Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/1F1E8DAE2D1111F19C746AC9DAE4EC9C.roa
File: 1F1E8DAE2D1111F19C746AC9DAE4EC9C.roa (raw, json)
Hash identifier: verwwM1qSDlHt1eWteeWg5Wyu5dh0r1sixVOjp6dIDQ=
Subject key identifier: C0:AC:67:75:01:65:F9:B0:15:F1:55:A2:BA:84:98:1F:54:B6:3D:B7
Certificate issuer: /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial: 028A
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Authority info access: rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/1F1E8DAE2D1111F19C746AC9DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 14:51:39 +0000
ROA not before: Tue 31 Mar 2026 14:51:34 +0000
ROA not after: Sun 30 Mar 2036 14:51:34 +0000
asID: 37153
IP address blocks: 129.232.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Validity
Not Before: Mar 31 14:51:34 2026 GMT
Not After : Mar 30 14:51:34 2036 GMT
Subject: CN=69cbdf7b-a40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:ed:16:f6:c7:81:4b:33:e5:75:ad:7b:94:
89:0a:b1:56:d5:60:74:d2:59:89:0b:84:4b:c0:47:
e8:64:a8:fe:03:bc:7a:cc:bb:4a:f6:cb:00:57:ef:
22:a1:61:7c:7e:1f:ca:2b:a0:62:e7:b9:38:42:7b:
51:33:f1:85:c7:b4:b3:2b:0c:a0:ff:b2:4e:ff:45:
20:92:55:48:e6:e5:e6:65:c5:eb:9f:7f:34:fb:df:
f5:81:1e:02:94:08:d5:a0:83:a5:93:30:d6:5d:68:
66:9b:20:ad:0b:a9:bc:dc:44:a8:e1:c1:28:a5:60:
b5:df:10:ab:d8:94:d9:1d:ce:53:bd:3f:b7:18:b5:
59:2c:ab:6e:71:f7:35:de:4a:f2:5f:19:73:df:57:
a2:6f:87:a3:46:2e:32:0c:e0:52:87:34:81:9d:2f:
56:3c:52:0f:a4:c2:2d:ec:ef:c2:64:be:5e:fc:0c:
6b:21:fa:e3:b9:24:07:f7:48:f3:7c:c7:01:70:7d:
8c:32:73:67:e9:87:ca:e8:7b:f5:8c:c6:fc:ef:ef:
f8:13:05:21:8d:35:24:79:40:74:fd:33:2e:5b:48:
71:e6:83:05:fc:b2:32:eb:12:00:40:29:45:c6:57:
46:8e:ea:58:7e:2a:c3:3d:96:d8:c0:05:98:e0:6e:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AC:67:75:01:65:F9:B0:15:F1:55:A2:BA:84:98:1F:54:B6:3D:B7
X509v3 Authority Key Identifier:
keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/1F1E8DAE2D1111F19C746AC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.232.128.0/17
Signature Algorithm: sha256WithRSAEncryption
56:7d:02:1d:b2:e4:a9:41:e0:ab:37:79:5f:4e:f2:fc:fe:d0:
91:7c:e4:82:a1:98:21:7b:2d:8b:4d:59:65:e9:1f:f4:4b:d9:
3a:fe:15:bb:25:bb:ef:b8:be:3e:a1:99:a6:a5:07:ac:b5:f2:
77:2d:6a:97:92:ac:ed:67:77:ef:7a:66:e3:24:f5:68:85:54:
7a:7a:d4:38:12:31:aa:67:a4:71:27:fe:ae:7e:d2:da:dc:72:
ae:9f:ad:2b:1c:fe:ee:fa:11:49:17:75:f5:00:73:a0:5f:bd:
10:36:e1:43:b1:d9:59:d4:54:eb:b1:f0:f2:28:30:ba:58:08:
cc:f9:bf:11:74:1d:76:ec:8a:34:0a:7f:9f:db:b2:db:88:6a:
e2:50:c6:b9:d2:7f:78:e8:a7:09:29:89:04:9f:09:fe:b8:44:
83:a1:b9:1a:a4:61:18:78:78:f2:6b:7b:d5:4b:fb:d8:c8:8e:
9b:62:55:65:39:90:2f:73:0c:21:a9:72:56:8f:da:84:69:20:
67:32:7c:d2:4b:75:49:e0:df:dc:5b:c5:f5:19:ed:e8:86:46:
08:14:60:f2:9d:9b:79:3e:95:90:ce:2f:c6:da:a4:fa:fc:13:
c8:80:ee:79:5d:62:e3:3f:47:6d:e1:81:35:f3:6a:1d:01:e8:
bf:20:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:38 2026 by rpki-client