Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EAC7B/5FCEBA7C130811F1BAC41985DAE4EC9C/489477A6130911F189FCBF8CDAE4EC9C.roa
File: 489477A6130911F189FCBF8CDAE4EC9C.roa (raw, json)
Hash identifier: VuA1kNIslLppQI+axHXsPRWIQB8ltpKE5ysseC3r5rM=
Subject key identifier: 15:D2:35:B4:BB:2F:3A:26:D7:97:89:7A:DA:D2:C7:C9:49:73:A8:C2
Certificate issuer: /CN=F36EAC7BAF/serialNumber=7E35D1336621C58D3F592CBA014082B9101538C1
Certificate serial: 02
Authority key identifier: 7E:35:D1:33:66:21:C5:8D:3F:59:2C:BA:01:40:82:B9:10:15:38:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fjXRM2YhxY0_WSy6AUCCuRAVOME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EAC7B/5FCEBA7C130811F1BAC41985DAE4EC9C/489477A6130911F189FCBF8CDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 11:50:02 +0000
ROA not before: Thu 26 Feb 2026 11:49:57 +0000
ROA not after: Fri 29 Feb 2036 11:49:57 +0000
asID: 329618
IP address blocks: 102.204.196.0/22 maxlen: 24
2c0f:34c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EAC7B/5FCEBA7C130811F1BAC41985DAE4EC9C/fjXRM2YhxY0_WSy6AUCCuRAVOME.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EAC7B/5FCEBA7C130811F1BAC41985DAE4EC9C/fjXRM2YhxY0_WSy6AUCCuRAVOME.mft
rsync://rpki.afrinic.net/repository/afrinic/fjXRM2YhxY0_WSy6AUCCuRAVOME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EAC7BAF, serialNumber=7E35D1336621C58D3F592CBA014082B9101538C1
Validity
Not Before: Feb 26 11:49:57 2026 GMT
Not After : Feb 29 11:49:57 2036 GMT
Subject: CN=69a0336a-33c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:36:69:e0:9e:16:e3:fb:2c:51:2f:00:e1:
3e:0b:e1:93:52:5b:f4:f1:4c:3f:a8:b1:99:23:4f:
9e:a3:79:6b:de:43:2f:a9:5e:4e:2e:19:bd:c5:85:
ad:0a:29:84:b6:a0:f5:6e:98:bd:25:e6:3f:ab:e3:
22:d3:68:66:48:9b:f0:c2:8d:0a:95:1e:78:fd:18:
d7:e3:15:33:0c:0c:98:af:71:b2:e4:68:35:13:91:
08:4d:65:9b:a3:df:b2:2c:66:da:7a:94:bf:9b:9d:
c7:af:fb:19:4e:c0:2b:8b:65:3c:f3:47:b7:95:f2:
b1:69:b9:27:13:b5:9d:ff:99:b6:6d:32:26:6a:7e:
94:98:04:50:e2:f1:d7:f7:e1:a4:6c:54:90:78:42:
dd:5a:9d:3b:98:0f:29:a1:19:e5:c4:af:c5:25:de:
7d:c0:86:84:48:4c:53:4a:e1:3e:2d:9d:59:1a:d7:
42:db:3e:e2:74:fb:a8:f3:4b:6d:41:ad:d1:5f:4f:
13:d0:77:af:c6:38:37:13:9b:cb:c7:f1:7f:dc:f5:
17:ed:0a:33:51:68:4f:fd:c5:53:9e:be:b3:9a:83:
a6:df:2f:23:2a:9b:49:71:bf:5e:f5:a6:ed:c9:1a:
1a:f6:b5:fc:c9:94:2a:39:40:6c:0b:aa:59:c0:82:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:35:B4:BB:2F:3A:26:D7:97:89:7A:DA:D2:C7:C9:49:73:A8:C2
X509v3 Authority Key Identifier:
