Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa
File: 45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa (raw, json)
Hash identifier: V86xrnh/y+DTVy0ksoIWIJSKRIobCwk+V5t+KofAi+I=
Subject key identifier: 9F:33:E0:F3:94:B5:F4:87:39:DB:6F:BF:D6:56:5F:3B:26:B1:E8:D8
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 07C9
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa
Signing time: Wed 08 Apr 2026 11:08:29 +0000
ROA not before: Wed 08 Apr 2026 11:08:24 +0000
ROA not after: Tue 08 Apr 2036 11:08:24 +0000
asID: 37645
IP address blocks: 102.208.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Apr 8 11:08:24 2026 GMT
Not After : Apr 8 11:08:24 2036 GMT
Subject: CN=69d6372d-167d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:4d:a8:3d:b6:50:d6:60:d2:51:14:2e:83:
5e:1d:a4:31:aa:8b:89:ad:4b:97:c2:a1:ad:63:a6:
01:b9:a8:ce:05:d7:0d:69:67:06:9c:ee:6c:48:e6:
ff:af:87:5a:42:f1:b1:24:90:43:2f:9c:d5:9a:a9:
b7:9b:dc:70:49:d5:a4:d5:6f:05:27:c3:3a:2b:c7:
d0:56:5e:91:64:40:e8:95:4d:53:28:57:ff:66:cb:
ce:79:20:a3:66:db:91:f0:b3:bc:29:85:66:c6:1f:
c6:5d:b7:1c:8f:6b:4e:7d:ab:ef:13:36:36:37:be:
ca:82:d0:10:1b:a3:04:44:6b:b9:98:a2:6c:57:46:
a6:5a:67:23:12:9f:2e:f0:08:51:3b:0a:90:69:2c:
53:64:d6:10:16:ff:e2:e5:70:ea:13:25:4b:b6:9c:
9e:c4:3f:a5:9e:ce:60:9b:e7:fe:76:ce:23:2e:8e:
31:09:50:78:3f:70:80:4e:14:dd:1d:28:39:b8:03:
cc:14:6b:58:43:df:a1:b6:a4:e9:58:03:39:a4:7b:
63:e7:00:50:71:1f:99:a3:91:c1:1a:c2:b0:f6:c1:
00:2b:74:9f:59:e9:c7:21:ae:2f:fa:57:21:5e:8e:
ef:87:de:57:86:79:00:69:ba:fd:d9:26:c9:22:84:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:E0:F3:94:B5:F4:87:39:DB:6F:BF:D6:56:5F:3B:26:B1:E8:D8
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:04:46:b1:2c:67:d0:7f:9b:c8:e8:a0:e7:2e:2b:14:09:b3:
3e:22:8c:d1:0b:7b:3d:ea:ca:42:fb:ea:e7:e9:e1:17:df:6d:
54:53:76:75:92:41:9f:2e:b4:e4:15:9a:69:3c:32:24:50:d3:
f3:71:ec:88:8c:49:5f:c6:de:c2:39:19:84:35:94:35:b4:62:
8a:69:c2:16:fe:e6:12:10:a0:bc:e4:30:95:69:1a:52:8c:84:
16:b0:fa:1c:47:e9:9b:ae:41:39:d6:75:3c:af:50:f5:cc:37:
06:0a:9e:19:58:72:6c:ea:9b:fd:62:11:5e:47:9a:4f:be:51:
73:4c:d6:35:62:4d:c8:a6:18:04:d4:81:94:3c:47:ca:8e:c0:
57:8c:06:da:9a:e3:5b:e4:3b:c9:b8:e6:fb:78:8a:9a:47:d4:
54:68:67:b1:e0:19:f6:8b:1c:f1:a2:09:89:d5:51:6c:d3:06:
25:de:f0:19:ac:2e:9e:db:f0:73:21:4d:67:94:f8:c3:0e:30:
94:93:50:bc:3e:ce:4d:97:52:0a:76:4e:fc:8f:0c:21:ae:1e:
c5:f6:6d:1c:5f:56:29:84:bf:f1:1c:19:7f:42:f4:54:9f:55:
9a:0a:18:54:35:ee:17:91:65:a2:8e:f5:69:74:59:88:c6:57:
f9:2f:da:ff
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjA0MDgxMTA4MjRaFw0zNjA0MDgxMTA4MjRaMBgxFjAU
BgNVBAMTDTY5ZDYzNzJkLTE2N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJVk2oPbZQ1mDSURQug14dpDGqi4mtS5fCoa1jpgG5qM4F1w1pZwac7mxI
5v+vh1pC8bEkkEMvnNWaqbeb3HBJ1aTVbwUnwzorx9BWXpFkQOiVTVMoV/9my855
IKNm25Hws7wphWbGH8ZdtxyPa059q+8TNjY3vsqC0BAbowREa7mYomxXRqZaZyMS
ny7wCFE7CpBpLFNk1hAW/+LlcOoTJUu2nJ7EP6WezmCb5/52ziMujjEJUHg/cIBO
FN0dKDm4A8wUa1hD36G2pOlYAzmke2PnAFBxH5mjkcEawrD2wQArdJ9Z6cchri/6
VyFeju+H3leGeQBpuv3ZJskihFIFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnzPg
85S19Ic522+/1lZfOyax6NgwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzQ1QzJFRjdFMzMzQjExRjFBREY0RDNGNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0JQwDQYJKoZIhvcNAQEL
BQADggEBAKAERrEsZ9B/m8jooOcuKxQJsz4ijNELez3qykL76ufp4RffbVRTdnWS
QZ8utOQVmmk8MiRQ0/Nx7IiMSV/G3sI5GYQ1lDW0Yoppwhb+5hIQoLzkMJVpGlKM
hBaw+hxH6ZuuQTnWdTyvUPXMNwYKnhlYcmzqm/1iEV5Hmk++UXNM1jViTcimGATU
gZQ8R8qOwFeMBtqa41vkO8m45vt4ippH1FRoZ7HgGfaLHPGiCYnVUWzTBiXe8Bms
Lp7b8HMhTWeU+MMOMJSTULw+zk2XUgp2TvyPDCGuHsX2bRxfVimEv/EcGX9C9FSf
VZoKGFQ17heRZaKO9Wl0WYjGV/kv2v8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:51 2026 by rpki-client