Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/AECB1C142D1711F1B01831F1DAE4EC9C.roa
File: AECB1C142D1711F1B01831F1DAE4EC9C.roa (raw, json)
Hash identifier: JQBqoZnnwg76xS1Fp0vIiTMe2ujGiBdmDQrJPFV/kXI=
Subject key identifier: 70:01:4E:0F:8D:AB:8D:A0:7A:E7:15:7B:D4:9D:4F:28:CA:B1:66:A3
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 0298
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/AECB1C142D1711F1B01831F1DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:38:37 +0000
ROA not before: Tue 31 Mar 2026 15:38:32 +0000
ROA not after: Sun 30 Mar 2036 15:38:32 +0000
asID: 37153
IP address blocks: 2c0f:fce8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:38:32 2026 GMT
Not After : Mar 30 15:38:32 2036 GMT
Subject: CN=69cbea7d-5e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:64:b0:82:c5:08:85:f3:e5:da:20:30:c6:
44:cd:75:f6:75:85:ff:62:b3:dc:e8:ce:87:47:20:
2e:92:f7:22:08:e9:cf:de:e8:4a:47:36:15:8f:bf:
77:87:80:8b:a2:3d:e4:d5:cc:14:b4:7b:ce:b5:6f:
fe:68:a7:c9:b0:93:fd:e8:07:07:64:cb:d7:15:72:
00:3c:c6:2c:2d:45:5e:7c:23:f6:7b:94:cf:67:5e:
b2:f0:38:27:37:94:e1:27:ae:d1:c3:e9:11:b4:88:
71:9e:04:87:a4:f9:ab:07:0b:8e:bf:9a:3d:44:b7:
52:7c:28:5c:61:4c:17:af:5b:a7:8e:96:33:5b:6c:
fc:28:3c:d2:47:3f:7e:2d:b2:d1:e4:75:c7:b4:0f:
f6:06:73:fa:c6:d1:b5:d6:99:1b:26:60:b9:e9:7e:
96:3d:24:2c:d9:28:46:38:21:5f:4a:58:e1:04:91:
5a:2f:34:21:9d:d4:e2:fe:69:61:bf:65:cc:c8:b0:
e7:0b:7c:8d:9a:c9:0e:ac:5f:19:02:0f:9f:da:69:
20:86:83:02:e3:80:a1:a5:ad:ba:51:be:58:c5:3f:
ad:61:8f:41:cc:68:94:68:13:1e:2c:31:44:d8:26:
64:33:da:6a:05:b5:c3:fe:e4:b3:8a:cc:1d:3e:a1:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:01:4E:0F:8D:AB:8D:A0:7A:E7:15:7B:D4:9D:4F:28:CA:B1:66:A3
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/AECB1C142D1711F1B01831F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fce8::/32
Signature Algorithm: sha256WithRSAEncryption
36:d2:ab:9a:10:78:d3:95:1f:b8:48:84:e0:43:93:13:83:49:
95:81:1f:69:da:37:72:79:8b:5e:ec:c1:93:fc:15:f3:2c:c6:
1f:98:7d:ed:fa:29:3f:04:c1:51:bf:22:42:35:ca:a8:67:4b:
71:09:31:e5:9b:2d:fb:fb:a9:9a:46:03:e5:2c:4e:5b:4b:17:
f4:0c:9b:17:a8:2f:85:36:d5:76:bb:c7:b4:60:10:ce:fe:c0:
3d:b8:d8:c3:da:63:26:32:c9:e5:1f:84:20:fd:24:24:80:26:
5f:9e:cf:8e:e6:a0:6b:82:57:dd:a0:04:77:f7:e2:56:cf:03:
79:50:8f:68:36:62:5d:04:47:21:42:6d:15:77:b4:76:76:de:
07:eb:5a:6e:40:0e:bd:cb:c2:84:2f:22:84:87:c2:89:c1:6f:
56:f1:a0:78:db:0a:3d:c1:34:86:04:6b:58:92:71:37:14:9b:
a0:f5:ad:88:41:cd:fa:6a:be:44:f8:00:93:d1:3a:29:0d:d3:
a6:e6:61:b3:f2:79:d1:c6:6c:55:1d:4e:42:81:68:20:cf:e9:
9d:44:64:86:1f:1b:86:51:39:63:d5:56:c3:1b:77:70:5f:1d:
17:1b:39:d2:38:67:44:aa:e2:c6:69:19:3a:c4:a0:72:d4:95:
1a:a3:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:40 2026 by rpki-client