Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/C1012DD81EC611F18633B7BFDAE4EC9C.roa
File: C1012DD81EC611F18633B7BFDAE4EC9C.roa (raw, json)
Hash identifier: AEjIQDoJkuCV2zdXj8TYSJzuJbyASHlYynXe4LN5vrk=
Subject key identifier: 77:E9:FF:9B:3B:12:D1:AC:E6:3D:1E:8F:03:57:21:BB:E2:37:4D:C2
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 0484
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/C1012DD81EC611F18633B7BFDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 10:24:02 +0000
ROA not before: Fri 13 Mar 2026 10:23:57 +0000
ROA not after: Fri 14 Mar 2036 10:23:57 +0000
asID: 30986
IP address blocks: 41.189.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Mar 13 10:23:57 2026 GMT
Not After : Mar 14 10:23:57 2036 GMT
Subject: CN=69b3e5c2-8968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:d7:67:ba:42:6f:06:bf:e9:75:22:4f:75:
60:f8:50:e0:80:75:36:53:8a:c3:47:7d:46:68:50:
d9:7d:cd:bf:49:3f:e0:85:08:3b:37:80:8f:59:c9:
15:9f:42:4c:99:e8:1b:29:02:72:4f:09:bb:a8:fa:
2d:f6:49:10:36:cf:0f:54:6d:36:15:47:0b:b8:1e:
83:6c:80:d9:ad:38:f2:9c:1b:a5:7d:3b:b1:97:ad:
cf:e0:89:47:e0:fc:e8:60:a3:b0:27:44:d8:2d:54:
bf:7f:be:e7:e1:b5:36:69:8f:34:cb:f6:79:c8:9c:
9e:9a:c8:43:5d:de:50:7d:bb:f6:64:d1:a4:31:f7:
f9:35:b7:54:e5:88:09:f2:1e:ee:84:61:2e:0a:e0:
8a:37:38:1a:40:04:16:55:ed:c3:56:2d:e6:88:13:
3d:9d:b1:06:25:d5:10:f8:d3:36:13:14:48:82:85:
7c:bd:b8:93:c4:6f:46:05:b3:31:5d:b2:79:b0:55:
79:9d:ad:33:dc:de:4e:53:43:44:08:6c:9b:cb:b5:
e0:5d:70:39:b5:ee:0f:f5:3c:d8:9f:01:18:5f:82:
fc:42:8c:0e:f2:eb:67:b5:4d:5f:df:99:c2:f0:f2:
3b:f8:b9:c9:42:f7:02:eb:7b:ae:90:76:90:cc:1f:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E9:FF:9B:3B:12:D1:AC:E6:3D:1E:8F:03:57:21:BB:E2:37:4D:C2
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/C1012DD81EC611F18633B7BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.189.160.0/19
Signature Algorithm: sha256WithRSAEncryption
98:c7:c4:53:5e:3d:db:20:ab:01:92:01:98:32:65:2e:dd:55:
7c:05:d3:69:c9:a1:f1:03:4f:8b:c0:8c:2d:8c:f7:07:47:50:
9d:93:af:af:5b:37:63:67:c7:51:4f:cc:08:95:d6:ae:6a:24:
8f:44:47:50:45:0d:6c:89:6e:68:c1:56:3d:95:47:33:be:52:
dd:0d:c4:42:5a:30:53:de:10:47:6c:37:95:57:13:34:60:57:
51:37:7f:86:69:6d:6e:8d:99:f5:ab:d8:2e:d4:8a:12:82:2e:
0d:78:f8:16:ae:16:1f:f8:54:75:af:44:f5:48:5d:ad:a0:0f:
76:24:f5:66:f3:58:90:b7:26:c0:2e:62:5c:50:db:d2:f1:91:
00:45:60:d3:11:cc:51:4e:93:ac:0a:51:61:0b:f7:64:30:60:
68:19:00:65:ce:1e:1b:06:8a:02:0c:a4:7c:85:6a:12:17:57:
ed:f9:53:3d:9c:b1:64:b1:2d:b6:bd:d2:f0:e8:e2:4f:54:5f:
d7:37:e3:c1:ac:52:cb:70:89:72:b3:8b:8d:8c:b7:7b:e8:6b:
7b:d6:6c:18:a2:76:70:fb:b4:7b:34:44:71:59:f2:55:e9:87:
08:12:15:d4:69:c8:aa:0d:a5:6a:7c:d1:c9:52:7f:11:6d:7e:
45:4d:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:05 2026 by rpki-client