Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/CBC1F700290911F194A1BB92DAE4EC9C.roa
File: CBC1F700290911F194A1BB92DAE4EC9C.roa (raw, json)
Hash identifier: 4tF6J5vLMi2wRM5FkfLpM8C33Azvdba51pMX+8dpwlQ=
Subject key identifier: 45:36:6A:AA:EE:11:21:FB:57:B9:7D:05:25:15:A7:F7:38:E6:0C:5A
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 056A
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/CBC1F700290911F194A1BB92DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 11:49:08 +0000
ROA not before: Thu 26 Mar 2026 11:49:02 +0000
ROA not after: Wed 31 Mar 2032 11:49:02 +0000
asID: 23764
IP address blocks: 154.72.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 11:49:02 2026 GMT
Not After : Mar 31 11:49:02 2032 GMT
Subject: CN=69c51d34-9649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:25:a1:f8:20:39:6f:ae:3d:07:2d:83:3e:
08:78:f5:01:97:71:47:42:b6:7f:8a:69:7f:89:d7:
e7:cf:59:2f:c7:ad:9f:c4:07:a2:38:cd:81:0f:64:
9f:2c:42:8d:77:f4:50:8f:03:93:63:2a:9b:c3:8d:
20:c9:75:09:07:43:1b:db:a5:63:34:89:59:35:03:
44:b8:b0:30:a1:2c:56:03:b6:65:8e:0a:e1:cc:a6:
1b:cf:74:15:1a:0a:36:ed:9b:23:73:26:02:33:67:
f0:75:ef:9c:4e:e0:dc:4d:be:6a:5a:7a:ce:4c:09:
bf:df:f1:56:a2:e5:c2:6d:7f:bc:32:bb:e0:2f:04:
d0:bb:32:cf:5c:ff:a4:88:03:9e:05:d9:c6:a9:c2:
b9:b8:9e:97:cb:11:a2:23:80:87:91:8a:7d:a5:38:
53:e0:fa:73:cd:f4:1d:d3:95:9b:2c:79:ea:df:f9:
7f:3d:f0:39:b5:73:1d:9b:0c:72:fd:59:a2:d5:60:
99:98:22:d9:7b:4c:d3:f9:be:50:a3:1c:da:6c:29:
2e:cc:70:01:56:e4:a4:00:99:95:5c:3b:34:0f:9d:
7c:c6:54:0f:f8:10:5d:9b:aa:69:01:70:94:af:6c:
ed:f9:ce:cd:b3:47:1e:77:61:f1:bf:fb:79:d2:86:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:6A:AA:EE:11:21:FB:57:B9:7D:05:25:15:A7:F7:38:E6:0C:5A
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/CBC1F700290911F194A1BB92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.40.0/24
Signature Algorithm: sha256WithRSAEncryption
53:30:32:6b:ae:37:64:b5:c3:38:4b:3d:75:c2:5d:06:f8:4b:
68:78:be:a4:6c:ff:88:39:7d:11:cd:5c:60:07:92:e2:01:99:
5a:98:31:ed:22:92:40:15:45:52:e7:0f:57:63:1a:ed:df:ab:
62:a3:5a:87:e1:d3:1d:bd:c7:b7:cf:5c:56:3d:62:2e:03:bb:
aa:ae:75:2b:58:b6:fa:59:49:7a:98:30:55:c5:7a:90:cb:60:
e8:a9:de:68:9a:8d:2d:1b:55:5b:c1:45:ac:38:82:d2:aa:5a:
aa:55:4a:6e:d9:05:84:96:e7:20:70:c2:25:f9:c3:9c:f6:b3:
f9:fa:96:c8:e2:75:c7:1a:9d:5c:41:37:a5:c5:8b:30:2f:e0:
fe:e5:a7:f2:82:29:01:91:de:ff:67:3a:27:1f:6c:33:5f:36:
94:ff:d7:2e:ba:91:32:2a:bb:21:7a:79:b5:73:b3:fe:9b:05:
80:a2:c3:a2:91:3b:19:b6:91:65:0a:7a:7d:37:bf:bc:73:e3:
c0:01:52:48:aa:04:20:63:9b:ea:2b:d5:f8:98:36:17:30:3d:
4b:bd:6b:01:9c:6e:8a:b9:33:a5:26:6f:26:0b:0e:7d:2d:8a:
6c:cd:18:cc:e1:01:72:bd:75:83:f2:5f:72:9e:40:ec:f1:88:
ab:2c:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:56 2026 by rpki-client