Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BCE8CDC61C5211F197D279EADAE4EC9C.roa
File: BCE8CDC61C5211F197D279EADAE4EC9C.roa (raw, json)
Hash identifier: ZPpUNTHd2dpDYuybn906490AMe6jeOmjYZPUqqyw2nY=
Subject key identifier: 8A:69:40:5F:AB:7E:7F:14:13:9E:3D:11:AB:E8:1C:3D:5A:DF:D5:1D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17C2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BCE8CDC61C5211F197D279EADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:28:31 +0000
ROA not before: Tue 10 Mar 2026 07:28:26 +0000
ROA not after: Fri 10 Mar 2028 07:28:26 +0000
asID: 29802
IP address blocks: 196.251.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 01:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6082 (0x17c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 07:28:26 2026 GMT
Not After : Mar 10 07:28:26 2028 GMT
Subject: CN=69afc81f-5891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:58:1d:e2:a1:1a:49:47:c9:9b:ea:1a:61:
47:74:dd:17:86:3f:68:07:6d:03:ae:78:4c:1f:89:
1e:a6:04:45:f7:86:de:26:15:16:9a:8c:c2:10:19:
df:8f:bb:eb:03:36:e3:91:fa:ca:62:25:77:cd:8e:
63:75:73:21:b2:bd:a4:02:ac:2a:06:c3:51:aa:f8:
12:b9:20:a4:1f:ee:b7:07:23:9b:ed:b9:e6:3d:3d:
e3:c2:5a:ac:b5:f6:6b:55:08:2d:2a:67:a9:d0:42:
77:64:c5:e8:6b:94:d3:ee:ac:b4:5d:d3:f9:b8:01:
5f:c8:0a:d6:47:a6:cd:63:51:0d:ac:e7:2e:37:8e:
20:f9:08:ae:63:04:5e:08:e8:d3:d3:e7:65:3f:98:
8f:15:d8:f6:3e:9a:2f:ed:68:a3:c5:7f:ac:f4:02:
5f:3e:8f:2b:cd:21:f1:ee:d8:11:4e:d9:e3:a1:b8:
0d:6e:9a:63:2f:ba:9e:6c:50:7f:a7:e8:59:a7:c9:
2e:12:5f:1b:3d:78:7d:6f:53:fc:07:10:0a:23:ea:
98:b8:bb:bf:24:f8:21:33:e5:fa:1f:b6:c9:87:85:
78:f2:5c:e8:ca:d5:2d:0e:41:a1:49:20:fa:60:ac:
11:b7:68:f9:93:0d:c7:5c:e3:c3:a0:e0:93:f8:f3:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:40:5F:AB:7E:7F:14:13:9E:3D:11:AB:E8:1C:3D:5A:DF:D5:1D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BCE8CDC61C5211F197D279EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e7:dd:cd:33:b3:99:f4:b3:66:aa:c9:92:bd:b2:6c:dc:c9:
bd:c6:7c:b7:a8:59:44:01:a2:e4:52:ab:43:d3:e3:16:a9:19:
35:2a:58:52:17:f6:13:ff:65:04:1e:3a:7a:22:76:4b:29:de:
45:d0:c5:21:3a:0d:11:a1:18:fb:ed:7c:8a:21:4a:73:26:ea:
dc:b5:69:78:07:f0:6f:72:98:e7:bb:35:ce:f6:5a:2e:62:e1:
10:5c:8d:9b:da:37:57:d0:d2:53:bf:03:e0:48:50:5e:aa:ee:
dc:d9:3c:f7:5d:e4:c2:70:d1:26:91:4f:64:04:99:50:3a:ee:
03:50:f8:85:8a:98:74:bc:3c:17:05:7b:2f:fb:0b:04:cf:bf:
4a:16:1c:8a:6f:72:0e:b9:2a:85:9f:4f:35:fc:14:c8:67:88:
eb:91:66:86:47:d3:ae:63:fe:16:f6:e9:be:3d:89:2f:a0:49:
04:ab:8f:17:93:1f:f0:c2:35:4e:84:22:e8:29:c2:96:44:e5:
bb:73:15:a3:42:aa:f7:bb:d4:40:bd:4f:83:dc:65:06:99:59:
2c:e9:0b:45:8f:fe:29:84:9e:cd:01:1d:a1:9c:6d:ad:cc:42:
a9:15:22:b8:02:f0:4e:25:c5:f4:44:29:a8:9e:21:2e:e6:c2:
e5:b7:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:17:11 2026 by rpki-client