Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/DCEF064806A011F1B36287C7DAE4EC9C.roa
File: DCEF064806A011F1B36287C7DAE4EC9C.roa (raw, json)
Hash identifier: ajagmqaYlHIhmUkcnu2Tjo9dtK+0faaL3lJJd/HPb1o=
Subject key identifier: 16:9B:C5:C7:E4:2E:62:69:01:12:07:56:D9:DA:22:4F:93:68:12:E1
Certificate issuer: /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial: 0441
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Authority info access: rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/DCEF064806A011F1B36287C7DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 16:52:20 +0000
ROA not before: Tue 10 Feb 2026 16:52:14 +0000
ROA not after: Thu 10 Feb 2028 16:52:14 +0000
asID: 327906
IP address blocks: 169.255.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089 (0x441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36145DBAR, serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Validity
Not Before: Feb 10 16:52:14 2026 GMT
Not After : Feb 10 16:52:14 2028 GMT
Subject: CN=698b6244-a07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:9b:bd:8e:71:6b:f0:d8:ae:58:9b:69:87:
56:82:0e:f7:42:af:0c:d1:22:b2:91:ad:c5:0e:7c:
b7:98:6f:d7:35:05:17:55:a4:ff:84:d3:f8:49:5a:
90:a9:cc:18:63:cf:e2:1b:0c:ea:42:4d:3f:88:f3:
de:cb:71:a0:ac:cc:92:62:86:e5:6f:91:79:fa:35:
c4:7d:87:f1:43:5b:fa:dd:dd:68:39:11:04:c8:1d:
d7:90:d1:5e:c1:c4:2e:10:59:53:af:a0:c2:5f:74:
be:96:a3:49:78:bb:50:15:29:55:ae:dd:28:27:05:
31:86:dd:90:ea:c6:97:6a:a7:dd:27:13:e4:e3:d8:
be:b2:83:c3:03:51:7e:54:c9:c5:0d:39:ba:9e:0e:
8a:35:6c:81:84:7e:2a:b4:6a:71:a9:6a:8c:49:85:
f7:b3:10:e5:47:f3:29:8d:c5:b3:9d:fc:8a:dd:8a:
3b:75:e1:6c:73:c2:95:0d:78:ae:04:77:f1:97:e5:
6c:8b:1c:9c:2c:17:40:11:96:92:7f:81:39:fd:c4:
97:39:3c:38:c9:7a:01:a1:be:96:97:0f:28:ab:11:
0d:9e:db:6a:f9:bc:75:f5:5a:8c:ab:38:dd:58:89:
51:74:35:73:82:1a:f3:09:0b:e4:f4:d5:e8:15:d5:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:C5:C7:E4:2E:62:69:01:12:07:56:D9:DA:22:4F:93:68:12:E1
X509v3 Authority Key Identifier:
keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/DCEF064806A011F1B36287C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.104.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d5:a5:81:23:62:c4:93:8a:bb:08:42:be:5f:3e:01:d8:d3:
ba:a0:7f:c7:9a:8f:b0:a6:ff:b5:0f:81:33:6d:37:24:92:f7:
38:e1:ad:05:be:f5:b3:e4:7e:51:26:4c:32:fc:44:a8:31:86:
39:d2:ad:cc:fb:d4:51:7d:c6:be:bd:c2:88:b6:6e:ee:03:d3:
57:14:42:35:65:6b:03:fd:aa:c6:80:81:32:5e:3b:ab:a4:a2:
87:f4:97:9e:34:fa:65:d2:95:22:a3:f1:be:96:88:4a:18:00:
f4:5b:a3:15:6c:2d:53:e9:d9:95:27:6b:6b:2f:e3:bd:1e:0c:
58:f0:34:69:b2:0c:ba:90:60:f9:80:02:a1:06:48:12:68:ad:
75:2d:5c:7c:73:39:59:70:29:02:c1:43:49:90:cb:7c:bc:8e:
95:98:17:a1:9e:8c:b5:54:3a:3d:d0:79:c5:e0:c9:e6:56:7c:
f1:ff:aa:2f:d5:c3:d2:49:62:8d:c9:bf:97:fb:7a:4a:fd:fd:
a5:c1:81:5c:4c:6b:6d:47:a6:99:c5:fe:d8:50:71:ed:91:ea:
b0:0c:23:80:90:10:84:97:fd:fc:f2:48:ab:06:46:62:24:48:
fb:33:12:2e:08:5b:5b:6d:fe:ed:7c:3d:2a:30:4b:ef:cd:00:
b6:62:3e:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ1REJBUjExMC8GA1UEBRMoQUI1NTFEMTA4NDUwNjA4RUJERjU0MENBMTIxOUIy
Qjg0N0Y2NUVCRDAeFw0yNjAyMTAxNjUyMTRaFw0yODAyMTAxNjUyMTRaMBgxFjAU
BgNVBAMTDTY5OGI2MjQ0LWEwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGRJu9jnFr8NiuWJtph1aCDvdCrwzRIrKRrcUOfLeYb9c1BRdVpP+E0/hJ
WpCpzBhjz+IbDOpCTT+I897LcaCszJJihuVvkXn6NcR9h/FDW/rd3Wg5EQTIHdeQ
0V7BxC4QWVOvoMJfdL6Wo0l4u1AVKVWu3SgnBTGG3ZDqxpdqp90nE+Tj2L6yg8MD
UX5UycUNObqeDoo1bIGEfiq0anGpaoxJhfezEOVH8ymNxbOd/Irdijt14WxzwpUN
eK4Ed/GX5WyLHJwsF0ARlpJ/gTn9xJc5PDjJegGhvpaXDyirEQ2e22r5vHX1Woyr
ON1YiVF0NXOCGvMJC+T01egV1e2DAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUFpvF
x+QuYmkBEgdW2doiT5NoEuEwHwYDVR0jBBgwFoAUq1UdEIRQYI699UDKEhmyuEf2
Xr0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NURCLzdBNjYyMkQ0Q0EyODExRUQ4QzBBRDA5NUYxMjIyNDY4L3ExVWRF
SVJRWUk2OTlVREtFaG15dUVmMlhyMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3ExVWRFSVJRWUk2OTlVREtFaG15dUVmMlhyMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE0NURCLzdBNjYyMkQ0Q0EyODExRUQ4QzBBRDA5NUYxMjIy
NDY4L0RDRUYwNjQ4MDZBMDExRjFCMzYyODdDN0RBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKp/2gwDQYJKoZIhvcNAQELBQAD
ggEBAGjVpYEjYsSTirsIQr5fPgHY07qgf8eaj7Cm/7UPgTNtNySS9zjhrQW+9bPk
flEmTDL8RKgxhjnSrcz71FF9xr69woi2bu4D01cUQjVlawP9qsaAgTJeO6ukoof0
l540+mXSlSKj8b6WiEoYAPRboxVsLVPp2ZUna2sv470eDFjwNGmyDLqQYPmAAqEG
SBJorXUtXHxzOVlwKQLBQ0mQy3y8jpWYF6GejLVUOj3QecXgyeZWfPH/qi/Vw9JJ
Yo3Jv5f7ekr9/aXBgVxMa21HppnF/thQce2R6rAMI4CQEISX/fzySKsGRmIkSPsz
Ei4IW1tt/u18PSowS+/NALZiPlY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:48 2026 by rpki-client