keyid:7E:35:D1:33:66:21:C5:8D:3F:59:2C:BA:01:40:82:B9:10:15:38:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EAC7B/5FCEBA7C130811F1BAC41985DAE4EC9C/fjXRM2YhxY0_WSy6AUCCuRAVOME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fjXRM2YhxY0_WSy6AUCCuRAVOME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EAC7B/5FCEBA7C130811F1BAC41985DAE4EC9C/489477A6130911F189FCBF8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.196.0/22
IPv6:
2c0f:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
09:fe:c0:f2:5b:8f:a2:bd:74:92:02:4c:eb:c2:99:f1:57:45:
98:44:f6:8e:76:96:f8:c4:24:58:c4:c6:7b:96:fb:ee:bd:95:
55:1e:d0:f8:ee:a9:4f:6f:4e:1a:79:09:46:5e:a3:84:77:d1:
be:15:2e:9c:48:c8:bb:bf:74:14:ab:74:21:1c:97:8e:e8:e4:
f8:cc:b1:43:b3:52:64:b3:29:28:0f:a3:41:91:83:38:c1:19:
47:73:e0:aa:f9:38:cd:85:8e:ea:f8:ee:b5:21:a2:27:bf:f1:
56:72:62:d5:a9:8d:38:0d:5d:bc:df:91:27:4d:bd:30:e4:af:
df:50:96:d7:fe:1b:36:c3:fe:bb:f0:aa:bb:4e:57:b1:27:30:
35:ff:b5:9b:16:3d:cc:ab:a6:84:ab:e4:7e:78:05:e5:0e:0f:
64:80:bd:14:47:b3:0d:13:46:01:bd:49:85:f7:f0:ce:80:12:
f7:97:b1:a6:88:18:da:53:5b:bd:fd:87:c0:de:68:48:5b:2c:
ad:da:ba:01:fd:67:55:f8:25:0b:2c:dc:cd:48:20:bc:c1:f1:
00:d9:9b:54:42:e0:65:ce:cf:ba:61:48:0f:a8:4a:71:5d:38:
40:ae:41:ec:13:1c:f1:0e:92:2c:a0:c0:57:17:79:48:24:33:
8e:c3:17:23
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
QUM3QkFGMTEwLwYDVQQFEyg3RTM1RDEzMzY2MjFDNThEM0Y1OTJDQkEwMTQwODJC
OTEwMTUzOEMxMB4XDTI2MDIyNjExNDk1N1oXDTM2MDIyOTExNDk1N1owGDEWMBQG
A1UEAxMNNjlhMDMzNmEtMzNjNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANYyNmngnhbj+yxRLwDhPgvhk1Jb9PFMP6ixmSNPnqN5a95DL6leTi4ZvcWF
rQophLag9W6YvSXmP6vjItNoZkib8MKNCpUeeP0Y1+MVMwwMmK9xsuRoNRORCE1l
m6Pfsixm2nqUv5udx6/7GU7AK4tlPPNHt5XysWm5JxO1nf+Ztm0yJmp+lJgEUOLx
1/fhpGxUkHhC3VqdO5gPKaEZ5cSvxSXefcCGhEhMU0rhPi2dWRrXQts+4nT7qPNL
bUGt0V9PE9B3r8Y4NxOby8fxf9z1F+0KM1FoT/3FU56+s5qDpt8vIyqbSXG/XvWm
7ckaGva1/MmUKjlAbAuqWcCCRT8CAwEAAaOCArQwggKwMB0GA1UdDgQWBBQV0jW0
uy86JteXiXra0sfJSXOowjAfBgNVHSMEGDAWgBR+NdEzZiHFjT9ZLLoBQIK5EBU4
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUFDN0IvNUZDRUJBN0MxMzA4MTFGMUJBQzQxOTg1REFFNEVDOUMvZmpYUk0y
WWh4WTBfV1N5NkFVQ0N1UkFWT01FLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZmpYUk0yWWh4WTBfV1N5NkFVQ0N1UkFWT01FLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUFDN0IvNUZDRUJBN0MxMzA4MTFGMUJBQzQxOTg1REFF
NEVDOUMvNDg5NDc3QTYxMzA5MTFGMTg5RkNCRjhDREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbMxDANBAIAAjAHAwUALA80
wDANBgkqhkiG9w0BAQsFAAOCAQEACf7A8luPor10kgJM68KZ8VdFmET2jnaW+MQk
WMTGe5b77r2VVR7Q+O6pT29OGnkJRl6jhHfRvhUunEjIu790FKt0IRyXjujk+Myx
Q7NSZLMpKA+jQZGDOMEZR3Pgqvk4zYWO6vjutSGiJ7/xVnJi1amNOA1dvN+RJ029
MOSv31CW1/4bNsP+u/Cqu05XsScwNf+1mxY9zKumhKvkfngF5Q4PZIC9FEezDRNG
Ab1JhffwzoAS95expogY2lNbvf2HwN5oSFssrdq6Af1nVfglCyzczUggvMHxANmb
VELgZc7PumFID6hKcV04QK5B7BMc8Q6SLKDAVxd5SCQzjsMXIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:39 2026 by rpki-client