Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/557D1FE81EC311F1A8C107ABDAE4EC9C.roa
File: 557D1FE81EC311F1A8C107ABDAE4EC9C.roa (raw, json)
Hash identifier: 6E/4b3jG5+WBAhKMmUMbiYpLspky+skYf9xDIZrtcIA=
Subject key identifier: 4D:93:42:A8:07:A3:31:61:A7:D2:25:74:44:B8:3C:D6:15:53:C8:68
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 047D
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/557D1FE81EC311F1A8C107ABDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 09:59:33 +0000
ROA not before: Fri 13 Mar 2026 09:59:28 +0000
ROA not after: Fri 14 Mar 2036 09:59:28 +0000
asID: 30986
IP address blocks: 196.201.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Mar 13 09:59:28 2026 GMT
Not After : Mar 14 09:59:28 2036 GMT
Subject: CN=69b3e005-635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:e2:b7:2a:0b:14:65:2e:9b:cc:2e:6b:44:
e1:09:ab:96:42:fe:c8:4c:1b:fa:ad:c5:e5:46:30:
8e:0e:fb:7c:b6:4a:a3:21:98:44:5d:19:d9:1f:99:
8e:4b:41:de:67:f2:76:c0:45:64:c1:33:18:14:ef:
c0:a9:a9:de:63:38:d7:f8:26:db:74:71:81:29:15:
a4:3c:eb:2e:3e:60:3c:f0:38:96:42:46:57:cf:b9:
c8:d8:4e:aa:0d:79:29:e2:93:cd:c7:17:7c:d0:67:
f5:2c:df:6b:4d:b4:a5:9b:38:fd:ef:e1:e8:6c:fd:
78:80:0c:b3:84:82:ed:4c:24:da:88:62:c1:19:52:
1c:c7:c8:80:1c:9c:3f:19:02:22:a2:77:32:98:e0:
6b:ee:54:f2:6c:9b:ca:04:24:52:83:99:5c:2c:5b:
6f:6b:bf:02:e0:32:5f:9a:45:c0:b1:96:99:f2:11:
9c:ba:05:1a:c4:f8:10:4f:f1:5f:70:72:36:48:85:
12:00:f0:68:db:76:7e:1d:d8:e6:46:a9:20:21:b4:
35:54:1f:5d:63:ce:d9:02:6f:2c:d8:90:ce:6c:ab:
d5:a9:5d:09:55:bb:ae:f8:bc:9a:4d:be:1f:a7:41:
c6:f4:85:0b:19:7e:a0:f0:4e:b7:bf:8c:36:c4:de:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:42:A8:07:A3:31:61:A7:D2:25:74:44:B8:3C:D6:15:53:C8:68
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/557D1FE81EC311F1A8C107ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.201.32.0/19
Signature Algorithm: sha256WithRSAEncryption
00:4b:09:21:ab:50:27:8d:f3:f5:37:c3:9a:35:11:ac:84:92:
be:cd:46:ac:cb:32:c7:72:a9:d9:9c:c4:10:d9:39:ad:04:7c:
99:35:3a:76:ac:08:ac:34:bd:9e:f0:d1:bd:08:f2:31:7b:e1:
40:f6:17:c5:ba:9f:27:42:a0:b2:db:ad:f2:9b:10:77:3b:10:
c7:ef:d2:a1:4c:c1:ad:26:47:22:60:e5:69:a2:c1:fc:57:a9:
bc:f6:ce:d9:96:5f:ad:d4:d9:93:5f:bf:1a:19:9e:4d:eb:b2:
3e:1b:28:b7:af:ac:b0:6d:95:73:00:28:d5:c2:7b:4e:5b:46:
e1:e3:26:fb:65:55:f7:8c:75:78:cf:c7:5c:33:1a:8c:f8:8c:
79:db:10:86:25:1a:3c:0b:69:4c:3c:d8:e3:34:05:a5:f6:7f:
e5:ca:38:e1:4a:96:45:39:b3:0b:80:00:e3:ac:d1:76:a5:d2:
24:5b:b1:c3:07:39:d3:6f:8f:52:1f:45:80:ba:a6:49:42:b4:
d0:d0:2c:00:3c:78:a3:40:c3:cb:45:f7:b3:ef:01:e2:5f:f3:
0e:97:6f:39:00:8e:5e:16:48:2e:77:d3:b9:cc:fa:29:7c:48:
90:d0:a5:46:8f:b0:85:c6:e2:aa:8b:9c:db:ff:7c:9f:a2:ea:
32:22:b9:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz
RUI1ODdCNEM4MjAeFw0yNjAzMTMwOTU5MjhaFw0zNjAzMTQwOTU5MjhaMBgxFjAU
BgNVBAMTDTY5YjNlMDA1LTYzNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1i+K3KgsUZS6bzC5rROEJq5ZC/shMG/qtxeVGMI4O+3y2SqMhmERdGdkf
mY5LQd5n8nbARWTBMxgU78Cpqd5jONf4Jtt0cYEpFaQ86y4+YDzwOJZCRlfPucjY
TqoNeSnik83HF3zQZ/Us32tNtKWbOP3v4ehs/XiADLOEgu1MJNqIYsEZUhzHyIAc
nD8ZAiKidzKY4GvuVPJsm8oEJFKDmVwsW29rvwLgMl+aRcCxlpnyEZy6BRrE+BBP
8V9wcjZIhRIA8Gjbdn4d2OZGqSAhtDVUH11jztkCbyzYkM5sq9WpXQlVu674vJpN
vh+nQcb0hQsZfqDwTre/jDbE3gqZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTZNC
qAejMWGn0iV0RLg81hVTyGgwHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7
TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH
eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0Yx
MjIyNDY4LzU1N0QxRkU4MUVDMzExRjFBOEMxMDdBQkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXEySAwDQYJKoZIhvcNAQEL
BQADggEBAABLCSGrUCeN8/U3w5o1EayEkr7NRqzLMsdyqdmcxBDZOa0EfJk1Onas
CKw0vZ7w0b0I8jF74UD2F8W6nydCoLLbrfKbEHc7EMfv0qFMwa0mRyJg5WmiwfxX
qbz2ztmWX63U2ZNfvxoZnk3rsj4bKLevrLBtlXMAKNXCe05bRuHjJvtlVfeMdXjP
x1wzGoz4jHnbEIYlGjwLaUw82OM0BaX2f+XKOOFKlkU5swuAAOOs0Xal0iRbscMH
OdNvj1IfRYC6pklCtNDQLAA8eKNAw8tF97PvAeJf8w6XbzkAjl4WSC5307nM+il8
SJDQpUaPsIXG4qqLnNv/fJ+i6jIiuek=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:05 2026 by rpki-client