Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/846EEB8A2DA311F191823FA9DAE4EC9C.roa
File: 846EEB8A2DA311F191823FA9DAE4EC9C.roa (raw, json)
Hash identifier: cabYmfkn2blVlA5gD0tdwhmgI41cFwtIr5rkIE3cCV8=
Subject key identifier: AE:C5:C7:FE:94:1D:90:B8:29:B6:A0:FD:FC:D4:1C:21:1D:04:7F:39
Certificate issuer: /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial: 040C
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access: rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/846EEB8A2DA311F191823FA9DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 08:19:35 +0000
ROA not before: Wed 01 Apr 2026 08:19:31 +0000
ROA not after: Mon 01 Apr 2030 08:19:31 +0000
asID: 16800
IP address blocks: 163.199.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAP, serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Validity
Not Before: Apr 1 08:19:31 2026 GMT
Not After : Apr 1 08:19:31 2030 GMT
Subject: CN=69ccd517-ca8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:e3:d8:38:3b:b0:d5:f5:e8:ec:3b:1b:f0:
37:a1:45:10:f7:57:b8:f9:dd:34:5c:eb:3e:ba:2d:
7d:63:b0:e0:e3:d0:67:b4:da:3d:92:16:4f:ea:04:
17:e5:e9:2c:2f:a2:47:56:3c:ee:1c:7d:3f:b4:da:
6d:37:3d:e5:f5:2d:b5:4c:33:77:c5:1e:3a:44:15:
d5:b6:0d:2f:83:a3:1b:63:c7:00:6d:01:8b:57:01:
bc:f4:8a:5e:e3:5c:62:15:f1:2b:fe:9f:55:fa:9d:
31:48:06:96:77:1e:d1:c5:e7:11:dd:af:43:97:13:
9f:11:15:cd:55:1c:06:03:2a:8c:21:17:5d:52:5c:
c0:6c:71:bf:ee:4d:3f:58:93:56:2c:f5:ad:8d:b6:
7b:28:ca:7e:07:d4:3e:89:0e:ac:f6:b1:fb:5d:ba:
48:3c:cf:4e:da:9b:80:90:0a:e4:56:25:18:d3:18:
c8:51:8d:1a:b0:d8:54:ed:a9:cd:67:e4:5c:42:89:
1b:68:2e:37:49:4c:61:35:f1:86:7f:5e:df:59:9e:
57:68:a9:28:6e:fd:af:a5:7e:74:da:32:09:5b:41:
54:59:bd:ba:28:0b:ec:46:25:d3:2c:6e:54:c3:1d:
87:63:95:bd:c6:f8:d9:cb:51:d2:02:b9:d3:39:c6:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:C7:FE:94:1D:90:B8:29:B6:A0:FD:FC:D4:1C:21:1D:04:7F:39
X509v3 Authority Key Identifier:
keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/846EEB8A2DA311F191823FA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.199.253.0/24
Signature Algorithm: sha256WithRSAEncryption
93:56:d3:86:27:13:38:07:a1:f8:8d:4e:94:d2:ad:0f:1f:9f:
e3:07:c7:40:0f:94:a9:6b:e3:54:d8:cf:f1:39:1a:97:a4:6b:
4a:e0:83:9f:22:56:5f:13:d6:25:90:8f:ca:85:91:cc:88:3a:
50:76:06:fe:31:99:92:5b:8b:ce:e8:33:2a:38:f6:8b:9d:ac:
af:af:01:8a:a9:e9:19:91:29:10:dc:95:98:27:37:62:2b:19:
4a:e8:d2:32:4c:cb:c1:b9:30:29:50:63:1d:a7:fc:b8:ef:4e:
ce:5a:f4:ab:95:a3:7c:8e:d6:79:00:0f:59:92:d5:49:99:64:
65:77:eb:a7:35:c5:16:f8:33:94:bd:bb:5f:12:89:01:12:0e:
5c:bf:15:30:5d:1e:c3:6e:60:94:cb:5d:0e:84:62:80:57:99:
3a:02:dc:7f:67:87:c0:0c:a9:e1:5e:f9:86:4c:7c:39:ab:95:
c2:71:9f:fc:52:39:53:50:a1:2d:5b:7d:66:84:a1:e3:ee:c9:
87:00:dc:5d:ae:57:89:6c:3c:d3:31:77:c3:77:d3:09:cb:c1:
41:28:cf:64:69:8a:d0:ef:33:74:c2:ac:dc:aa:5d:ef:7b:4c:
76:f8:61:9f:fd:2f:ed:ce:be:33:8d:e3:67:6f:f4:55:aa:49:
00:76:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:17:18 2026 by rpki-client