Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C61BC18E0CE711F19124F4DBDAE4EC9C.roa
File: C61BC18E0CE711F19124F4DBDAE4EC9C.roa (raw, json)
Hash identifier: OxCqiLGEa5tDiR9RkcaOTV33/7NhbzfIsb8BnoJQja8=
Subject key identifier: B6:E5:55:82:87:3C:25:32:76:16:9C:E7:DC:1E:AC:78:96:B4:5E:EB
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 0538
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C61BC18E0CE711F19124F4DBDAE4EC9C.roa
Signing time: Wed 18 Feb 2026 16:35:03 +0000
ROA not before: Wed 18 Feb 2026 16:34:58 +0000
ROA not after: Wed 31 Dec 2036 16:34:58 +0000
asID: 328977
IP address blocks: 102.203.64.0/22 maxlen: 24
2c0f:6300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Feb 18 16:34:58 2026 GMT
Not After : Dec 31 16:34:58 2036 GMT
Subject: CN=6995ea37-abe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:19:7f:15:43:1b:51:f3:e4:66:9b:40:9f:
6f:56:6d:75:33:e4:4d:1a:85:b6:df:87:db:92:94:
f5:01:02:bb:a3:9a:0f:7b:c0:87:d7:ba:e7:7f:71:
e7:80:7d:99:bb:98:c5:06:55:9a:f7:37:75:b2:7f:
f7:ce:3b:0b:8f:27:b3:ad:b4:ff:24:fc:3c:2d:65:
dc:77:95:4e:2e:f8:d3:af:36:16:2d:17:94:5e:fd:
e8:e0:43:16:00:c0:ca:ee:67:ef:e6:fc:a1:62:26:
2b:4a:6b:dd:11:a4:4e:c9:64:4f:65:be:17:7f:5a:
bf:b2:23:dc:62:cb:ad:7b:d5:41:70:96:49:fd:14:
71:24:03:9c:80:ec:cf:70:37:73:a2:e9:c6:77:e1:
42:d1:91:0c:3d:57:50:98:f6:67:b9:43:b0:46:e1:
1c:79:80:b0:8d:9b:b6:7b:8e:fa:21:d5:11:44:f8:
22:e6:ed:3c:07:a6:81:7e:bd:3d:86:71:24:25:ac:
cf:b6:7e:9c:cc:9f:bb:37:5e:19:b4:c0:da:b0:61:
dd:c2:71:33:c0:99:0c:6e:8d:0e:4c:77:8f:51:9e:
43:11:af:21:da:ac:cf:fa:6f:98:0a:88:18:36:19:
db:54:e3:54:16:21:68:74:f7:36:0b:01:b1:69:60:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:55:82:87:3C:25:32:76:16:9C:E7:DC:1E:AC:78:96:B4:5E:EB
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/C61BC18E0CE711F19124F4DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.64.0/22
IPv6:
2c0f:6300::/32
Signature Algorithm: sha256WithRSAEncryption
09:95:4d:df:5f:9b:c1:93:87:98:a7:1e:47:c7:c5:e3:c8:7c:
95:83:ca:18:a4:3e:62:4a:9a:94:b6:9a:08:9a:79:0a:91:56:
f1:30:16:11:ae:96:84:e7:8a:af:8d:df:72:36:af:19:5b:7b:
6f:c2:c7:ca:82:1f:41:6a:15:11:c7:5f:09:8c:93:6f:e7:5b:
48:0a:d2:fa:b6:35:33:72:46:fd:0e:d2:2e:de:3b:ea:42:9d:
33:2c:1a:3e:b2:8c:46:21:7b:a3:95:74:32:d4:3a:9b:d1:e9:
f9:f2:0e:42:6e:32:ea:1c:cf:cc:50:06:4a:23:bf:c2:63:03:
dc:ef:a6:c3:cc:1b:3d:64:4f:d1:13:d4:16:83:70:3b:3f:11:
55:79:e4:5b:c7:d9:85:f6:87:53:2d:48:8a:2c:55:fd:e1:b1:
52:b0:15:05:cf:95:46:a8:69:58:25:cc:ac:a5:76:7b:b5:f4:
e8:15:01:c1:31:5f:94:c6:52:0f:cc:41:b7:4e:2f:bc:01:a5:
89:dc:56:98:dd:ec:41:60:32:3d:37:3f:ff:05:06:a2:27:b3:
09:ca:fb:31:9f:5d:7d:f2:ce:40:e5:b0:c9:c5:c1:a6:d8:fa:
08:28:49:02:e5:71:e2:c9:8e:f8:89:12:fb:4c:94:1d:cd:0b:
df:af:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:25 2026 by rpki-client