Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/5D97EC882D1611F19AC068E9DAE4EC9C.roa
File: 5D97EC882D1611F19AC068E9DAE4EC9C.roa (raw, json)
Hash identifier: Nd824+zIPH9JTtjxmpkoGfMedFkSr7B3dV2aK/j/RZE=
Subject key identifier: 29:3D:E2:97:33:DB:FD:2A:1C:B6:28:4C:46:F9:36:47:57:10:73:3F
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 0294
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/5D97EC882D1611F19AC068E9DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:29:11 +0000
ROA not before: Tue 31 Mar 2026 15:29:05 +0000
ROA not after: Sun 30 Mar 2036 15:29:05 +0000
asID: 24940
IP address blocks: 197.242.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:29:05 2026 GMT
Not After : Mar 30 15:29:05 2036 GMT
Subject: CN=69cbe847-c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:d9:86:e0:d9:90:19:3d:29:0a:4f:50:2e:
03:00:6a:d3:67:2b:57:67:e7:e8:5e:ed:51:02:2e:
b9:2a:9c:9e:b0:89:09:b3:bd:9d:42:a9:62:7a:e2:
ee:2a:e8:5f:5c:8e:d9:d9:2b:40:4e:9c:03:13:d9:
36:58:81:20:0a:15:9d:5d:b5:d5:3d:8a:d3:75:65:
73:15:9c:59:35:4e:3b:63:21:27:2b:ab:16:61:f3:
25:6b:b4:c1:9d:7e:25:a0:8a:9b:db:96:cb:42:54:
00:41:f1:fd:33:e2:c3:cb:5c:05:12:55:f2:be:cb:
70:57:5c:ad:8b:80:a6:e3:20:d7:02:dd:86:ed:a3:
71:a7:43:42:83:9a:0a:a8:96:fa:98:f5:a7:53:31:
c9:d9:16:55:e0:9f:fd:f1:83:7c:37:2e:45:44:6d:
5a:a3:b3:0f:79:91:5e:41:47:f9:9e:1f:76:e9:d0:
5a:43:17:91:51:c6:97:75:f6:08:e9:98:6c:35:80:
58:5a:16:a6:e5:65:2c:4d:b9:d2:24:3a:39:71:fb:
73:48:44:df:08:eb:dd:17:79:6c:21:a1:8c:18:4f:
da:ea:1d:49:24:c5:8f:62:a0:a2:e3:63:50:39:06:
99:95:60:1a:67:5e:00:be:4d:a3:db:a9:32:aa:d3:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:E2:97:33:DB:FD:2A:1C:B6:28:4C:46:F9:36:47:57:10:73:3F
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/5D97EC882D1611F19AC068E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.242.84.0/22
Signature Algorithm: sha256WithRSAEncryption
80:af:05:74:42:b5:a9:86:e8:a1:83:20:f8:71:8f:7c:c3:86:
1d:28:13:ea:3a:63:1f:93:d8:9f:31:b3:87:b8:4e:1e:27:90:
07:7d:54:c4:7d:0f:14:aa:3e:b1:86:10:41:9f:29:b2:7b:5e:
14:11:7b:ff:2a:05:ca:ad:df:a1:af:89:f0:e8:89:87:44:17:
e3:a0:16:c9:48:54:b8:bb:ed:04:ee:87:cd:96:70:e8:30:1e:
4d:98:53:16:bd:b3:6f:1d:40:ba:34:c6:33:64:d6:d0:4f:ce:
5a:b1:33:54:a8:e8:bc:c5:2f:06:7d:79:25:14:b4:91:18:55:
8c:a7:93:1c:54:35:58:90:fa:72:d6:f5:46:91:53:6c:86:53:
98:cd:6a:92:fc:0c:6b:f3:25:df:4e:7e:36:83:35:af:86:65:
de:2d:a2:72:52:d9:27:92:f0:7a:88:65:52:65:32:5a:88:c0:
cc:75:7b:ed:04:c7:a8:bc:2f:05:fd:3f:bb:27:4d:3e:5a:13:
07:46:ed:0a:63:10:95:67:f7:fd:1f:15:97:e4:c1:0c:b9:4c:
89:01:2f:dd:34:29:f9:0b:01:d2:61:f0:27:d0:b0:b4:e2:cd:
d2:74:26:53:b3:bb:13:88:2e:b8:8b:38:20:e5:4c:be:b9:78:
a1:b1:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:15 2026 by rpki-client