Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/25E5F58C290B11F190538F9ADAE4EC9C.roa
File: 25E5F58C290B11F190538F9ADAE4EC9C.roa (raw, json)
Hash identifier: dRozXwC2j+o8bXMp60CHkYN8CNbyGNQ6PkkQe4Du9yY=
Subject key identifier: AE:D3:26:F4:99:A6:50:39:F5:3F:1A:AB:52:CE:A6:AC:D5:EC:82:6A
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0571
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/25E5F58C290B11F190538F9ADAE4EC9C.roa
Signing time: Thu 26 Mar 2026 11:58:49 +0000
ROA not before: Thu 26 Mar 2026 11:58:44 +0000
ROA not after: Wed 31 Mar 2032 11:58:44 +0000
asID: 23764
IP address blocks: 154.72.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 11:58:44 2026 GMT
Not After : Mar 31 11:58:44 2032 GMT
Subject: CN=69c51f79-04eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:62:b2:a4:43:2d:ae:8d:28:c8:c2:b1:59:
36:1a:b3:9a:3a:c1:a4:37:19:22:d7:5c:61:1c:b7:
ba:c6:3e:a7:72:05:4f:4a:0e:22:72:98:6d:f0:49:
a2:c6:bc:9e:12:5b:72:45:ec:6d:74:c4:58:9d:e5:
1b:63:1e:e6:f5:ed:06:05:9a:a0:24:f7:f3:be:82:
dc:85:95:02:53:58:4a:fd:d0:7a:6b:34:19:10:09:
dd:f1:44:15:42:0c:5d:4f:0f:fe:4e:b3:02:99:c3:
01:51:29:ba:2a:90:90:e4:21:6d:34:30:6f:20:2e:
9f:ed:12:6d:29:57:d2:aa:d0:af:53:f6:9e:3f:5a:
0b:35:98:64:4f:14:e0:45:95:5d:59:ca:e1:51:9b:
b9:0f:b3:66:a1:45:0d:e9:55:ae:09:97:22:d0:3e:
2d:9d:54:3c:5d:f2:96:74:32:dc:fd:49:ba:98:ea:
78:39:e9:9c:3f:a8:7b:fa:a0:0c:87:d9:24:b9:71:
c0:46:34:a1:12:27:f1:6b:b4:e2:8f:1b:17:ad:b9:
76:c5:38:fb:96:a6:b2:b8:40:6e:64:a1:0c:1f:6d:
9a:a7:b1:40:28:8c:b1:81:21:4c:37:5f:46:a6:0d:
46:05:23:57:7e:b1:64:d8:fd:1d:0d:15:a5:d3:9e:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:26:F4:99:A6:50:39:F5:3F:1A:AB:52:CE:A6:AC:D5:EC:82:6A
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/25E5F58C290B11F190538F9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.43.0/24
Signature Algorithm: sha256WithRSAEncryption
35:42:99:6b:1a:8b:17:70:8b:79:03:f0:e8:11:f9:d9:05:82:
1e:78:ca:53:51:a5:ab:c3:a0:74:08:97:c0:31:a3:a5:2d:7c:
ee:ce:82:cd:fa:51:ef:a5:f1:b6:1b:ac:6d:fa:06:4a:23:3d:
03:15:2b:55:3b:5a:da:b6:6c:00:a3:c0:26:a3:39:2c:6c:c0:
d3:21:01:d5:e6:2f:2b:61:5e:0a:ba:92:b4:69:ab:c1:26:3f:
a8:1e:24:65:c8:f8:fe:06:12:8d:05:81:0d:ee:25:8d:e4:00:
2e:62:32:73:1b:e9:cf:9c:60:f7:f2:e6:c2:fb:6d:41:59:61:
9d:46:59:00:45:7a:4b:0a:a8:fb:7a:a3:3a:de:dc:00:aa:fa:
06:52:4d:32:75:5f:9b:7a:82:5c:e3:f5:06:10:f9:f5:2c:1d:
dd:d3:0e:ab:08:8a:f4:b9:bf:db:3f:12:6f:b9:50:a7:21:aa:
e5:7b:27:b5:54:7f:c7:7f:c7:e1:54:eb:a3:0e:b6:4c:9f:59:
ef:fc:58:86:68:c5:ac:fe:fb:f6:2d:f3:62:c2:19:c6:a6:ff:
cb:f4:bb:a3:ff:94:21:6e:c1:83:67:1d:69:e2:4d:be:6b:2b:
6d:2e:47:a2:ca:bc:a8:d0:fc:24:3a:bb:ac:67:15:43:78:8d:
f0:2b:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:57 2026 by rpki-client