Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/45D1D714068B11F1B2B0DFC5DAE4EC9C.roa
File: 45D1D714068B11F1B2B0DFC5DAE4EC9C.roa (raw, json)
Hash identifier: k+Zzix2q4ja3ETayVUtqKJofOjoyeVoddBz/cw7MwUo=
Subject key identifier: 4C:CB:87:3B:57:0A:69:F4:A7:C7:8B:1C:EE:CC:5D:1B:C7:39:03:D9
Certificate issuer: /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial: 04EF
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/45D1D714068B11F1B2B0DFC5DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 14:17:47 +0000
ROA not before: Tue 10 Feb 2026 14:17:42 +0000
ROA not after: Mon 10 Feb 2031 14:17:42 +0000
asID: 36890
IP address blocks: 196.44.240.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Validity
Not Before: Feb 10 14:17:42 2026 GMT
Not After : Feb 10 14:17:42 2031 GMT
Subject: CN=698b3e0b-8c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:e7:33:08:f8:65:b4:c5:85:0e:f9:47:fa:
4e:e7:04:7a:f5:e2:24:46:7b:87:7d:05:5a:b3:7b:
56:e7:7c:8d:23:ab:94:94:fe:be:53:f5:ec:11:ed:
e7:49:84:bd:bf:8f:99:63:dd:9a:fa:59:dd:a5:f5:
60:a0:14:01:f8:d1:e3:52:77:a5:4b:59:8d:f8:ac:
37:87:eb:7a:42:3e:6e:0c:49:11:a3:7a:06:4f:fe:
67:80:c3:33:1c:ad:0d:65:cf:32:98:93:80:f2:24:
b6:41:82:f0:53:e7:49:a9:84:f8:3c:f2:16:a5:ef:
51:3d:b6:6c:c5:04:17:32:57:fe:c1:cd:e7:ee:d2:
ea:7c:68:1f:bb:68:f9:5d:d7:7b:fa:0e:a2:90:89:
59:e2:b5:65:5b:bb:a1:18:48:27:b4:a8:37:76:4c:
f8:a4:a8:dd:50:e0:ff:59:42:8e:7e:92:47:37:a4:
d1:e3:e3:4c:7f:41:c8:43:8c:84:99:42:4a:a9:5d:
cb:43:c3:b9:c5:c9:8b:78:af:0c:0c:a8:e7:0b:b3:
e9:2d:64:1e:77:fb:10:14:13:43:44:41:f1:f1:03:
88:bd:61:1a:b6:1e:70:89:b0:63:4c:75:55:4a:68:
19:82:99:53:24:3e:b4:dd:95:e4:7f:ab:99:30:be:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:87:3B:57:0A:69:F4:A7:C7:8B:1C:EE:CC:5D:1B:C7:39:03:D9
X509v3 Authority Key Identifier:
keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/45D1D714068B11F1B2B0DFC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.240.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:5c:38:35:88:a6:10:18:88:1f:33:22:f6:47:dc:c7:91:a4:
3e:08:d7:26:b8:84:35:d5:dd:b6:d5:4e:6b:e7:d7:13:a5:02:
9b:4f:b2:8f:f4:bf:1f:eb:e9:16:17:75:3d:e1:62:d6:f6:27:
cb:5f:68:66:86:55:ae:b6:d1:8d:6d:02:50:85:90:99:d0:53:
4d:3e:5f:ce:15:37:e4:f5:44:ff:5a:53:ed:77:5f:b3:67:f8:
e4:68:df:4e:76:ec:14:1f:26:b3:a9:4d:0f:59:13:8f:35:d4:
60:3d:08:54:7f:03:13:d8:f5:8e:86:47:29:70:65:6a:a4:60:
ec:a9:f6:3d:e2:7e:18:8a:88:41:4f:eb:1d:20:21:73:b7:22:
94:f1:74:68:bb:1f:d1:c5:7d:d1:51:67:93:2a:46:ad:a6:2b:
22:bd:5a:6e:53:64:e4:04:37:f0:ae:d8:ff:d3:29:95:e0:97:
cd:51:a1:bd:35:1f:9d:ac:51:75:c9:d7:a4:80:51:71:f7:af:
75:81:70:97:ed:c2:c3:2f:07:af:f7:fc:aa:d9:1a:34:57:01:
7a:aa:24:81:b3:ef:a1:67:11:6a:c1:ff:59:3b:b5:ae:84:23:
b2:32:88:2e:c0:9e:78:84:eb:ac:a3:57:d3:08:c1:c8:01:c2:
5c:e0:54:b0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI4MThBRjExMC8GA1UEBRMoOEVBRDRCOTE0QjZGN0M5MjhFMTJGRTM4RDFDNDQw
QkM1MzA5QzEzMzAeFw0yNjAyMTAxNDE3NDJaFw0zMTAyMTAxNDE3NDJaMBgxFjAU
BgNVBAMTDTY5OGIzZTBiLThjMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyheczCPhltMWFDvlH+k7nBHr14iRGe4d9BVqze1bnfI0jq5SU/r5T9ewR
7edJhL2/j5lj3Zr6Wd2l9WCgFAH40eNSd6VLWY34rDeH63pCPm4MSRGjegZP/meA
wzMcrQ1lzzKYk4DyJLZBgvBT50mphPg88hal71E9tmzFBBcyV/7Bzefu0up8aB+7
aPld13v6DqKQiVnitWVbu6EYSCe0qDd2TPikqN1Q4P9ZQo5+kkc3pNHj40x/QchD
jISZQkqpXctDw7nFyYt4rwwMqOcLs+ktZB53+xAUE0NEQfHxA4i9YRq2HnCJsGNM
dVVKaBmCmVMkPrTdleR/q5kwvqbDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTMuH
O1cKafSnx4sc7sxdG8c5A9kwHwYDVR0jBBgwFoAUjq1LkUtvfJKOEv440cRAvFMJ
wTMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyODE4LzkyMjRCMzBBNDlGRDExRUQ4NjkwMTk5MUYxMjIyNDY4L2pxMUxr
VXR2ZkpLT0V2NDQwY1JBdkZNSndUTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pxMUxrVXR2ZkpLT0V2NDQwY1JBdkZNSndUTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQyODE4LzkyMjRCMzBBNDlGRDExRUQ4NjkwMTk5MUYx
MjIyNDY4LzQ1RDFENzE0MDY4QjExRjFCMkIwREZDNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATELPAwDQYJKoZIhvcNAQEL
BQADggEBAK1cODWIphAYiB8zIvZH3MeRpD4I1ya4hDXV3bbVTmvn1xOlAptPso/0
vx/r6RYXdT3hYtb2J8tfaGaGVa620Y1tAlCFkJnQU00+X84VN+T1RP9aU+13X7Nn
+ORo30527BQfJrOpTQ9ZE4811GA9CFR/AxPY9Y6GRylwZWqkYOyp9j3ifhiKiEFP
6x0gIXO3IpTxdGi7H9HFfdFRZ5MqRq2mKyK9Wm5TZOQEN/Cu2P/TKZXgl81Rob01
H52sUXXJ16SAUXH3r3WBcJftwsMvB6/3/KrZGjRXAXqqJIGz76FnEWrB/1k7ta6E
I7IyiC7AnniE66yjV9MIwcgBwlzgVLA=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:04:18 2026 by rpki-client