Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/BE851408164111F19290A0CFDAE4EC9C.roa
File: BE851408164111F19290A0CFDAE4EC9C.roa (raw, json)
Hash identifier: 09vsbYIiJwzWVsF7G8Ziw4EcwesZAX6sNWXeTtzD58A=
Subject key identifier: 1B:D0:5D:07:1B:BA:AF:2B:FB:17:37:76:C6:AE:03:D8:1F:A3:58:FC
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 04A3
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/BE851408164111F19290A0CFDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:11:45 +0000
ROA not before: Mon 02 Mar 2026 14:11:41 +0000
ROA not after: Sat 02 Mar 2030 14:11:41 +0000
asID: 33763
IP address blocks: 41.218.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 14:11:41 2026 GMT
Not After : Mar 2 14:11:41 2030 GMT
Subject: CN=69a59aa1-413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:68:ed:c0:dc:39:c2:64:b9:f9:58:a5:0d:
02:b4:04:bf:ea:71:31:34:c8:25:32:c4:f6:c6:5b:
ed:f6:b6:67:18:d1:59:c4:21:a8:a8:05:38:69:57:
ac:a8:b7:92:50:96:ef:45:e4:09:88:80:86:ca:90:
4b:39:0c:0c:52:79:20:df:0f:0b:f9:66:30:48:7b:
43:52:6b:e4:4c:db:8d:e3:48:a2:2f:d5:29:61:68:
97:e6:74:f4:6b:7f:71:97:de:75:86:3a:24:5f:a3:
86:15:c2:34:66:90:48:c8:d4:68:d9:7b:a7:d0:5c:
ca:7e:54:cf:4a:18:3a:21:83:9f:89:34:21:a3:e2:
87:22:7d:63:2f:d6:11:07:4e:35:1d:1f:3e:f7:72:
86:ba:8d:89:95:51:2a:d1:bb:95:4a:ab:81:7c:7a:
85:e6:36:70:21:0a:32:9a:b7:68:77:2b:60:af:7e:
3e:2b:3b:91:d6:b9:c4:72:fd:2a:87:1e:42:37:96:
ed:d2:d4:26:42:c6:fc:a7:0a:dd:9a:d7:b8:1a:3a:
59:0a:7e:15:19:4a:74:9c:c8:e6:b9:78:62:92:44:
6b:d2:1e:24:31:86:93:15:d0:f4:ea:ca:14:2d:d9:
aa:52:50:49:9c:20:b7:54:71:9f:c5:1f:c5:c0:9d:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:5D:07:1B:BA:AF:2B:FB:17:37:76:C6:AE:03:D8:1F:A3:58:FC
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/BE851408164111F19290A0CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.92.0/22
Signature Algorithm: sha256WithRSAEncryption
16:7f:d1:c0:70:82:82:d4:2f:11:f4:6d:42:3f:fe:65:aa:71:
7b:18:84:74:d0:1b:21:33:e7:a1:19:1a:87:12:7b:1d:bc:94:
b7:c5:6e:65:13:14:6c:a2:ba:13:6a:8a:56:91:73:16:38:9c:
9a:f2:13:10:52:27:dc:ed:87:8f:b5:62:63:e6:d7:8d:1b:ec:
70:30:3f:1d:e4:7c:18:e7:54:31:4f:46:27:b9:28:c0:c7:f5:
09:a3:18:f0:1d:8b:ec:b0:21:72:67:76:6e:fc:34:e9:50:ea:
74:b2:b3:f3:4a:90:f2:f4:67:73:8c:61:6c:d0:1b:bb:de:23:
71:23:fa:ea:1d:94:cb:1b:f6:cc:dc:c1:68:a5:21:87:b0:9c:
1a:a7:7d:84:66:13:49:ef:c8:f7:f9:b6:df:74:0a:b4:e4:d1:
98:2c:94:06:7c:a5:b4:4d:f9:9b:88:b2:52:e4:ff:b0:cd:9f:
45:2d:68:6b:c1:a5:0f:4c:41:15:0e:44:19:26:fe:a5:96:02:
64:cc:aa:0d:da:f4:9e:f2:97:1a:b0:00:0a:43:8d:9d:e4:40:
ce:0c:15:4d:c8:56:b7:bc:5b:20:8a:00:54:43:92:03:49:52:
86:8b:f3:85:d7:17:fc:59:5d:e4:bc:ce:e2:7b:46:76:cc:8d:
f2:b0:13:3c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBRjExMC8GA1UEBRMoM0Q2RUQ5MDUwMzdDODNDNTczNzgwQjBDQ0RDNzBE
NUQ4Q0VGMDM4QjAeFw0yNjAzMDIxNDExNDFaFw0zMDAzMDIxNDExNDFaMBgxFjAU
BgNVBAMTDTY5YTU5YWExLTQxM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMXmjtwNw5wmS5+VilDQK0BL/qcTE0yCUyxPbGW+32tmcY0VnEIaioBThp
V6yot5JQlu9F5AmIgIbKkEs5DAxSeSDfDwv5ZjBIe0NSa+RM243jSKIv1SlhaJfm
dPRrf3GX3nWGOiRfo4YVwjRmkEjI1GjZe6fQXMp+VM9KGDohg5+JNCGj4ocifWMv
1hEHTjUdHz73coa6jYmVUSrRu5VKq4F8eoXmNnAhCjKat2h3K2Cvfj4rO5HWucRy
/SqHHkI3lu3S1CZCxvynCt2a17gaOlkKfhUZSnScyOa5eGKSRGvSHiQxhpMV0PTq
yhQt2apSUEmcILdUcZ/FH8XAnQeDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUG9Bd
Bxu6ryv7Fzd2xq4D2B+jWPwwHwYDVR0jBBgwFoAUPW7ZBQN8g8VzeAsMzccNXYzv
A4swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzM1MzVDQTFBQjhFRjExRURBOUIzNDFEQUYxMjIyNDY4L1BXN1pC
UU44ZzhWemVBc016Y2NOWFl6dkE0cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BXN1pCUU44ZzhWemVBc016Y2NOWFl6dkE0cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjg4NkIzLzM1MzVDQTFBQjhFRjExRURBOUIzNDFEQUYx
MjIyNDY4L0JFODUxNDA4MTY0MTExRjE5MjkwQTBDRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIp2lwwDQYJKoZIhvcNAQEL
BQADggEBABZ/0cBwgoLULxH0bUI//mWqcXsYhHTQGyEz56EZGocSex28lLfFbmUT
FGyiuhNqilaRcxY4nJryExBSJ9zth4+1YmPm140b7HAwPx3kfBjnVDFPRie5KMDH
9QmjGPAdi+ywIXJndm78NOlQ6nSys/NKkPL0Z3OMYWzQG7veI3Ej+uodlMsb9szc
wWilIYewnBqnfYRmE0nvyPf5tt90CrTk0ZgslAZ8pbRN+ZuIslLk/7DNn0UtaGvB
pQ9MQRUORBkm/qWWAmTMqg3a9J7ylxqwAApDjZ3kQM4MFU3IVre8WyCKAFRDkgNJ
UoaL84XXF/xZXeS8zuJ7RnbMjfKwEzw=
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:20 2026 by rpki-client