Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/482648662BB511F1B1C883D4DAE4EC9C.roa
File: 482648662BB511F1B1C883D4DAE4EC9C.roa (raw, json)
Hash identifier: +XNnRDT69cKvll6ExiNupBHhhh6LHJZYxZQI7N35aj8=
Subject key identifier: 39:D8:A0:FB:90:F3:BD:0B:D9:1B:BE:AE:0F:44:78:F0:14:D8:11:74
Certificate issuer: /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial: 0714
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/482648662BB511F1B1C883D4DAE4EC9C.roa
Signing time: Sun 29 Mar 2026 21:21:43 +0000
ROA not before: Mon 30 Mar 2026 21:21:37 +0000
ROA not after: Thu 01 May 2031 21:21:37 +0000
asID: 400463
IP address blocks: 196.51.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D518DAF, serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Validity
Not Before: Mar 30 21:21:37 2026 GMT
Not After : May 1 21:21:37 2031 GMT
Subject: CN=69c997e7-e56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:e8:4d:c0:67:8f:80:59:48:ba:22:a9:d5:
e9:5d:c4:8a:e4:17:fc:61:cd:5d:32:42:3d:31:79:
e6:8e:e2:8f:55:cd:61:1e:68:79:38:65:0d:f9:83:
b1:a4:ee:e2:9f:d6:b5:e3:1f:ed:0c:ae:5c:9f:84:
cc:dd:e8:7b:83:33:b4:34:b4:24:74:59:7c:fc:68:
01:dc:87:03:fc:68:f5:3e:d6:28:ca:36:fe:a7:90:
ea:07:b8:45:99:a7:df:c6:c4:d6:ae:fd:9a:5b:de:
22:80:e6:99:69:c0:b0:3b:74:18:23:f5:82:07:0d:
d9:64:ad:3f:6f:ca:87:62:3d:49:6f:1c:66:58:5b:
1d:94:60:c4:78:14:03:bb:49:9e:69:69:6a:c1:17:
c7:87:64:16:7e:8b:2d:ab:3e:25:9d:3b:be:e5:f4:
25:1d:36:b2:fd:09:21:5e:00:e9:e7:78:d8:59:8e:
85:cf:b9:5a:a9:16:a6:8c:19:71:0a:56:0d:2d:1a:
e7:64:a3:26:bf:15:ba:87:56:4d:a9:0a:6b:b2:25:
df:34:c9:0a:6a:45:ce:1d:70:fc:15:8c:94:34:f5:
37:7b:b1:f7:9c:60:1a:70:db:22:ab:04:bf:04:96:
df:aa:c2:0b:e6:05:7a:72:95:b3:f2:62:01:2e:47:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:A0:FB:90:F3:BD:0B:D9:1B:BE:AE:0F:44:78:F0:14:D8:11:74
X509v3 Authority Key Identifier:
keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/482648662BB511F1B1C883D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.51.0.0/17
Signature Algorithm: sha256WithRSAEncryption
01:88:8f:e1:47:4a:0b:01:f1:72:d1:57:4e:d8:87:4c:80:fb:
30:57:cc:1b:43:7d:9f:70:e4:9b:2f:cf:75:f8:1b:7b:b8:24:
7d:a6:43:3b:e8:59:09:ef:a9:4d:fb:44:45:6b:af:06:ea:d4:
e6:4d:d7:48:2f:41:80:0b:8f:8b:e6:02:61:ee:09:64:39:96:
1f:b7:39:10:98:2c:01:94:e9:df:36:92:46:eb:d9:6c:12:17:
89:de:fe:3c:a3:40:ee:de:88:40:25:c5:ee:aa:51:1f:04:07:
52:68:b0:de:69:1c:df:22:ca:b1:ce:f3:2d:1e:54:7f:7e:62:
3c:5f:7b:94:f2:1a:1b:5b:87:d8:6d:cd:fc:b7:20:b2:8b:e0:
d8:6a:bf:e6:a2:79:ef:16:da:c2:cf:3f:88:6e:39:75:c3:cf:
1c:83:81:9b:45:f3:cd:10:85:ce:1b:e4:2f:c5:30:3e:f0:7f:
a4:00:7e:e0:0a:c4:d3:21:de:b0:88:a8:4f:70:34:09:03:e3:
b7:50:67:c8:b7:76:73:ea:33:57:5d:52:97:3a:f5:49:be:63:
4f:56:12:7f:34:a1:b5:5d:87:16:d1:ab:4a:c2:b5:c6:60:96:
05:e8:06:01:4f:13:a2:aa:4f:21:b2:27:26:43:c3:50:5e:a4:
2b:cd:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:51 2026 by rpki-client