Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa
File: 41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa (raw, json)
Hash identifier: xtq/+9B10Xvwdvmepm+gxrmkIEDZCZ6b5ji5Ft9YF0w=
Subject key identifier: 27:A0:B1:CC:B4:43:69:79:EC:F9:BE:C7:EA:C3:71:19:2C:6B:73:D4
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 0292
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:21:15 +0000
ROA not before: Tue 31 Mar 2026 15:21:10 +0000
ROA not after: Sun 30 Mar 2036 15:21:10 +0000
asID: 37153
IP address blocks: 196.22.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:21:10 2026 GMT
Not After : Mar 30 15:21:10 2036 GMT
Subject: CN=69cbe66b-9891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:ac:d4:1e:ee:7b:25:e2:ea:ea:ba:f2:58:
5b:30:55:03:c0:09:1d:9e:d6:a4:35:8f:ef:f1:3b:
09:5d:13:0f:83:da:af:4a:4a:b8:15:72:35:e5:c7:
c4:73:88:2d:87:c9:a0:26:5a:e5:96:59:29:e8:2b:
9c:ec:6d:0d:70:09:de:a5:39:38:c1:53:74:77:1f:
50:e1:49:07:b7:7f:d8:9c:da:80:83:aa:d9:9c:9f:
68:7b:64:fc:36:52:b5:9f:43:b0:dd:fa:4b:04:1d:
74:9a:c9:62:1e:30:1b:a0:f9:26:27:3c:e0:fe:1d:
2b:f4:59:9b:04:6b:57:37:96:74:a6:89:ea:28:33:
73:e2:c8:76:ee:8a:d6:71:83:12:bc:d1:3b:93:1b:
ec:06:80:f6:a8:5e:2e:fe:dd:47:c1:9b:f1:6d:f4:
b5:15:13:3a:19:96:b3:b5:8f:bd:09:d3:04:0b:1e:
a2:59:96:92:4a:44:30:ba:a0:fe:03:f0:5f:d3:2a:
e6:d4:36:7c:46:41:bb:b1:ab:d6:b7:d2:ee:3a:34:
8a:e1:40:f9:97:2c:31:1b:03:07:37:86:cd:93:1f:
c8:ec:9d:48:21:da:70:21:9e:5c:df:0e:88:21:f0:
c6:cf:2b:5a:0f:95:23:38:07:b8:e1:f4:59:27:10:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:B1:CC:B4:43:69:79:EC:F9:BE:C7:EA:C3:71:19:2C:6B:73:D4
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.22.136.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:47:87:3b:c0:d2:79:de:f3:8c:f9:67:47:7c:2b:72:fb:ef:
27:71:6e:b3:f1:a1:c8:80:e1:1b:77:a5:88:70:b1:22:15:b7:
ec:79:af:f5:c0:02:f1:76:65:d9:47:95:0a:65:33:0c:3c:17:
f3:d1:a7:f4:c7:96:42:4e:f5:b8:36:70:ad:42:89:96:89:0c:
ca:3b:b9:d1:89:95:34:96:ce:66:a3:f5:9c:b4:5f:af:01:cd:
43:fb:a1:b6:7e:82:89:fd:af:be:7e:53:de:cb:f6:14:61:06:
ea:25:d8:9e:00:8d:45:7d:d5:50:ee:de:63:ee:f2:45:50:de:
00:e9:a5:b2:6f:46:8b:34:a4:ec:93:21:49:a8:de:f3:73:1f:
a0:a3:a7:ee:b8:0a:6c:85:72:f6:da:68:b1:b7:1d:a7:90:21:
dc:02:11:78:6b:99:3d:54:63:de:1c:e6:4f:9a:53:8c:1e:d2:
3e:3b:cb:45:8c:7c:36:10:45:f2:52:85:73:f5:9e:c9:f5:8d:
a1:00:68:3a:86:b0:30:a6:aa:df:ca:bc:d9:84:96:f0:41:dc:
a5:66:72:e2:3e:ff:7e:59:3c:52:7f:c4:b1:a8:db:1a:45:c7:
94:ea:15:9f:52:af:f4:f4:4b:28:2e:49:30:5e:83:fc:44:59:
f9:74:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:22 2026 by rpki-client