Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/6B0279CA09C511F1BE9C3097DAE4EC9C.roa
File: 6B0279CA09C511F1BE9C3097DAE4EC9C.roa (raw, json)
Hash identifier: xaw/xaDZuxbiw9x4K+rCVDkYhuPeyhAyCp53eGqU7Fo=
Subject key identifier: 89:BF:25:6B:3B:EC:EB:64:95:ED:00:F8:F5:9A:32:9D:35:B0:00:8F
Certificate issuer: /CN=F36F5B9DAF/serialNumber=2E7A49A307832F632602BFE7AA4E480874551FCD
Certificate serial: 02
Authority key identifier: 2E:7A:49:A3:07:83:2F:63:26:02:BF:E7:AA:4E:48:08:74:55:1F:CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/6B0279CA09C511F1BE9C3097DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 16:51:34 +0000
ROA not before: Sat 14 Feb 2026 16:51:29 +0000
ROA not after: Fri 14 Feb 2031 16:51:29 +0000
asID: 328483
IP address blocks: 102.67.184.0/22 maxlen: 22
2c0f:ed98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F5B9DAF, serialNumber=2E7A49A307832F632602BFE7AA4E480874551FCD
Validity
Not Before: Feb 14 16:51:29 2026 GMT
Not After : Feb 14 16:51:29 2031 GMT
Subject: CN=6990a816-3722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:89:68:c6:77:9a:cf:02:a9:e1:ae:ff:c3:
bf:56:92:2b:8b:88:8f:63:56:15:bb:84:01:fd:7f:
98:ed:a6:80:bb:cc:7c:22:ce:22:cd:01:ef:ce:9a:
9d:46:99:03:69:5d:95:14:54:23:a7:0c:35:5c:01:
fa:18:af:dc:56:b4:d9:0e:a1:71:a2:e0:c1:d2:77:
05:46:3b:34:cf:80:19:af:cc:b5:9b:fa:8c:bd:2f:
4b:0d:a3:84:0b:8a:98:de:5b:7f:ec:97:15:6c:f4:
4c:27:8a:a4:ae:b9:19:2b:6f:0c:0d:89:62:d0:c0:
d2:18:c4:d2:7e:67:87:0d:dd:99:18:a0:c3:7c:e0:
a9:5f:8f:b8:b2:dd:f0:19:4a:97:21:0b:52:57:5b:
0e:2a:bd:f3:10:40:3f:f9:8e:dc:8b:7d:1a:c5:f4:
59:10:3e:e8:fa:11:e1:a6:62:dd:d1:f8:d6:84:f1:
d0:39:20:4d:26:2b:fd:ea:5b:0d:6c:13:5f:d1:96:
74:92:57:15:d2:c1:14:b7:54:2e:de:8f:ff:88:b4:
ad:70:5a:5f:bd:c3:82:8e:11:f1:e6:11:45:94:f7:
ac:c0:03:87:46:6f:9b:cd:6d:8e:8d:f2:e4:33:3e:
b4:cc:d3:1a:05:4b:56:04:19:f6:ae:cb:e0:d6:09:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:25:6B:3B:EC:EB:64:95:ED:00:F8:F5:9A:32:9D:35:B0:00:8F
X509v3 Authority Key Identifier:
keyid:2E:7A:49:A3:07:83:2F:63:26:02:BF:E7:AA:4E:48:08:74:55:1F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/6B0279CA09C511F1BE9C3097DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.184.0/22
IPv6:
2c0f:ed98::/32
Signature Algorithm: sha256WithRSAEncryption
21:f7:01:a0:d0:b9:93:8b:bc:e4:95:f4:85:ab:b0:75:1b:a9:
