Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/005277CA2D1411F19F47E3DADAE4EC9C.roa
File: 005277CA2D1411F19F47E3DADAE4EC9C.roa (raw, json)
Hash identifier: hfLkKQB462eRt13ViRiwse3oNTJII/TyMAwJoMbhFu0=
Subject key identifier: 10:CC:C4:3B:41:D9:C0:FB:CF:CD:02:A5:44:E8:CD:EB:2A:34:FF:2C
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 028A
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/005277CA2D1411F19F47E3DADAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:12:16 +0000
ROA not before: Tue 31 Mar 2026 15:12:11 +0000
ROA not after: Sun 30 Mar 2036 15:12:11 +0000
asID: 37153
IP address blocks: 41.203.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:12:11 2026 GMT
Not After : Mar 30 15:12:11 2036 GMT
Subject: CN=69cbe44f-b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:0d:c5:34:9a:cc:ad:26:0e:5c:c1:61:3d:
09:f1:55:76:95:65:0c:6b:5c:06:d7:81:ba:54:a1:
cc:e9:84:b1:ed:38:e1:5d:e2:be:4c:46:cf:db:34:
4e:9b:74:ac:35:53:99:65:8f:3b:e6:2f:57:07:74:
9a:7b:e4:eb:42:68:a4:d5:35:4b:7f:94:aa:30:c4:
16:f5:6e:aa:be:24:a9:ef:48:b1:7a:37:ce:7f:73:
38:8e:cb:76:6f:36:82:b8:a8:ad:b3:10:64:98:7a:
43:06:27:b1:0b:fa:09:30:1c:c7:80:6e:a2:4c:f8:
2e:5e:0d:7a:7b:80:71:60:cb:e2:8d:81:83:86:59:
c4:4b:51:7a:96:3f:98:d3:ff:a0:73:03:2c:a5:64:
26:fc:71:4f:cb:52:4c:43:09:9f:4a:72:e5:50:fc:
96:a3:ff:eb:74:b6:8b:b6:92:c8:71:ea:62:7f:11:
37:4a:ab:06:b5:91:39:2d:b4:08:22:3d:9b:25:59:
82:8e:09:0c:88:af:9f:b8:1a:9a:f6:6c:26:67:c8:
e9:a0:8b:0f:01:9c:df:fa:0a:25:4c:16:37:58:b6:
25:7a:f6:26:bb:c6:cf:ea:23:89:e3:97:75:7c:14:
8e:79:f4:57:74:4c:cf:6b:81:af:ad:b1:08:f1:08:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:C4:3B:41:D9:C0:FB:CF:CD:02:A5:44:E8:CD:EB:2A:34:FF:2C
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/005277CA2D1411F19F47E3DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.0.0/19
Signature Algorithm: sha256WithRSAEncryption
75:98:94:50:d5:93:64:88:69:19:3b:04:96:0a:92:f9:cc:a2:
c8:c1:16:d5:8c:74:87:29:5a:4d:01:e9:b6:97:84:4f:c7:df:
19:d8:2c:32:53:e8:d9:6a:a3:35:0b:69:37:2b:a9:62:56:0c:
06:6c:d3:0a:51:c2:87:69:f1:ce:36:55:78:9b:07:00:83:97:
d6:59:95:9c:15:2a:19:ae:17:93:4c:ac:c7:63:fd:c0:5a:0a:
2d:73:0c:32:56:e7:3d:9a:c0:44:1d:dc:e8:73:dd:54:0e:a4:
6b:84:d9:3e:1e:95:52:f2:e2:df:f1:25:95:72:ec:dd:f8:a8:
32:3d:fc:fa:e9:96:8d:83:eb:d2:16:b3:c3:3d:84:6f:d5:77:
23:c6:f5:31:25:a2:a2:b5:72:3f:a0:ab:8f:33:c0:4b:ad:44:
ee:fe:1b:94:1e:10:20:c7:a5:5b:1f:1f:36:86:62:5c:18:a3:
26:31:73:b0:75:07:00:f4:7c:5d:69:e6:e2:7c:ac:df:dd:bd:
cf:12:fa:45:c8:bf:49:c5:65:26:bf:4f:95:e2:2c:81:e0:30:
dc:49:0f:90:7f:a9:97:51:5f:d8:5b:38:e0:ba:26:3e:ea:6c:
a8:87:51:8c:bb:52:0e:08:03:e1:fb:ab:76:b0:e4:eb:3c:17:
1f:d9:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:47 2026 by rpki-client