Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/4E367F362D1411F193F6A2DCDAE4EC9C.roa
File: 4E367F362D1411F193F6A2DCDAE4EC9C.roa (raw, json)
Hash identifier: Hva6WC1MR0w9fxXELLwTc8wp0/s+of2OUmb/NZl5gnY=
Subject key identifier: 48:2C:BF:09:4F:FB:21:60:82:A4:51:29:4F:19:E0:09:A8:7B:20:5D
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 028C
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/4E367F362D1411F193F6A2DCDAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:14:26 +0000
ROA not before: Tue 31 Mar 2026 15:14:21 +0000
ROA not after: Sun 30 Mar 2036 15:14:21 +0000
asID: 37153
IP address blocks: 41.204.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:14:21 2026 GMT
Not After : Mar 30 15:14:21 2036 GMT
Subject: CN=69cbe4d2-94e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:4f:ba:48:ac:3e:4d:dd:53:73:27:4c:ef:
7d:7d:77:8a:42:ff:8e:52:75:16:8c:48:03:1f:aa:
d6:bf:a9:61:58:64:a3:61:24:1c:18:48:14:7b:c0:
fd:c5:28:1c:e3:bd:26:41:20:2d:07:60:08:d8:0c:
4a:7b:6a:e3:04:85:75:be:a1:79:8d:6d:6e:56:98:
80:e8:ef:8e:1b:55:89:61:b3:c8:ab:a6:88:29:c3:
cf:ce:b9:ae:d0:ff:37:3f:2a:55:03:38:c5:77:3f:
b4:54:c9:ff:29:64:ea:79:f9:60:bb:f7:19:0b:ec:
5e:43:a4:a9:41:2e:5c:fb:28:23:ef:ed:35:99:15:
f8:4a:51:2c:88:88:98:99:ab:79:d5:36:a0:b3:f0:
b4:21:51:a8:14:13:99:95:59:16:92:d8:a8:e5:45:
91:02:8d:f9:21:a0:56:3d:3c:c3:12:0c:40:7e:5f:
74:ca:79:ab:91:4e:a5:99:1c:d3:ef:d7:a9:9a:e8:
cf:35:fd:f9:bb:d2:a6:dd:11:f4:6c:b7:60:d5:81:
f4:b6:f0:73:3f:f5:7e:c0:a0:50:fa:5a:20:8f:3c:
b4:ac:ae:75:5b:93:90:1f:ed:2c:c4:43:87:e0:c9:
4c:09:13:2b:0d:07:de:47:36:d4:e7:20:4c:9a:62:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:BF:09:4F:FB:21:60:82:A4:51:29:4F:19:E0:09:A8:7B:20:5D
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/4E367F362D1411F193F6A2DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:24:8f:4b:91:43:64:67:05:51:3d:6d:79:ab:02:59:e4:6e:
dc:3b:72:2e:f7:f2:e7:da:00:97:21:8c:46:9d:d4:df:7d:79:
92:03:2e:53:25:e3:8f:7f:d4:8e:5f:ba:a0:fb:6a:f6:9d:5f:
e5:6f:f5:b3:bd:b1:8e:a7:79:33:07:e1:06:36:30:63:ad:a3:
85:26:fc:8c:70:1e:ab:4d:eb:6d:f2:1a:5d:46:18:90:4b:98:
1d:90:0b:cc:bc:f5:04:cd:35:bc:49:ed:83:f6:a7:90:02:48:
a1:12:48:a4:d1:31:57:79:6d:47:02:a4:f9:c8:81:cb:c6:47:
27:8d:82:aa:1d:b1:89:3f:40:a8:27:fb:62:70:14:be:89:a1:
af:37:4c:39:77:7e:56:4a:8a:bf:72:ec:8f:76:98:a9:30:2f:
c6:fb:cf:d1:aa:4f:57:78:09:01:ac:45:bf:d0:89:b6:e7:51:
12:03:7e:c9:65:8a:41:32:a1:11:3c:f8:ec:5c:2f:17:41:2b:
79:9a:96:1d:a3:e5:d4:69:ff:fd:31:d4:07:29:91:db:c5:83:
d1:8f:63:84:0f:4d:aa:b4:04:f0:e6:67:56:fc:75:75:2f:6c:
b2:ce:98:e1:61:0b:25:36:e1:7c:75:0d:99:5c:b5:86:b2:de:
64:d5:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:52 2026 by rpki-client