Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa
File: F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa (raw, json)
Hash identifier: bDSLtErnrdZFcDBbgffxh/78ctsTZ8XFV1WdiU3csZI=
Subject key identifier: 73:A3:63:02:BE:F1:32:1F:0F:D6:0B:75:7F:5B:16:96:25:89:D2:09
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 0290
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 15:19:08 +0000
ROA not before: Tue 31 Mar 2026 15:19:03 +0000
ROA not after: Sun 30 Mar 2036 15:19:03 +0000
asID: 37153
IP address blocks: 196.22.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Mar 31 15:19:03 2026 GMT
Not After : Mar 30 15:19:03 2036 GMT
Subject: CN=69cbe5eb-8f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:59:6e:8b:1a:93:f1:c6:df:77:68:9f:88:
ae:e1:2b:08:0a:d2:3e:af:51:c2:eb:af:a3:11:cc:
38:a8:3c:ae:c0:7c:3d:b9:63:af:78:2c:1f:62:c0:
aa:ab:8b:6f:82:e4:d6:f9:58:8c:5e:f6:44:a7:09:
df:a4:c3:67:fe:cd:b2:8e:b0:e2:3f:d0:50:89:f5:
ae:cf:a8:4d:5a:96:19:6d:fb:ed:9c:26:18:6e:b1:
c9:9b:f2:26:79:c0:93:0d:74:d7:d4:e9:b5:04:12:
56:42:fe:5f:52:c0:7c:61:1b:4b:89:0d:15:42:f8:
7f:45:1d:44:f9:6c:16:af:0b:ec:e4:02:d3:e3:7e:
a0:9e:76:d2:32:05:2a:f0:c1:c9:1d:55:c5:5b:0e:
3c:d5:a9:f6:fe:82:7c:a4:23:e5:1b:fa:8c:aa:4a:
8c:5f:51:b0:c0:6a:9b:ac:8d:7e:0f:63:4a:c5:92:
00:f6:e0:b1:e8:69:2d:93:97:9d:a7:3d:ec:71:35:
7d:37:60:28:a2:e8:4c:c3:12:af:23:e9:8f:c8:99:
55:04:11:0b:68:e8:93:2e:62:2e:6f:46:ce:84:38:
cb:a7:52:5d:a8:a1:fe:df:99:0d:ce:9c:dc:9e:13:
ab:11:4f:f8:be:a5:cc:b2:db:5d:29:42:da:f2:da:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:63:02:BE:F1:32:1F:0F:D6:0B:75:7F:5B:16:96:25:89:D2:09
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.22.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:b3:f7:11:90:37:4c:2b:69:9d:2b:82:b6:04:66:7c:8f:2f:
e5:be:9d:c7:3b:f9:a5:bb:ee:2a:20:e1:71:06:7d:3d:de:a3:
7a:95:04:81:ee:c2:0e:21:28:70:ad:5c:ea:fe:ef:04:98:29:
c1:c9:12:c3:47:8a:d0:2c:5b:47:af:20:f0:0e:59:e0:81:c7:
93:75:00:b0:e8:34:6d:8e:4d:da:47:96:75:77:dd:e8:a9:66:
16:96:97:46:d9:5d:70:62:da:eb:3b:f7:bd:58:ce:49:73:8b:
89:7c:b6:50:df:88:b6:de:fb:7f:c1:73:e4:fe:a5:8f:a9:9c:
c6:58:ea:22:08:6d:4e:6f:f1:90:ee:64:a2:09:c7:00:fe:03:
47:65:2a:66:0a:d3:c0:c7:25:b3:2b:00:dd:3a:71:85:c9:e8:
e9:d0:9e:6e:71:cd:cd:b0:eb:fa:f9:9e:6c:e8:d3:ea:dd:e7:
25:a2:19:71:5a:8c:a9:99:01:26:e3:03:ad:c2:ce:99:1f:b6:
a1:12:5e:99:d3:69:e3:b1:b8:08:fc:88:33:86:65:fb:a6:31:
db:ea:f2:7b:ea:c4:e5:2b:31:dc:dd:a8:be:88:f7:48:f5:41:
db:d2:8b:a1:96:8e:65:6d:64:08:5b:94:15:01:ab:3d:29:56:
8d:dc:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:00 2026 by rpki-client