Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/5964E8CE195611F1B7C5A3C4DAE4EC9C.roa
File: 5964E8CE195611F1B7C5A3C4DAE4EC9C.roa (raw, json)
Hash identifier: Ic14Kwha21E6zRgAD/TUmunM95/yi/EoU7G/TV5bRGM=
Subject key identifier: EE:72:11:7E:E2:30:90:45:B6:02:59:0D:D9:19:9B:A8:AF:74:9A:05
Certificate issuer: /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial: 0579
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/5964E8CE195611F1B7C5A3C4DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 12:16:48 +0000
ROA not before: Fri 06 Mar 2026 12:16:44 +0000
ROA not after: Mon 06 Mar 2028 12:16:44 +0000
asID: 37028
IP address blocks: 41.183.0.0/16 maxlen: 24
196.10.112.0/22 maxlen: 24
196.10.116.0/23 maxlen: 24
196.11.125.0/24 maxlen: 24
196.11.126.0/23 maxlen: 24
196.11.128.0/22 maxlen: 24
196.11.132.0/23 maxlen: 24
196.11.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F854AAF, serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Validity
Not Before: Mar 6 12:16:44 2026 GMT
Not After : Mar 6 12:16:44 2028 GMT
Subject: CN=69aac5b0-3a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:65:03:ac:ef:34:4d:13:05:f9:ad:af:cd:
5f:b1:3f:87:77:6c:2e:79:c0:91:65:46:67:38:5a:
6e:b4:f2:62:97:e5:3b:33:c9:5e:29:63:97:81:ca:
3b:8c:be:77:b2:88:b4:99:22:87:a7:d2:85:09:00:
34:a1:9b:d4:59:7f:b8:7a:74:e7:d8:33:a6:5d:c3:
e4:1e:df:93:e1:a6:f6:9a:3e:c9:eb:7a:92:da:9d:
7c:e8:5e:80:58:9f:b0:6d:53:c3:10:d5:fe:6c:0d:
cf:84:00:ec:5b:3a:9e:9b:6c:9c:c6:39:66:2f:50:
79:1a:38:12:c8:dd:7e:cb:24:f2:c9:38:af:bc:5c:
ac:68:97:8a:54:2a:ea:ac:b5:39:e3:84:43:ee:61:
86:8b:29:a7:5c:dd:0d:ab:a4:99:fb:dc:d2:6b:27:
8d:5a:be:59:d0:4e:9d:68:ad:3f:ac:88:d1:64:77:
6e:b7:ad:d1:67:c4:f5:3b:c4:9c:d9:66:ed:80:bd:
26:de:57:b7:0f:87:94:cb:be:ce:ce:5d:49:e4:ae:
30:10:3c:bf:7a:5f:a8:4e:35:d7:fd:41:ae:f6:ca:
d1:b2:86:13:7b:42:bd:87:fa:20:66:9c:ea:ea:4f:
eb:8b:a9:3f:a3:3f:da:a7:77:a7:bf:b9:24:6d:47:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:11:7E:E2:30:90:45:B6:02:59:0D:D9:19:9B:A8:AF:74:9A:05
X509v3 Authority Key Identifier:
keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/5964E8CE195611F1B7C5A3C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.183.0.0/16
196.10.112.0-196.10.117.255
196.11.125.0-196.11.134.255
Signature Algorithm: sha256WithRSAEncryption
bd:e8:f3:b4:b4:72:9d:e2:c9:cb:71:a0:e5:82:75:69:f9:ab:
8d:ba:31:4c:41:6e:b2:3e:0f:39:90:6b:3b:6d:34:b6:bb:67:
