Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/E5E1D8322D1211F18330CFD4DAE4EC9C.roa
File: E5E1D8322D1211F18330CFD4DAE4EC9C.roa (raw, json)
Hash identifier: pDD/K1s5jIYNoQOdvaFU2JduYhwGAyTs1meNSV1fFgk=
Subject key identifier: 05:CE:91:3B:7E:28:65:47:98:C3:D7:81:AF:65:8D:97:D7:47:06:26
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 0286
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/E5E1D8322D1211F18330CFD4DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:04:22 +0000
ROA not before: Tue 31 Mar 2026 15:04:10 +0000
ROA not after: Sun 30 Mar 2036 15:04:10 +0000
asID: 37153
IP address blocks: 197.221.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:04:10 2026 GMT
Not After : Mar 30 15:04:10 2036 GMT
Subject: CN=69cbe276-0bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:38:a6:b6:d9:1c:af:b7:75:c8:24:cb:38:
c0:46:81:5e:c8:a2:03:8e:e8:95:a3:36:00:38:f9:
4d:5a:28:91:41:51:89:79:64:71:16:dd:1f:48:19:
5f:55:d5:84:68:62:62:09:7f:19:f9:da:1b:89:3d:
e2:b8:a4:c1:6d:47:09:ef:37:44:64:7b:cc:3a:3b:
03:fc:d0:46:ab:96:91:09:ff:21:2b:41:96:d9:90:
26:58:b8:be:33:fb:e4:89:f8:c7:f2:bf:9f:59:f6:
f0:61:28:f5:3a:cd:6b:cd:66:94:75:37:29:39:dd:
f4:3a:21:e8:07:76:05:01:d8:74:9d:e1:e3:9b:ee:
1f:1c:80:f6:e1:3c:27:fb:47:ac:c2:81:7b:cd:19:
b6:35:54:b6:f3:5a:8b:15:88:e0:b1:08:e2:01:12:
fc:58:af:74:83:fb:34:7f:c9:fb:21:54:64:ab:a5:
33:c4:57:50:ad:5e:47:3b:4d:9f:56:27:f3:13:cc:
42:a0:19:dc:2a:3d:4d:2a:a9:eb:7b:e5:ea:83:1b:
d2:23:81:f6:e5:a4:99:56:28:8e:c5:35:2c:82:4e:
f7:93:07:09:a5:06:a9:d5:9c:89:d6:8d:1d:ec:45:
8c:d9:3d:b3:f1:4b:1e:3e:d9:81:ea:81:1f:13:99:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:91:3B:7E:28:65:47:98:C3:D7:81:AF:65:8D:97:D7:47:06:26
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/E5E1D8322D1211F18330CFD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.221.0.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:46:39:e3:51:d1:52:1e:39:a3:30:85:bf:ce:d4:65:c9:76:
e1:ae:c7:aa:38:b1:a9:22:08:81:94:64:df:1b:ee:dd:1d:81:
fd:fa:12:cc:c4:cf:99:47:72:79:c7:4f:bc:26:5c:d5:dd:0b:
71:32:b1:c1:aa:34:84:27:35:69:4a:24:74:60:28:4f:0b:68:
07:dd:5d:c7:da:cb:d9:76:94:3b:e1:b8:97:57:41:67:52:ae:
a8:41:9e:b2:fd:39:99:1d:b2:81:37:71:39:e7:aa:dc:5f:aa:
c1:3c:88:8d:08:a2:92:dc:64:49:54:09:9e:63:79:1c:a2:88:
ff:0e:f6:c5:ae:6a:57:af:11:04:99:a7:53:c3:18:d5:21:f2:
f3:89:0b:58:d4:5d:42:e8:eb:d2:1a:bf:b6:b6:d9:74:19:90:
7e:e2:1c:ad:f7:60:6f:f9:c7:c3:e1:47:df:0f:7e:b1:55:a8:
60:69:10:71:bf:f2:58:94:f4:c0:b8:b9:cc:18:66:3a:a9:81:
c9:c4:ea:8c:2b:0f:53:18:6a:a1:22:b8:a1:4b:8d:ab:4f:29:
46:18:e0:26:62:5a:3d:04:60:e8:67:8f:15:1e:12:d6:59:5c:
b2:20:35:b1:b7:18:85:6f:8e:29:13:38:6f:d4:f7:93:00:97:
28:ca:fe:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTgwQTFBRjExMC8GA1UEBRMoRDA5QTVBQUQ1QTE3NzNEODZCMUQyNkRENUQxQzQ0
NEZDQ0FDRjZFNDAeFw0yNjAzMzExNTA0MTBaFw0zNjAzMzAxNTA0MTBaMBgxFjAU
BgNVBAMTDTY5Y2JlMjc2LTBiY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtUDimttkcr7d1yCTLOMBGgV7IogOO6JWjNgA4+U1aKJFBUYl5ZHEW3R9I
GV9V1YRoYmIJfxn52huJPeK4pMFtRwnvN0Rke8w6OwP80EarlpEJ/yErQZbZkCZY
uL4z++SJ+Mfyv59Z9vBhKPU6zWvNZpR1Nyk53fQ6IegHdgUB2HSd4eOb7h8cgPbh
PCf7R6zCgXvNGbY1VLbzWosViOCxCOIBEvxYr3SD+zR/yfshVGSrpTPEV1CtXkc7
TZ9WJ/MTzEKgGdwqPU0qqet75eqDG9IjgfblpJlWKI7FNSyCTveTBwmlBqnVnInW
jR3sRYzZPbPxSx4+2YHqgR8TmYTFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBc6R
O34oZUeYw9eBr2WNl9dHBiYwHwYDVR0jBBgwFoAU0JparVoXc9hrHSbdXRxET8ys
9uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4MEExLzRFQjUwODE0M0Y1QTExRUZCNTkyNTA3MDc2MkU5NTFBLzBKcGFy
Vm9YYzlockhTYmRYUnhFVDh5czl1US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBKcGFyVm9YYzlockhTYmRYUnhFVDh5czl1US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE4MEExLzRFQjUwODE0M0Y1QTExRUZCNTkyNTA3MDc2
MkU5NTFBL0U1RTFEODMyMkQxMjExRjE4MzMwQ0ZENERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbF3QAwDQYJKoZIhvcNAQEL
BQADggEBAKtGOeNR0VIeOaMwhb/O1GXJduGux6o4sakiCIGUZN8b7t0dgf36EszE
z5lHcnnHT7wmXNXdC3EyscGqNIQnNWlKJHRgKE8LaAfdXcfay9l2lDvhuJdXQWdS
rqhBnrL9OZkdsoE3cTnnqtxfqsE8iI0IopLcZElUCZ5jeRyiiP8O9sWualevEQSZ
p1PDGNUh8vOJC1jUXULo69Iav7a22XQZkH7iHK33YG/5x8PhR98PfrFVqGBpEHG/
8liU9MC4ucwYZjqpgcnE6owrD1MYaqEiuKFLjatPKUYY4CZiWj0EYOhnjxUeEtZZ
XLIgNbG3GIVvjikTOG/U95MAlyjK/jA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:33 2026 by rpki-client