Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa
File: E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa (raw, json)
Hash identifier: 2aR11taDJSSgD4ZfkhbtNmSyzLyHvlisHe10lCn519E=
Subject key identifier: E0:D9:1B:57:A7:50:48:99:BE:15:BD:3F:7D:A0:1E:D1:88:39:D9:38
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 027D
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 05:48:01 +0000
ROA not before: Mon 09 Feb 2026 05:47:56 +0000
ROA not after: Fri 29 Feb 2036 05:47:56 +0000
asID: 37183
IP address blocks: 41.85.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Feb 9 05:47:56 2026 GMT
Not After : Feb 29 05:47:56 2036 GMT
Subject: CN=69897511-926b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:98:09:b2:ac:74:7d:32:d3:cc:ab:eb:c0:
35:71:91:fb:86:7f:c7:a1:66:99:38:5f:86:8c:79:
6e:81:da:bf:78:19:94:ac:b1:54:86:4e:41:ee:34:
1c:44:14:47:e0:1e:c0:e8:81:5a:db:17:ac:00:fb:
8f:31:60:cf:2c:74:fc:48:67:30:4a:20:f0:13:fc:
d1:b6:87:05:88:af:c6:d8:32:bd:6e:ef:ee:55:96:
05:1e:89:0b:be:c1:88:b9:45:be:8e:c0:a8:20:8c:
94:56:09:d8:e7:fc:40:cf:e8:f1:29:eb:70:f1:a3:
c4:25:7d:31:5d:c2:c9:40:8f:fc:70:53:70:a6:4f:
d7:16:79:28:4e:8e:fb:9d:43:a7:39:0d:1e:49:1a:
bc:eb:9a:c4:c0:91:a2:16:1e:56:41:f8:06:94:a9:
64:a5:5d:93:f1:9c:67:f0:65:bf:87:c7:fb:51:06:
0d:d1:ad:6e:49:e7:82:ed:a0:1d:94:f9:cb:31:c0:
38:3b:5b:08:b5:bc:90:3b:1c:ce:8c:7e:c9:84:bc:
ed:f8:eb:6a:8f:32:8a:1e:b8:07:53:f9:07:c5:96:
d2:77:59:4c:9e:7f:fb:67:a1:70:6b:1c:5c:2c:d4:
14:c1:12:ca:57:9d:f9:b6:7f:f7:2e:15:44:cd:7c:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D9:1B:57:A7:50:48:99:BE:15:BD:3F:7D:A0:1E:D1:88:39:D9:38
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:c0:05:c9:17:ad:81:91:4c:f1:55:6f:cd:bc:e2:34:16:6e:
75:24:32:52:b4:6d:29:db:b2:f6:a1:ec:47:0a:67:2f:8d:3f:
c2:ac:b9:b2:14:0a:42:38:3e:45:95:8f:5e:17:d7:1d:77:c5:
20:98:fe:e4:17:48:a9:89:25:62:29:a7:86:14:24:63:79:80:
c1:36:38:51:ea:38:38:02:2a:ba:1b:0c:6c:80:96:da:c4:e8:
35:58:e1:c4:6c:2e:f7:64:6a:00:8e:95:e2:6d:f1:5e:4e:19:
2e:20:61:15:24:6d:0b:67:e0:e2:f2:5d:ed:3c:24:7b:ce:da:
29:52:ec:2b:61:fb:c7:98:dd:01:12:7a:8d:cf:d5:e3:c5:e5:
07:f6:7c:03:8e:ba:48:f6:c8:08:51:63:4f:11:f2:82:50:b5:
0d:82:96:5f:ea:b5:2b:76:3b:9e:32:bf:3b:8e:35:06:1c:7b:
51:c7:62:5b:e1:ec:23:cd:ee:c6:af:56:9e:76:42:52:b4:38:
bf:4a:f9:e1:d2:3d:8c:4d:5d:b0:df:8e:40:a5:95:f6:96:c4:
7d:ab:c4:7e:a2:b2:20:fb:e5:9d:4e:dd:36:0f:b6:e2:a0:91:
fc:60:e9:9d:a4:a5:1a:f7:93:5b:e7:08:db:8d:dc:00:bf:54:
d9:f4:01:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1QjJBRjExMC8GA1UEBRMoMTYyOTY4ODlCRkYwMzFCRjdGREU3MzY3RTJERUU5
M0NCMDA4MDI4MzAeFw0yNjAyMDkwNTQ3NTZaFw0zNjAyMjkwNTQ3NTZaMBgxFjAU
BgNVBAMTDTY5ODk3NTExLTkyNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiPpgJsqx0fTLTzKvrwDVxkfuGf8ehZpk4X4aMeW6B2r94GZSssVSGTkHu
NBxEFEfgHsDogVrbF6wA+48xYM8sdPxIZzBKIPAT/NG2hwWIr8bYMr1u7+5VlgUe
iQu+wYi5Rb6OwKggjJRWCdjn/EDP6PEp63Dxo8QlfTFdwslAj/xwU3CmT9cWeShO
jvudQ6c5DR5JGrzrmsTAkaIWHlZB+AaUqWSlXZPxnGfwZb+Hx/tRBg3RrW5J54Lt
oB2U+csxwDg7Wwi1vJA7HM6MfsmEvO3462qPMooeuAdT+QfFltJ3WUyef/tnoXBr
HFws1BTBEspXnfm2f/cuFUTNfPKLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4Nkb
V6dQSJm+Fb0/faAe0Yg52TgwHwYDVR0jBBgwFoAUFiloib/wMb9/3nNn4t7pPLAI
AoMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNUIyLzU0MTgwNEU0MzQ3MTExRUY5QTg3NTE4MDc2MkU5NTFBL0ZpbG9p
Yl93TWI5XzNuTm40dDdwUExBSUFvTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZpbG9pYl93TWI5XzNuTm40dDdwUExBSUFvTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUwNUIyLzU0MTgwNEU0MzQ3MTExRUY5QTg3NTE4MDc2
MkU5NTFBL0U0QUQ3RDMyMDU3QTExRjFBQTE1QzZDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQpVdAwDQYJKoZIhvcNAQEL
BQADggEBAE7ABckXrYGRTPFVb8284jQWbnUkMlK0bSnbsvah7EcKZy+NP8KsubIU
CkI4PkWVj14X1x13xSCY/uQXSKmJJWIpp4YUJGN5gME2OFHqODgCKrobDGyAltrE
6DVY4cRsLvdkagCOleJt8V5OGS4gYRUkbQtn4OLyXe08JHvO2ilS7Cth+8eY3QES
eo3P1ePF5Qf2fAOOukj2yAhRY08R8oJQtQ2Cll/qtSt2O54yvzuONQYce1HHYlvh
7CPN7savVp52QlK0OL9K+eHSPYxNXbDfjkCllfaWxH2rxH6isiD75Z1O3TYPtuKg
kfxg6Z2kpRr3k1vnCNuN3AC/VNn0ARQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:21 2026 by rpki-client