Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4B63F362290C11F1B83406A0DAE4EC9C.roa
File: 4B63F362290C11F1B83406A0DAE4EC9C.roa (raw, json)
Hash identifier: 1jh7xkNlhH/8ExsM8xdAWCd+AgpQp6yDXhwdw6n3+S4=
Subject key identifier: FA:9F:17:EE:9A:9A:7E:F9:EB:A5:F6:28:B1:C9:1B:77:6A:33:96:85
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0578
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4B63F362290C11F1B83406A0DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 12:07:01 +0000
ROA not before: Thu 26 Mar 2026 12:06:56 +0000
ROA not after: Wed 31 Mar 2032 12:06:56 +0000
asID: 23764
IP address blocks: 154.72.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 12:06:56 2026 GMT
Not After : Mar 31 12:06:56 2032 GMT
Subject: CN=69c52165-f113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:28:71:22:da:3f:e6:4f:c2:2d:47:fc:cf:
5e:fe:a6:49:1c:0f:38:ad:a5:d6:57:b2:e5:f5:72:
5b:db:31:d6:3d:4c:d7:d5:99:4f:3b:e2:51:7c:c2:
0a:56:c9:53:0e:73:07:d8:45:ab:3f:07:68:fb:60:
d9:78:f0:23:00:c1:51:9f:b4:91:c4:ef:6e:fb:6c:
b0:ad:28:8b:c2:ee:3e:ce:cd:0e:80:94:46:5d:67:
ec:7a:c8:aa:1a:65:1c:5d:38:9e:ad:1c:87:88:ca:
95:67:bf:2e:c5:a3:71:d8:90:76:34:d5:2d:b3:89:
0f:5d:c4:71:15:6a:7b:48:d7:44:f0:32:b4:6c:c7:
92:49:ec:f6:ad:aa:7a:f9:de:36:39:bb:e1:ac:40:
ec:c2:29:e0:99:dc:95:05:14:b2:0f:7c:0d:0f:a7:
23:c5:df:6b:36:c4:f0:79:e6:e0:06:e9:49:fd:2f:
71:8e:2f:34:36:25:9e:58:fb:8c:1f:e5:1e:a1:30:
2f:18:b7:de:f5:9a:03:f5:b3:17:d9:3a:65:c6:15:
3b:ba:6e:9c:69:da:6f:23:00:ea:24:0a:2e:f2:36:
c8:de:54:82:ea:c2:82:83:7c:76:21:d6:a1:f6:09:
cc:57:e5:12:c0:7f:b9:3b:92:e8:76:19:ee:14:92:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:17:EE:9A:9A:7E:F9:EB:A5:F6:28:B1:C9:1B:77:6A:33:96:85
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4B63F362290C11F1B83406A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:01:fa:9b:37:16:f4:d9:c8:ef:0e:c3:23:ab:30:d1:1e:ca:
0c:3e:69:fa:60:dd:e0:ab:60:90:a6:4f:f3:76:4d:8b:53:35:
48:74:0d:da:16:9b:62:8b:b1:89:fc:06:33:84:5d:1c:08:8a:
2e:b6:17:74:3d:7a:db:4a:0b:2f:c2:d1:ec:e9:ac:ad:f8:bb:
00:de:cb:50:89:57:a4:5f:a9:25:7e:a4:40:03:b4:eb:a7:1e:
01:ec:80:cb:e7:4c:f7:3c:4b:ea:77:d2:85:1c:11:78:93:c0:
bd:63:91:5a:66:dd:87:93:3e:69:5b:3f:df:f7:59:b6:e6:f7:
44:1f:59:5b:ed:27:e8:3e:7f:6f:b2:90:6f:7d:95:22:f4:19:
c2:fc:25:a2:7c:b9:68:ea:4d:2d:13:12:f5:e7:77:bf:72:71:
e7:0a:01:c5:b9:64:f2:be:b7:dd:ba:39:00:5c:b3:29:13:34:
c0:d4:c5:48:d5:4a:4c:78:b7:4d:2c:b0:5f:c8:89:2f:22:40:
ce:c2:f3:ef:b0:0a:98:a2:7a:d4:9f:e7:d7:10:c3:23:5e:d3:
65:9e:b6:96:7e:f2:18:0c:fd:59:7a:d6:c4:26:48:77:ee:e2:
cd:c3:3c:4f:f9:7c:1d:bf:ef:63:f5:31:94:38:d8:eb:03:ac:
af:af:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:59 2026 by rpki-client