5e:82:a9:2a:3c:30:37:a1:f0:c5:c0:52:ab:74:bf:cc:69:45:
8b:e0:66:d3:f0:98:4b:6e:a9:ba:40:fb:4c:a6:2c:5f:ab:b0:
ba:44:c8:b6:8d:84:04:fe:71:09:7a:9f:0b:ed:53:a0:13:6b:
eb:62:4a:cc:90:1b:07:4b:93:bc:63:cb:eb:76:41:d1:0c:a7:
9f:44:08:78:87:a6:d3:b3:28:58:bf:a8:73:33:02:d2:f7:b0:
28:7e:ee:e8:cb:b4:b8:ed:a9:13:a5:4f:c8:4a:7f:f6:eb:15:
fc:9a:10:3c:58:59:3d:74:33:00:de:cf:af:14:a2:94:87:34:
90:6b:ab:39:71:8f:b5:40:94:ba:8d:3d:f3:84:7c:c0:bf:48:
13:5b:9d:11:df:2c:6d:21:e4:9e:b3:0a:91:d8:c2:24:fa:24:
1d:5d:75:15:63:bc:28:c6:47:10:8d:0f:a3:84:8f:4e:73:99:
5d:ef:35:ce:e8:06:1a:18:00:e7:44:26:3d:c4:93:7e:34:8d:
d1:a3:38:19:a2:de:d5:e0:64:35:c9:07:ef:95:72:ca:b2:f4:
e9:52:8d:ee:00:84:5d:f2:1b:a2:6a:a5:e8:e5:b6:dc:99:d9:
56:5e:18:e1
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
NUI5REFGMTEwLwYDVQQFEygyRTdBNDlBMzA3ODMyRjYzMjYwMkJGRTdBQTRFNDgw
ODc0NTUxRkNEMB4XDTI2MDIxNDE2NTEyOVoXDTMxMDIxNDE2NTEyOVowGDEWMBQG
A1UEAxMNNjk5MGE4MTYtMzcyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALLDiWjGd5rPAqnhrv/Dv1aSK4uIj2NWFbuEAf1/mO2mgLvMfCLOIs0B786a
nUaZA2ldlRRUI6cMNVwB+hiv3Fa02Q6hcaLgwdJ3BUY7NM+AGa/MtZv6jL0vSw2j
hAuKmN5bf+yXFWz0TCeKpK65GStvDA2JYtDA0hjE0n5nhw3dmRigw3zgqV+PuLLd
8BlKlyELUldbDiq98xBAP/mO3It9GsX0WRA+6PoR4aZi3dH41oTx0DkgTSYr/epb
DWwTX9GWdJJXFdLBFLdULt6P/4i0rXBaX73Dgo4R8eYRRZT3rMADh0Zvm81tjo3y
5DM+tMzTGgVLVgQZ9q7L4NYJnq0CAwEAAaOCArQwggKwMB0GA1UdDgQWBBSJvyVr
O+zrZJXtAPj1mjKdNbAAjzAfBgNVHSMEGDAWgBQuekmjB4MvYyYCv+eqTkgIdFUf
zTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjVCOUQvMEYwNjY1MTYwOUMzMTFGMTlEOTlBNDg4REFFNEVDOUMvTG5wSm93
ZURMMk1tQXJfbnFrNUlDSFJWSDgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTG5wSm93ZURMMk1tQXJfbnFrNUlDSFJWSDgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjVCOUQvMEYwNjY1MTYwOUMzMTFGMTlEOTlBNDg4REFF
NEVDOUMvNkIwMjc5Q0EwOUM1MTFGMUJFOUMzMDk3REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmZDuDANBAIAAjAHAwUALA/t
mDANBgkqhkiG9w0BAQsFAAOCAQEAIfcBoNC5k4u85JX0hauwdRupXoKpKjwwN6Hw
xcBSq3S/zGlFi+Bm0/CYS26pukD7TKYsX6uwukTIto2EBP5xCXqfC+1ToBNr62JK
zJAbB0uTvGPL63ZB0Qynn0QIeIem07MoWL+oczMC0vewKH7u6Mu0uO2pE6VPyEp/
9usV/JoQPFhZPXQzAN7PrxSilIc0kGurOXGPtUCUuo0984R8wL9IE1udEd8sbSHk
nrMKkdjCJPokHV11FWO8KMZHEI0Po4SPTnOZXe81zugGGhgA50QmPcSTfjSN0aM4
GaLe1eBkNckH75VyyrL06VKN7gCEXfIbomql6OW23JnZVl4Y4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:16 2026 by rpki-client