Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/98D1105A2F8111F1B6797183DAE4EC9C.roa
File: 98D1105A2F8111F1B6797183DAE4EC9C.roa (raw, json)
Hash identifier: U+9nzpaWEUGpqPI6H1GyO4VQB+Kl6s6lnme7de8ebww=
Subject key identifier: F9:9F:CE:E2:05:71:B7:9B:CD:83:12:CF:02:97:D9:55:42:3A:0D:A7
Certificate issuer: /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial: 05E9
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/98D1105A2F8111F1B6797183DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 17:21:49 +0000
ROA not before: Fri 03 Apr 2026 17:21:43 +0000
ROA not after: Mon 30 Apr 2046 17:21:43 +0000
asID: 37183
IP address blocks: 196.43.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 02:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Validity
Not Before: Apr 3 17:21:43 2026 GMT
Not After : Apr 30 17:21:43 2046 GMT
Subject: CN=69cff72d-c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:25:87:67:86:fe:74:72:bb:f8:e8:26:2d:
9b:ef:5f:9a:56:aa:8e:32:c2:e2:ef:c2:36:df:c4:
da:09:b6:cf:9c:a9:ee:54:17:3b:15:f0:03:3a:48:
20:9e:a3:94:4e:3f:71:b1:c7:73:f1:2e:f0:32:74:
82:9f:58:aa:f2:86:a1:8f:76:ef:40:b1:5c:76:7d:
b5:c1:ed:9d:7f:29:60:d3:86:6f:e5:9f:06:89:9f:
01:d0:36:2d:de:65:4d:8f:15:80:d1:fd:19:16:c8:
71:39:dd:2a:ab:16:9b:95:30:08:5f:fd:28:a4:b6:
18:f4:31:40:55:fa:b0:50:0d:37:17:14:5c:bc:4e:
70:3e:bd:b4:7c:9d:ee:aa:a8:e6:ad:08:15:c6:5e:
a5:3f:62:bb:3d:39:a5:1d:39:b6:0b:5b:a3:b8:c1:
a9:8e:47:6e:9d:8f:81:1c:93:33:31:c6:7d:e9:90:
9e:45:01:48:06:13:f3:4c:6a:b8:53:5d:e7:a5:52:
9e:0e:4d:75:75:ef:d7:48:da:aa:35:92:23:65:f1:
7e:ec:cf:25:06:b2:a7:0c:da:90:b4:f3:e7:eb:32:
b5:9e:ee:32:e6:a3:1e:96:40:fa:8f:7e:ed:6d:ec:
88:1a:52:e6:a0:2d:31:20:d4:6d:87:3b:9c:46:f1:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:CE:E2:05:71:B7:9B:CD:83:12:CF:02:97:D9:55:42:3A:0D:A7
X509v3 Authority Key Identifier:
keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/98D1105A2F8111F1B6797183DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:8f:fd:69:61:22:2a:34:51:00:88:2d:21:3a:f8:9a:e7:e9:
ff:e4:dc:b7:c8:b2:ff:8e:31:8e:e4:50:45:dd:81:4b:8c:22:
7f:35:04:ea:53:50:c8:f7:c4:f9:33:02:c0:c9:4d:30:c9:a0:
84:68:46:78:8b:97:e7:9b:e9:e2:75:d0:2c:04:63:43:ba:7c:
79:f5:fa:80:b9:8a:87:84:1f:6d:49:fd:3e:d6:8a:30:d5:51:
e3:0e:79:ef:3a:69:29:54:b2:21:e3:72:77:5b:66:d9:18:b5:
32:f0:37:76:ad:7d:9a:e5:85:7c:76:e9:de:fe:1e:80:1f:92:
36:a4:11:78:d6:80:85:0c:3f:00:1c:e4:6e:0d:24:52:74:9f:
33:ac:c5:e2:e4:7d:1f:4a:c6:3a:9a:31:cb:6c:85:2c:5f:b0:
aa:84:a5:8f:e6:2b:47:ed:bf:25:17:12:88:e2:d6:4c:73:18:
bc:1d:31:0c:91:fc:2a:16:01:fe:24:99:d4:dd:81:d5:ab:e7:
dd:db:f7:e6:11:02:2b:16:c9:16:f2:a4:81:d9:a0:f4:3e:a8:
3d:c8:9b:52:81:8a:a7:16:e8:c3:a2:6c:4e:fa:2f:1d:15:3f:
b5:87:e0:61:79:c0:9a:64:f8:24:e2:c9:37:39:3a:71:2b:cc:
27:8c:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:55 2026 by rpki-client