Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9237A3C0290B11F185700E9BDAE4EC9C.roa
File: 9237A3C0290B11F185700E9BDAE4EC9C.roa (raw, json)
Hash identifier: esdrg0wVaagLaogxvCmxp6g0gUWYVNrVTZdy+oZHiLc=
Subject key identifier: 13:BB:83:B3:59:5E:98:99:E8:02:BC:91:7A:B9:FC:33:9A:F8:D3:27
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0574
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9237A3C0290B11F185700E9BDAE4EC9C.roa
Signing time: Thu 26 Mar 2026 12:01:50 +0000
ROA not before: Thu 26 Mar 2026 12:01:45 +0000
ROA not after: Wed 31 Mar 2032 12:01:45 +0000
asID: 4134
IP address blocks: 154.72.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 12:01:45 2026 GMT
Not After : Mar 31 12:01:45 2032 GMT
Subject: CN=69c5202e-d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:e6:df:cc:6d:06:5b:9f:ef:e1:01:44:f9:
8d:f1:a8:8e:37:6c:ec:4f:e8:2c:a0:d0:55:3b:6f:
d3:9b:cc:3c:e4:92:2f:04:76:b5:c6:7a:bb:97:16:
71:14:74:b7:ab:38:d3:fa:83:13:48:a6:ac:6c:52:
0c:47:7f:24:a2:5b:97:4d:54:bc:23:96:23:0f:88:
31:22:69:ae:61:95:43:79:c2:f5:be:e9:f9:88:29:
58:10:d8:25:0c:f3:e8:4c:6c:3b:4a:51:fb:bc:2c:
62:09:dd:c8:0b:27:ab:be:cf:4e:01:45:3f:1f:24:
6d:6a:8e:e3:8a:85:e6:ef:62:4e:75:bc:7f:d3:89:
39:25:e1:43:ee:24:1d:78:80:75:af:c4:96:f5:bc:
b1:c0:ec:36:33:e8:30:67:0c:69:16:19:d5:cf:d3:
5b:2e:1f:c4:44:86:3c:b2:e5:c6:c0:62:c1:9c:cd:
05:5a:2a:62:2a:fd:df:a5:b5:27:ce:ec:0a:2c:65:
6a:65:cb:3f:e8:ed:18:27:cc:63:63:29:fe:6b:33:
99:87:02:69:df:94:70:07:23:1d:5f:20:32:ca:4b:
1a:74:9a:d6:94:bc:b5:08:cf:66:e8:a8:13:6d:4a:
1e:fc:0e:8f:0c:bf:19:e9:72:e4:00:99:36:93:91:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:83:B3:59:5E:98:99:E8:02:BC:91:7A:B9:FC:33:9A:F8:D3:27
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9237A3C0290B11F185700E9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.44.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d8:1e:e3:0a:95:91:54:56:a2:a6:60:66:85:39:64:ab:11:
47:54:cd:19:2e:28:a7:a9:70:a9:dc:96:a2:4c:ec:ca:fd:e4:
83:54:45:20:f8:0f:6a:6a:cf:7f:72:20:2f:9d:af:5f:9c:08:
76:49:cb:9d:60:a9:99:d0:4d:2a:e1:4d:35:aa:2c:b4:56:25:
7c:0b:3b:1a:6a:23:8e:19:1c:c1:77:56:2e:ee:8c:5f:34:47:
e7:6d:be:4a:c6:33:d9:5f:e0:c0:b8:a3:94:29:8c:d2:35:74:
9c:83:6d:30:6b:7a:01:d9:90:87:dd:d3:89:51:ea:02:2a:3d:
42:db:84:c9:af:ae:5e:b4:3e:68:ae:46:e8:94:68:b2:ac:6c:
9e:96:72:56:83:f2:a6:e4:d1:e1:c1:3c:db:8a:fa:4e:e1:71:
5c:ef:e9:c3:f1:bd:da:83:d4:b3:02:33:b8:31:39:ea:62:78:
b1:10:09:68:71:e2:8a:eb:c9:92:e8:91:b6:f3:80:89:97:2b:
e5:14:55:da:19:34:36:a6:9b:9b:06:51:f0:19:fc:59:59:8a:
7b:92:96:07:6e:83:34:b8:5c:8b:c0:b3:b0:55:fb:53:b3:e2:
b2:f2:26:e4:3a:74:85:10:d5:90:35:30:84:19:d2:33:69:41:
8e:ae:80:4b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yNjAzMjYxMjAxNDVaFw0zMjAzMzExMjAxNDVaMBgxFjAU
BgNVBAMTDTY5YzUyMDJlLWQ0M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9mObfzG0GW5/v4QFE+Y3xqI43bOxP6Cyg0FU7b9ObzDzkki8EdrXGeruX
FnEUdLerONP6gxNIpqxsUgxHfySiW5dNVLwjliMPiDEiaa5hlUN5wvW+6fmIKVgQ
2CUM8+hMbDtKUfu8LGIJ3cgLJ6u+z04BRT8fJG1qjuOKhebvYk51vH/TiTkl4UPu
JB14gHWvxJb1vLHA7DYz6DBnDGkWGdXP01suH8REhjyy5cbAYsGczQVaKmIq/d+l
tSfO7AosZWplyz/o7RgnzGNjKf5rM5mHAmnflHAHIx1fIDLKSxp0mtaUvLUIz2bo
qBNtSh78Do8MvxnpcuQAmTaTkT2DAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUE7uD
s1lemJnoAryRern8M5r40ycwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYx
MjIyNDY4LzkyMzdBM0MwMjkwQjExRjE4NTcwMEU5QkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSCwwDQYJKoZIhvcNAQEL
BQADggEBAHfYHuMKlZFUVqKmYGaFOWSrEUdUzRkuKKepcKnclqJM7Mr95INURSD4
D2pqz39yIC+dr1+cCHZJy51gqZnQTSrhTTWqLLRWJXwLOxpqI44ZHMF3Vi7ujF80
R+dtvkrGM9lf4MC4o5QpjNI1dJyDbTBregHZkIfd04lR6gIqPULbhMmvrl60Pmiu
RuiUaLKsbJ6WclaD8qbk0eHBPNuK+k7hcVzv6cPxvdqD1LMCM7gxOepieLEQCWhx
4orryZLokbbzgImXK+UUVdoZNDamm5sGUfAZ/FlZinuSlgdugzS4XIvAs7BV+1Oz
4rLyJuQ6dIUQ1ZA1MIQZ0jNpQY6ugEs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:03:00 2026 by rpki-client