Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/CD6C2FB20E6511F1BDD52292DAE4EC9C.roa
File: CD6C2FB20E6511F1BDD52292DAE4EC9C.roa (raw, json)
Hash identifier: yGfxUsuN2xFyydIFvCktPVgPNbmog42ChySuyl0JlTE=
Subject key identifier: BB:E3:06:8A:8C:19:DC:50:44:C3:AA:B5:4A:B1:F3:12:2E:A7:03:3B
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 04A0
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/CD6C2FB20E6511F1BDD52292DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 14:09:43 +0000
ROA not before: Fri 20 Feb 2026 14:09:38 +0000
ROA not after: Wed 20 Feb 2030 14:09:38 +0000
asID: 17497
IP address blocks: 102.212.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 02:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Feb 20 14:09:38 2026 GMT
Not After : Feb 20 14:09:38 2030 GMT
Subject: CN=69986b26-eb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:c9:8b:b8:e9:11:d5:c5:3d:2b:e3:f8:07:
1d:51:90:4b:71:df:ed:05:91:a8:c1:1d:a7:fb:80:
0a:c3:12:36:af:5c:42:17:32:19:ce:ce:f2:6b:7b:
bd:a9:4a:af:43:65:0b:06:6a:2b:00:86:45:1d:57:
61:1e:c9:40:fd:60:ed:70:37:f0:1d:46:88:6e:48:
5c:08:93:38:48:8e:b3:f2:03:df:0e:bc:85:de:10:
8b:70:34:d2:48:61:62:ad:b4:47:1f:90:84:88:b9:
8b:1d:90:86:60:b4:be:58:53:3e:22:0f:5c:17:24:
e1:86:a4:e4:1e:e6:0b:55:5b:da:4c:84:bc:fd:63:
48:84:74:24:e1:f2:1a:30:69:4b:6d:b8:bd:6a:aa:
ca:a1:0b:d9:74:78:58:b0:e4:83:9d:17:ec:ce:0c:
19:1f:91:75:f9:2c:40:d4:80:26:23:a6:aa:4a:b9:
5b:74:ae:4b:0b:ae:f9:35:88:ac:92:91:8e:96:ec:
21:70:10:89:75:ae:03:da:24:7d:42:31:56:9e:09:
e1:42:2b:c3:5f:c4:65:5e:44:cc:ae:bc:08:cd:c2:
78:84:ae:59:80:02:55:23:43:97:b5:7f:0e:f9:fd:
db:5f:e0:57:fd:48:81:5a:de:52:5b:ef:77:26:14:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E3:06:8A:8C:19:DC:50:44:C3:AA:B5:4A:B1:F3:12:2E:A7:03:3B
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/CD6C2FB20E6511F1BDD52292DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.6.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f1:8a:a8:45:20:96:06:54:92:00:62:de:0c:92:5e:c6:61:
73:32:ad:a5:a3:9f:f3:cb:1c:b3:27:f6:5e:71:72:2d:5b:bc:
5f:9a:38:fe:2f:33:12:62:73:2c:e0:ea:dd:26:ad:fd:62:49:
01:37:7c:1f:70:8a:35:1b:36:3d:14:7f:ce:d1:b5:b1:92:48:
ab:77:62:b7:1e:7e:c3:c4:52:6c:6e:99:57:99:5c:7c:0c:eb:
a2:6a:8b:c1:26:1b:83:51:fc:2e:72:b6:bc:13:8a:da:30:c8:
06:f3:2f:aa:5f:a3:ff:92:20:08:e6:02:54:76:eb:c2:a0:4a:
9f:d9:9a:60:15:73:a8:a4:ff:91:16:79:99:b4:f6:97:24:a5:
71:68:4f:c0:b7:aa:61:e9:4a:a9:15:dd:ec:c9:ec:22:40:e1:
2e:5f:1b:bd:cd:cc:89:0a:ab:8d:67:da:9d:18:9c:74:cd:21:
32:9b:da:33:59:4b:97:92:a8:4e:8c:45:6d:aa:38:b2:3b:de:
8c:19:33:9e:00:ba:2b:c3:f9:50:05:73:87:cf:af:ac:3a:84:
83:3e:0f:5f:0d:69:1e:f8:32:74:96:c9:47:0a:37:01:76:90:
58:1a:88:2e:2b:4c:6f:e8:db:5b:0f:4e:bb:a2:0d:cb:90:03:
fe:92:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:14 2026 by rpki-client