5f:2c:12:80:42:cc:46:70:23:b4:fa:6e:d5:39:29:cd:35:22:
e2:dd:e3:95:e5:c1:50:f3:1b:32:6c:d7:47:c7:9c:1b:3e:12:
8a:e7:d1:5b:00:6b:d9:1a:f5:2b:18:dd:52:5c:d0:19:1f:8c:
12:8e:ef:82:d4:d3:3c:26:5d:99:5e:8a:1a:8b:32:10:0f:aa:
1e:eb:14:3a:14:c9:41:47:1f:c3:70:86:e2:8f:43:50:2a:5f:
08:08:9d:05:cf:c8:f3:a8:9f:e5:5e:08:22:8d:59:98:37:01:
48:06:94:e3:0f:19:49:93:16:9f:ee:ee:8b:04:b2:b6:03:f6:
ef:35:22:b0:b4:c4:f4:cc:50:a6:40:6e:1b:53:e2:cd:ed:76:
22:8f:37:dc:02:c6:b7:a0:ad:d2:d1:73:36:0f:fa:ba:71:10:
1b:43:bb:ce:d9:19:2f:8c:e1:23:b1:50:00:f5:97:64:6f:e2:
a8:41:7c:a5:d8:70:2e:27:e1:21:42:ea:9c:ee:be:56:5c:01:
9c:75:c0:ff:38:01:be:0c:f1:52:33:68:db:b1:16:aa:fd:a8:
8c:99:ba:2e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Rjg1NEFBRjExMC8GA1UEBRMoMzY4OTI2NzlCMkUwQzg1RjU1NkQ5NDdERjIxOTE2
MTlCQTJBQkZFNjAeFw0yNjAzMDYxMjE2NDRaFw0yODAzMDYxMjE2NDRaMBgxFjAU
BgNVBAMTDTY5YWFjNWIwLTNhNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDKmUDrO80TRMF+a2vzV+xP4d3bC55wJFlRmc4Wm608mKX5TszyV4pY5eB
yjuMvneyiLSZIoen0oUJADShm9RZf7h6dOfYM6Zdw+Qe35PhpvaaPsnrepLanXzo
XoBYn7BtU8MQ1f5sDc+EAOxbOp6bbJzGOWYvUHkaOBLI3X7LJPLJOK+8XKxol4pU
KuqstTnjhEPuYYaLKadc3Q2rpJn73NJrJ41avlnQTp1orT+siNFkd263rdFnxPU7
xJzZZu2AvSbeV7cPh5TLvs7OXUnkrjAQPL96X6hONdf9Qa72ytGyhhN7Qr2H+iBm
nOrqT+uLqT+jP9qnd6e/uSRtRzfDAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQU7nIR
fuIwkEW2AlkN2RmbqK90mgUwHwYDVR0jBBgwFoAUNokmebLgyF9VbZR98hkWGboq
v+YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4NTRBLzIwMkVEMjAyMDhGNDExRUQ5MjdDMEQ5OEYxMjIyNDY4L05va21l
YkxneUY5VmJaUjk4aGtXR2JvcXYtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05va21lYkxneUY5VmJaUjk4aGtXR2JvcXYtWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY4NTRBLzIwMkVEMjAyMDhGNDExRUQ5MjdDMEQ5OEYx
MjIyNDY4LzU5NjRFOENFMTk1NjExRjFCN0M1QTNDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwOgYIKwYBBQUHAQcBAf8EKzApMCcEAgABMCEDAwAptzAMAwQExApwAwQBxAp0
MAwDBADEC30DBADEC4YwDQYJKoZIhvcNAQELBQADggEBAL3o87S0cp3iyctxoOWC
dWn5q426MUxBbrI+DzmQazttNLa7Z18sEoBCzEZwI7T6btU5Kc01IuLd45XlwVDz
GzJs10fHnBs+Eorn0VsAa9ka9SsY3VJc0BkfjBKO74LU0zwmXZleihqLMhAPqh7r
FDoUyUFHH8NwhuKPQ1AqXwgInQXPyPOon+VeCCKNWZg3AUgGlOMPGUmTFp/u7osE
srYD9u81IrC0xPTMUKZAbhtT4s3tdiKPN9wCxregrdLRczYP+rpxEBtDu87ZGS+M
4SOxUAD1l2Rv4qhBfKXYcC4n4SFC6pzuvlZcAZx1wP84Ab4M8VIzaNuxFqr9qIyZ
ui4=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:28:25 2026 by rpki-client