Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/E0552092290A11F1BB851097DAE4EC9C.roa
File: E0552092290A11F1BB851097DAE4EC9C.roa (raw, json)
Hash identifier: ig/tL40dqEY7Iyx7g+TZ7mDIgBNV2sLB3UwSaMxSV0k=
Subject key identifier: 58:B1:DB:72:3E:F7:09:71:3C:39:73:4D:82:5C:49:C4:8E:CC:38:BF
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 056F
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/E0552092290A11F1BB851097DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 11:56:52 +0000
ROA not before: Thu 26 Mar 2026 11:56:47 +0000
ROA not after: Wed 31 Mar 2032 11:56:47 +0000
asID: 4809
IP address blocks: 154.72.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Mar 26 11:56:47 2026 GMT
Not After : Mar 31 11:56:47 2032 GMT
Subject: CN=69c51f04-a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:f4:c4:db:2b:d0:8d:c4:10:1c:41:65:0f:
14:39:b6:af:c2:bc:3a:2a:de:cb:d5:fe:be:68:2f:
0b:f3:9f:6d:71:9c:05:31:6a:64:a6:1b:23:69:c2:
e1:3b:1d:51:f9:29:6c:eb:cd:50:1e:d1:92:78:0b:
87:d0:fe:26:e4:73:c6:73:ea:52:00:c7:55:c9:1b:
6d:88:ec:f9:65:c7:cc:4f:94:34:19:cb:18:81:e7:
30:fc:2a:9e:a6:62:9c:a1:24:b1:f0:0a:fe:d3:46:
5b:ed:11:98:c3:e0:69:be:9e:c9:42:36:02:36:c5:
24:17:9f:0b:20:2e:46:f2:24:c7:79:3d:38:da:08:
4a:6d:34:f3:30:13:15:22:c2:b6:60:df:92:50:e1:
d3:2b:89:a8:0a:7f:93:81:16:23:cb:54:c1:91:0e:
99:4d:9a:cd:9a:93:53:9d:9c:ec:3c:2f:51:c0:0b:
39:fe:f5:f9:7a:3e:e4:7a:62:e2:97:10:4e:1c:57:
83:31:9e:67:d4:a7:20:1a:66:90:76:2f:b5:28:1d:
be:5e:5f:a1:11:4a:8c:86:52:51:9c:8c:34:7f:5d:
4d:94:87:ea:87:c8:14:36:90:e9:00:41:11:38:48:
99:46:b0:82:57:eb:b2:53:52:05:1d:96:10:fc:55:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:DB:72:3E:F7:09:71:3C:39:73:4D:82:5C:49:C4:8E:CC:38:BF
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/E0552092290A11F1BB851097DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ab:8e:48:93:b1:f4:36:bc:91:dc:79:92:f1:4a:e1:bf:3a:
7f:52:af:59:e7:07:91:f7:7f:e3:ad:62:6a:42:a5:c2:be:a8:
3b:c8:56:21:79:8a:8d:40:67:15:53:39:07:4a:94:1d:ef:6c:
b7:fe:0a:98:fe:17:c6:85:8e:83:1b:97:90:b5:90:3a:35:99:
de:e4:03:0d:51:56:c0:f9:ae:5a:66:7b:63:de:5c:9e:85:a6:
47:8e:7d:e5:52:c3:50:12:4a:70:36:91:b5:88:65:4b:05:b5:
ed:d6:46:f7:a2:73:d7:a2:68:8b:3f:a7:99:6c:79:6b:56:aa:
6a:f0:0f:2b:ad:62:7a:e5:50:d5:82:6c:b2:d8:02:4d:66:9a:
06:f5:e7:25:09:ec:c5:b1:45:a9:93:a1:2e:a3:04:0c:29:21:
35:b4:26:96:b7:2a:8d:1b:04:d6:9f:9d:71:34:88:5c:e6:8e:
b1:41:43:1e:70:6c:9c:de:e2:16:52:92:2f:dd:17:c3:d7:e6:
cb:35:67:97:76:cb:2f:94:40:5b:b9:7c:6b:4a:df:52:56:ee:
22:a4:19:5b:4b:ea:f1:73:cc:fa:4a:59:de:fd:d4:bc:5d:fd:
9e:2d:78:f5:32:8a:a1:5e:f0:8c:f4:de:cf:60:e5:ba:c2:3e:
6e:d9:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:57 2026 by rpki-client