf:37:b4:14:41:5c:8a:75:f9:72:63:a1:c6:
0b:61:e4:26:8e:61:e9:8a:d9:5a:37:98:a7:00:cb:
66:58:6b:16:56:c7:6a:6f:98:19:c0:52:13:50:43:
ad:e4:db:68:3d:22:44:c8:75:73:c4:36:3c:2c:3c:
d0:d1:e5:fa:f3:01:a9:c5:9d:c0:22:32:da:c7:6d:
f8:9e:91:60:e2:3c:2a:86:00:81:9c:a2:1a:cc:5b:
eb:41:c6:ec:ee:2a:93:4c:0b:49:c3:9c:0a:08:1a:
5c:a0:b4:a3:21:3e:ee:71:46:77:b1:9f:9e:90:73:
85:78:f2:a0:6b:c8:a1:d4:49:db:f5:54:f8:c5:a8:
b0:11:bc:90:38:4c:75:d0:45:c9:73:d0:4b:b5:54:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B2:49:C8:BD:FE:AF:11:CA:B0:90:A1:8C:1A:80:50:A7:EB:56:32
X509v3 Authority Key Identifier:
keyid:9D:6F:81:7C:FE:DF:6B:D0:9D:9A:4A:96:5E:14:8E:60:50:6F:3A:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/B60F2378335A11F18E8191B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.202.208.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:65:e0:ce:cf:1c:b5:ae:e0:39:da:32:fa:df:ff:ba:83:f5:
03:e9:a0:fc:9c:9c:5e:32:52:bf:25:80:60:dc:24:b6:86:09:
36:c5:ce:59:76:10:92:dd:e3:52:7f:0a:04:15:74:af:fe:bb:
61:80:c5:68:eb:ad:e9:cc:63:ed:d7:9c:b4:df:33:32:ef:36:
55:07:20:d1:59:a2:24:ab:1e:0a:5e:a0:8d:54:01:db:08:c1:
92:23:7b:bb:2b:c8:e0:9a:82:f0:c2:d1:d2:55:ff:78:1c:ef:
1f:e9:ce:fe:4e:a4:37:d5:b8:1c:0b:65:3f:4c:fd:4e:10:07:
bb:7b:c0:5b:2b:5f:3c:73:e5:88:df:fb:76:5a:44:1f:33:77:
e4:ca:f6:ad:ea:54:91:18:44:ae:ad:0c:1c:09:6a:ab:ef:3a:
ac:29:f7:09:95:7c:db:3b:1c:a7:c8:30:46:e8:71:a9:ed:45:
72:57:0e:e0:69:d3:c5:6c:75:9e:ea:a5:1d:8a:43:7f:cb:da:
d2:3f:d1:43:68:9e:7d:46:a0:2e:22:42:88:44:33:ef:26:ae:
f2:7e:fb:80:62:ce:da:1a:cf:cd:d4:b7:dd:4b:19:ce:ae:de:
64:09:c3:0f:c7:4c:86:03:c5:b1:d1:4f:04:10:1f:66:77:d6:
21:8c:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:59 2026 by rpki-client