Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/27F68F001D6011F189B5A389DAE4EC9C.roa
File: 27F68F001D6011F189B5A389DAE4EC9C.roa (raw, json)
Hash identifier: r131pu8xYiTZt6DCD0vKC9bThOnceIVZGaBlMh5whio=
Subject key identifier: 99:6A:00:07:56:95:40:A5:A7:7E:2F:BE:3B:98:60:84:B7:13:2E:50
Certificate issuer: /CN=F36A9F58AF/serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
Certificate serial: 03
Authority key identifier: 2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/27F68F001D6011F189B5A389DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 15:37:05 +0000
ROA not before: Wed 11 Mar 2026 15:37:01 +0000
ROA not after: Fri 10 Apr 2026 15:37:01 +0000
asID: 329607
IP address blocks: 102.204.240.0/22 maxlen: 22
2001:43fe:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A9F58AF, serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
Validity
Not Before: Mar 11 15:37:01 2026 GMT
Not After : Apr 10 15:37:01 2026 GMT
Subject: CN=69b18c21-d247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:56:51:95:42:bf:34:88:88:bf:d1:7c:31:
ec:d4:f0:cc:fb:02:6f:26:76:38:c4:11:7e:83:e2:
86:8f:0f:26:71:89:ee:25:3f:2a:49:dc:b4:93:74:
b3:2b:f6:3c:6b:49:a8:06:c5:35:96:b5:38:dc:84:
64:c2:48:06:44:07:f2:cf:6b:60:6b:a2:dc:c7:d0:
80:4d:06:49:87:f0:a7:ad:23:a2:79:19:bb:e4:38:
97:09:b0:ab:17:ad:e2:77:7f:01:ed:e9:7f:0b:fe:
54:d3:8b:5d:36:e9:e1:9d:e4:78:eb:bc:81:93:78:
94:da:3d:77:38:62:b6:3f:77:62:d1:d9:db:a7:33:
96:a0:48:bd:26:41:00:59:ad:ed:69:5a:80:53:7a:
52:a1:bd:55:fd:17:74:db:b2:3a:a5:7f:a6:aa:ee:
f9:a3:5d:bc:25:2c:a7:51:ab:4c:0e:31:dc:cc:b0:
51:41:9a:38:27:82:d5:c1:6e:e3:17:d9:a8:60:dd:
e0:22:dc:1c:00:42:af:e5:f9:3e:9b:75:d7:32:1a:
15:2c:51:27:0c:6d:af:1b:73:38:02:d6:4b:5e:de:
4e:bf:5e:00:17:34:6d:35:8a:c2:37:82:c8:95:c1:
35:5a:eb:36:87:93:7d:30:26:4c:19:74:56:e9:28:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:00:07:56:95:40:A5:A7:7E:2F:BE:3B:98:60:84:B7:13:2E:50
X509v3 Authority Key Identifier:
keyid:2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/27F68F001D6011F189B5A389DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.240.0/22
IPv6:
2001:43fe:6800::/48
Signature Algorithm: sha256WithRSAEncryption
7c:3c:e0:0c:6f:11:3c:a6:bf:65:80:f9:05:c3:da:f4:24:1d:
a0:a1:27:0e:e4:d8:70:73:ce:bc:e7:d7:a5:8c:70:2c:9e:5d:
01:cd:80:a5:70:7c:c8:0d:fa:2b:94:96:84:7b:74:f1:bf:14:
97:4d:24:ab:f8:ad:43:66:51:e6:83:90:ca:77:a3:f5:26:81:
5f:78:60:6d:a9:f8:51:aa:4f:58:be:97:5a:6a:a7:4a:9a:0e:
5d:0b:b6:1e:6d:45:83:e4:b5:de:28:46:da:e7:19:d0:83:0b:
3b:69:c5:89:5c:61:7b:5c:34:8e:f6:82:3d:71:c1:ed:a2:70:
f8:74:b6:6b:df:e2:87:66:c2:e4:b1:9c:96:f2:56:5f:9a:8b:
d6:b0:a1:db:b7:d2:42:29:03:a7:64:8d:68:61:f1:d1:ab:db:
80:bb:4a:c0:53:20:f6:d4:41:e7:0c:48:a4:86:06:0b:2e:b7:
3a:09:92:f2:71:db:3e:f7:0c:e4:f9:74:85:37:3f:7e:5e:2d:
37:e5:cf:b5:53:02:b6:7a:b9:ac:66:59:c6:6a:55:9e:10:ab:
94:f4:5d:69:39:4b:8a:75:9a:da:6e:fd:a5:30:9f:10:fa:95:
af:a6:d8:40:48:71:b7:47:3d:1e:bd:e2:fd:c8:3e:01:27:d7:
17:9c:84:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 11:56:18 2026 by rpki-client