Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/A6AEED562D1411F182180DDDDAE4EC9C.roa
File: A6AEED562D1411F182180DDDDAE4EC9C.roa (raw, json)
Hash identifier: X98HrtvjqtIk7250C17DJqnpkquwvjxOdANpHQT1YOE=
Subject key identifier: 37:D5:B3:F4:3B:69:75:C6:A0:74:EC:A4:75:F1:AA:FF:13:32:9C:02
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 028E
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/A6AEED562D1411F182180DDDDAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:16:55 +0000
ROA not before: Tue 31 Mar 2026 15:16:50 +0000
ROA not after: Sun 30 Mar 2036 15:16:50 +0000
asID: 37153
IP address blocks: 196.40.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:16:50 2026 GMT
Not After : Mar 30 15:16:50 2036 GMT
Subject: CN=69cbe567-8ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:f9:b5:79:ae:37:98:1e:75:6a:15:21:74:
82:10:49:9a:78:bf:96:33:20:fe:06:33:e7:d0:ca:
7b:1b:b9:f7:fe:45:75:87:e2:3c:5e:ed:e7:87:c6:
32:f4:e4:4d:fc:b2:20:40:57:20:0e:7a:0d:48:bc:
c7:a6:5c:2f:6b:51:f4:50:59:52:30:a4:73:a6:e5:
c8:20:9c:d0:66:01:f6:39:f3:7a:0b:f6:78:33:3b:
5c:0e:23:85:1d:82:b4:ec:30:7c:3b:57:8a:f8:93:
a6:4a:04:9e:79:4d:01:40:d0:a7:21:07:6c:45:c1:
47:ab:e3:3d:f0:92:cd:8e:a0:dd:8a:8b:6a:e1:62:
3a:54:5f:ad:6c:d3:62:1b:7e:2f:90:c0:2e:a0:8c:
fa:d8:6a:28:ac:39:92:cb:7d:3d:02:c6:0e:56:9c:
c6:42:f8:9f:c8:93:61:bb:55:c7:dc:5f:b6:fa:e2:
22:1f:24:56:ed:be:30:dd:22:17:74:0f:1a:dc:6c:
29:57:f9:16:8a:e8:0d:b7:36:14:04:a6:43:63:db:
07:0e:bb:49:9b:8d:90:99:51:58:10:68:18:5d:d9:
76:e9:3a:f3:d8:f7:ec:49:5f:52:8e:00:2f:d7:ef:
b5:43:2c:4f:14:3a:9c:7f:92:ba:da:7c:3c:58:52:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D5:B3:F4:3B:69:75:C6:A0:74:EC:A4:75:F1:AA:FF:13:32:9C:02
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/A6AEED562D1411F182180DDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.40.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:c4:71:8d:a8:cb:3f:79:da:47:85:55:74:60:0e:a3:86:09:
2f:66:dc:1c:64:3c:cd:1b:6c:8e:7d:c2:87:a9:7f:c4:d6:48:
c4:ea:1a:bd:da:29:8f:9c:8d:ea:89:a2:ff:5d:9d:d9:6c:de:
bb:4f:c1:64:04:3d:07:e6:6b:59:1f:a1:55:d2:24:e9:00:f3:
bc:af:fc:f6:c5:25:b6:69:4f:d3:3e:b4:b4:da:fe:d1:fe:14:
98:11:ee:b0:b6:61:73:ea:fe:46:c8:ef:20:75:35:dc:8c:8e:
9f:84:6e:eb:34:63:0c:96:b8:bd:1a:70:ff:71:e6:c5:76:67:
31:1f:6e:35:69:31:23:e2:64:f3:37:80:8f:1f:39:26:18:25:
b6:02:1b:b2:55:b7:4a:93:dc:d4:c9:39:9c:8d:f8:e7:ba:02:
ff:4f:a1:ec:93:62:5d:5e:e2:ba:2c:90:e7:ed:aa:a8:b6:a9:
0b:bb:20:6e:d2:29:e8:17:c9:ca:a3:5f:f9:0b:e4:ef:d2:c3:
2f:e0:10:b0:57:3f:c4:b4:8a:8d:73:3e:21:7e:ab:d4:3e:f1:
6d:68:56:3a:81:f1:68:4c:a1:fe:43:4f:ee:df:68:72:86:42:
f7:4d:61:5a:80:fb:3f:72:5f:65:f9:1a:ef:e5:69:6c:2a:ec:
79:03:47:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTgwQTFBRjExMC8GA1UEBRMoRDA5QTVBQUQ1QTE3NzNEODZCMUQyNkRENUQxQzQ0
NEZDQ0FDRjZFNDAeFw0yNjAzMzExNTE2NTBaFw0zNjAzMzAxNTE2NTBaMBgxFjAU
BgNVBAMTDTY5Y2JlNTY3LThhYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBsvm1ea43mB51ahUhdIIQSZp4v5YzIP4GM+fQynsbuff+RXWH4jxe7eeH
xjL05E38siBAVyAOeg1IvMemXC9rUfRQWVIwpHOm5cggnNBmAfY583oL9ngzO1wO
I4UdgrTsMHw7V4r4k6ZKBJ55TQFA0KchB2xFwUer4z3wks2OoN2Ki2rhYjpUX61s
02Ibfi+QwC6gjPrYaiisOZLLfT0Cxg5WnMZC+J/Ik2G7VcfcX7b64iIfJFbtvjDd
Ihd0DxrcbClX+RaK6A23NhQEpkNj2wcOu0mbjZCZUVgQaBhd2XbpOvPY9+xJX1KO
AC/X77VDLE8UOpx/krrafDxYUjyxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUN9Wz
9DtpdcagdOykdfGq/xMynAIwHwYDVR0jBBgwFoAU0JparVoXc9hrHSbdXRxET8ys
9uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4MEExLzRFQjUwODE0M0Y1QTExRUZCNTkyNTA3MDc2MkU5NTFBLzBKcGFy
Vm9YYzlockhTYmRYUnhFVDh5czl1US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBKcGFyVm9YYzlockhTYmRYUnhFVDh5czl1US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE4MEExLzRFQjUwODE0M0Y1QTExRUZCNTkyNTA3MDc2
MkU5NTFBL0E2QUVFRDU2MkQxNDExRjE4MjE4MERERERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATEKGAwDQYJKoZIhvcNAQEL
BQADggEBAKjEcY2oyz952keFVXRgDqOGCS9m3BxkPM0bbI59woepf8TWSMTqGr3a
KY+cjeqJov9dndls3rtPwWQEPQfma1kfoVXSJOkA87yv/PbFJbZpT9M+tLTa/tH+
FJgR7rC2YXPq/kbI7yB1NdyMjp+Ebus0YwyWuL0acP9x5sV2ZzEfbjVpMSPiZPM3
gI8fOSYYJbYCG7JVt0qT3NTJOZyN+Oe6Av9PoeyTYl1e4roskOftqqi2qQu7IG7S
KegXycqjX/kL5O/Swy/gELBXP8S0io1zPiF+q9Q+8W1oVjqB8WhMof5DT+7faHKG
QvdNYVqA+z9yX2X5Gu/laWwq7HkDR5E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:25 2026 by rpki-client