Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/861B94CE33ED11F1965390B3CE1D38B0.roa
File: 861B94CE33ED11F1965390B3CE1D38B0.roa (raw, json)
Hash identifier: TggDZn/6+km0NmiNN9k3nE6i0CGJCXgqnNH4Fo/DA8k=
Subject key identifier: 2E:B3:F7:D2:81:E8:D7:4E:1C:AE:87:D2:91:AA:10:92:9F:6B:89:C2
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 2A
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/861B94CE33ED11F1965390B3CE1D38B0.roa
Signing time: Thu 09 Apr 2026 08:24:28 +0000
ROA not before: Thu 09 Apr 2026 08:24:23 +0000
ROA not after: Wed 09 Apr 2036 08:24:23 +0000
asID: 329648
IP address blocks: 102.204.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 08:24:23 2026 GMT
Not After : Apr 9 08:24:23 2036 GMT
Subject: CN=69d7623c-26c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:13:04:9d:f4:c1:fb:2b:ed:18:48:5b:f9:
af:c4:52:63:62:9c:6e:93:c8:fa:ce:14:0d:a6:13:
97:a2:bc:2e:58:5d:57:30:7e:b9:bd:6b:de:aa:be:
b0:6a:3e:d6:4d:9e:c5:74:58:a8:5c:a8:07:34:8f:
04:7c:84:90:48:0c:6a:d2:81:f6:44:27:73:0a:77:
ed:f4:2c:7b:2c:07:be:c6:e1:e1:63:51:d7:bf:1d:
c2:2c:84:9d:18:cf:d4:84:90:92:b9:c0:3e:91:1b:
75:65:72:d8:ae:1f:02:73:10:f8:ab:34:b0:10:7d:
6b:a3:96:e5:e1:87:34:2e:55:c2:7c:bd:78:eb:d1:
47:f9:31:c5:13:72:48:c7:ed:e8:ee:87:b6:9d:9b:
aa:93:5d:95:39:4a:05:2a:34:fd:55:e6:45:c6:83:
87:31:63:43:20:6d:fb:c6:2f:73:35:c6:56:02:c0:
78:83:93:43:49:98:e0:23:a5:54:ab:77:3c:7e:70:
3f:db:db:f4:f5:fc:6b:00:1d:d7:89:ee:5f:2f:d9:
5f:e2:97:3e:7d:f8:d8:0e:c9:e4:de:2c:a8:ee:e0:
e9:6a:b5:46:75:3f:b2:bb:a3:5d:a3:2a:f0:18:09:
8f:68:17:b4:d9:16:ee:be:ca:be:2a:08:13:89:1d:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B3:F7:D2:81:E8:D7:4E:1C:AE:87:D2:91:AA:10:92:9F:6B:89:C2
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/861B94CE33ED11F1965390B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
be:7b:77:54:cf:04:67:02:e0:f5:33:6d:db:d0:99:05:27:e7:
ef:50:b8:e1:da:c3:5f:70:e8:86:29:ff:9f:c4:75:1d:be:20:
74:4b:ee:9e:b2:da:07:ba:47:f3:aa:e6:9e:21:5b:70:28:6a:
43:c4:a0:73:d6:7a:5d:08:34:08:a8:a7:be:46:17:ee:75:44:
41:08:e0:ba:09:31:fe:c2:74:0f:70:44:53:5f:d1:36:96:9c:
1e:7c:0f:4d:2a:1d:2c:4b:9f:52:58:74:01:cd:d5:8e:bd:25:
91:f2:c4:9b:e6:9f:43:d0:39:1e:8f:cc:82:64:00:0f:44:85:
49:73:c0:e2:74:22:a7:65:44:d5:a2:4b:11:08:e6:da:3b:69:
71:12:53:33:c1:cb:59:8d:34:17:e1:fc:0e:6c:29:16:8a:ac:
c1:cb:33:e3:9e:5d:4a:91:4c:52:eb:39:e9:d5:3b:14:df:b2:
23:74:f6:ba:03:7f:99:ad:a4:21:d5:f1:8a:ce:16:8a:c0:b2:
96:82:82:7c:15:14:f9:28:19:35:47:bc:49:5b:e4:c9:57:7e:
7b:a3:b5:78:a5:d0:20:43:c7:27:7c:6b:b7:28:d1:b2:03:be:
e4:a0:e5:06:1f:0b:f9:d7:c3:2b:05:48:ce:68:26:ad:95:28:
87:96:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:34 2026 by rpki-client