Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/0CBFE8A6041C11F1889BA7D4DAE4EC9C.roa
File: 0CBFE8A6041C11F1889BA7D4DAE4EC9C.roa (raw, json)
Hash identifier: 87mot8x5Mu5pUJnIoZZaYqHp2VbPJKid7xkzCS48RQ8=
Subject key identifier: 8B:34:9B:17:1F:14:E1:08:2D:C5:DC:5D:5C:6D:50:FD:03:09:DF:7E
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 0529
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/0CBFE8A6041C11F1889BA7D4DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 11:56:35 +0000
ROA not before: Sat 07 Feb 2026 11:56:29 +0000
ROA not after: Wed 31 Dec 2036 11:56:29 +0000
asID: 207113
IP address blocks: 102.206.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Feb 7 11:56:29 2026 GMT
Not After : Dec 31 11:56:29 2036 GMT
Subject: CN=69872873-f3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:06:17:66:19:ae:37:13:38:d5:4a:d0:fe:
43:6a:8a:a7:86:6e:a9:44:da:a0:6f:ba:93:c7:96:
68:aa:aa:26:71:75:e9:16:a7:0d:43:c0:4b:a0:25:
45:34:62:0e:50:bf:4d:45:6f:a3:48:c7:4f:6e:64:
f5:ba:ac:c8:46:cc:a4:d8:7f:1c:eb:63:a6:b7:1e:
55:93:90:38:99:82:ce:96:6d:71:3e:bd:b2:3e:31:
fe:4d:81:50:7b:3e:a5:53:6c:b8:1b:67:da:de:54:
20:dc:a7:c4:18:33:62:5a:1c:e0:a6:d4:32:ce:24:
28:60:9e:14:3f:59:4c:ea:6f:70:ee:fc:78:d5:2b:
f8:2e:ba:10:07:8f:ff:18:d3:03:c2:bd:6a:14:61:
ec:a4:50:88:b4:f0:d3:d8:92:e9:45:89:50:4c:90:
c7:1e:20:42:85:3e:cc:e3:91:5f:46:64:77:0c:f6:
b6:61:2c:64:c2:00:3f:09:0a:91:9a:3d:c1:a1:bc:
a7:b6:b9:7b:17:fe:c7:77:6a:bf:71:fe:33:31:64:
49:35:4b:a4:15:97:46:2c:c9:b4:d8:d4:fa:df:7c:
31:32:9e:fe:c7:3c:14:6e:8a:c2:07:6f:d3:1a:61:
21:5d:f9:6b:87:b2:6f:27:4d:8a:11:0f:73:7c:7e:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:9B:17:1F:14:E1:08:2D:C5:DC:5D:5C:6D:50:FD:03:09:DF:7E
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/0CBFE8A6041C11F1889BA7D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.165.0/24
Signature Algorithm: sha256WithRSAEncryption
76:54:72:b1:bd:6b:26:bd:14:2d:2e:c3:b0:ad:63:e0:53:31:
18:8c:2c:25:fa:16:c2:8c:f5:85:ed:6d:ad:c1:13:14:11:9b:
5f:42:8e:61:27:b8:03:20:6c:f6:12:02:eb:d3:46:39:ab:ea:
a9:d1:03:8c:af:aa:90:77:a6:a7:f1:3d:ae:f3:53:28:8a:7b:
92:82:76:76:cb:d0:2e:34:d3:46:c0:8a:77:a5:fd:4d:59:b3:
f4:1b:7f:04:23:c1:02:05:96:a4:62:bc:8c:51:4b:0b:5e:1b:
0f:db:cc:d0:7c:c7:e4:71:2b:6e:96:24:a4:b3:62:b6:44:73:
e1:e0:b1:4d:aa:a7:c2:b7:5d:f5:b4:21:63:4a:b5:41:75:9f:
88:b7:a7:8d:07:2c:83:78:ee:18:c6:c5:f9:6e:cd:70:95:18:
7d:e9:94:ab:f1:28:f3:c3:05:cb:44:80:2a:c3:f3:3c:8e:f9:
70:68:e0:e4:18:24:36:ef:39:12:9e:30:66:d8:55:9f:aa:1a:
0e:b7:60:ea:5c:2c:81:f2:00:cb:81:e9:0a:83:a9:13:d2:72:
e0:b0:25:1b:54:6e:f0:a4:5d:56:15:23:ca:87:05:93:d1:a3:
91:dd:36:b6:2f:58:96:08:8c:cb:0a:d6:97:dc:b1:13:3d:b4:
62:6f:ed:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw
MUVDNUE4MDdGODAeFw0yNjAyMDcxMTU2MjlaFw0zNjEyMzExMTU2MjlaMBgxFjAU
BgNVBAMTDTY5ODcyODczLWYzY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGWwYXZhmuNxM41UrQ/kNqiqeGbqlE2qBvupPHlmiqqiZxdekWpw1DwEug
JUU0Yg5Qv01Fb6NIx09uZPW6rMhGzKTYfxzrY6a3HlWTkDiZgs6WbXE+vbI+Mf5N
gVB7PqVTbLgbZ9reVCDcp8QYM2JaHOCm1DLOJChgnhQ/WUzqb3Du/HjVK/guuhAH
j/8Y0wPCvWoUYeykUIi08NPYkulFiVBMkMceIEKFPszjkV9GZHcM9rZhLGTCAD8J
CpGaPcGhvKe2uXsX/sd3ar9x/jMxZEk1S6QVl0YsybTY1PrffDEynv7HPBRuisIH
b9MaYSFd+WuHsm8nTYoRD3N8fvQbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUizSb
Fx8U4QgtxdxdXG1Q/QMJ334wHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo
B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP
MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0Yx
MjIyNDY4LzBDQkZFOEE2MDQxQzExRjE4ODlCQTdENERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmzqUwDQYJKoZIhvcNAQEL
BQADggEBAHZUcrG9aya9FC0uw7CtY+BTMRiMLCX6FsKM9YXtba3BExQRm19CjmEn
uAMgbPYSAuvTRjmr6qnRA4yvqpB3pqfxPa7zUyiKe5KCdnbL0C4000bAinel/U1Z
s/QbfwQjwQIFlqRivIxRSwteGw/bzNB8x+RxK26WJKSzYrZEc+HgsU2qp8K3XfW0
IWNKtUF1n4i3p40HLIN47hjGxfluzXCVGH3plKvxKPPDBctEgCrD8zyO+XBo4OQY
JDbvORKeMGbYVZ+qGg63YOpcLIHyAMuB6QqDqRPScuCwJRtUbvCkXVYVI8qHBZPR
o5HdNrYvWJYIjMsK1pfcsRM9tGJv7TU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:25 2026 by rpki-client