Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/B116646C2D1011F182D210C9DAE4EC9C.roa
File: B116646C2D1011F182D210C9DAE4EC9C.roa (raw, json)
Hash identifier: Ov51lJNCy4uqDkQo8rHB8kq0FYQa1S1y8nu5i0VfTfk=
Subject key identifier: F0:71:59:A9:F2:6B:C0:6A:68:18:FB:C3:01:45:4B:7A:E3:9D:CF:C0
Certificate issuer: /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial: 0288
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Authority info access: rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/B116646C2D1011F182D210C9DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 14:48:35 +0000
ROA not before: Tue 31 Mar 2026 14:48:27 +0000
ROA not after: Sun 30 Mar 2036 14:48:27 +0000
asID: 37153
IP address blocks: 156.38.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Validity
Not Before: Mar 31 14:48:27 2026 GMT
Not After : Mar 30 14:48:27 2036 GMT
Subject: CN=69cbdec2-b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:71:0e:97:e0:9e:76:e0:33:64:ee:5b:bb:
32:23:c0:37:40:bc:8c:92:2e:73:78:16:19:a3:32:
4c:80:18:6e:ff:c3:de:00:58:da:1e:b0:23:17:ef:
9c:15:6c:35:8c:41:1a:8c:85:5f:28:48:57:1c:2e:
52:14:91:35:6c:eb:3f:37:f8:77:29:6d:8d:68:a5:
e0:8b:98:2a:cb:fe:ba:f8:ae:af:07:16:13:d6:8a:
bb:33:72:60:a0:b8:18:b5:8f:b1:fe:54:d0:0f:f3:
4f:5c:37:6d:87:e1:3e:0a:fb:2f:ac:8a:b0:5f:c4:
88:f2:4f:0d:d1:65:07:81:e4:d7:0b:fc:3c:61:20:
d7:82:3a:9b:03:5b:da:e8:37:9e:7d:10:5e:56:cd:
52:09:ae:31:b5:83:1f:1d:91:c4:fe:72:a7:72:3f:
e2:ce:89:35:75:dd:4e:23:76:73:ff:e7:7b:9d:c3:
da:ec:fc:a0:be:61:bd:6d:13:82:b2:5e:f8:dd:ac:
63:de:37:98:11:39:a3:98:e5:fb:c9:a6:d1:df:15:
7e:ce:e0:f1:8d:a5:d6:68:1e:42:68:49:8d:51:a0:
aa:cc:49:93:77:69:cf:f0:c9:41:59:20:ed:f5:4e:
27:64:5a:88:75:fd:b5:ee:f9:ee:25:e3:af:73:20:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:59:A9:F2:6B:C0:6A:68:18:FB:C3:01:45:4B:7A:E3:9D:CF:C0
X509v3 Authority Key Identifier:
keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/B116646C2D1011F182D210C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.128.0/17
Signature Algorithm: sha256WithRSAEncryption
85:70:23:b2:68:b7:54:ec:28:56:53:86:2c:6a:3b:45:f9:98:
06:2d:a4:8f:2a:5b:b2:aa:cd:88:90:98:6b:73:4b:e0:6a:a4:
d8:3a:d7:b2:c3:6e:e8:1b:d5:a1:b5:bb:98:8b:c0:0a:9e:d2:
43:cb:53:7a:f1:8f:34:13:a2:dd:f7:5a:87:4a:d2:04:bb:02:
b5:72:26:71:4e:17:c1:af:6c:2f:45:dc:ea:5f:89:f6:0d:85:
4d:54:5e:5b:99:36:b6:bd:f2:8d:c6:b8:2b:05:78:0d:39:9a:
23:70:ad:6f:af:0f:59:39:bf:57:2b:22:7f:b6:3e:95:ef:6a:
e9:bd:04:72:98:a5:3a:e1:d7:08:d9:5b:54:9d:e2:d8:d7:21:
c7:96:bd:3f:08:20:81:4c:70:22:7a:d1:02:b0:85:0b:2d:86:
4d:39:16:39:f4:9c:3c:97:52:11:e5:b6:23:c1:34:ab:24:f6:
33:c3:2c:4e:47:ce:e5:9e:7a:4c:5c:1e:45:f4:e5:ea:1f:f9:
fa:e8:0a:6a:7a:76:62:77:ab:ae:1f:cd:78:05:d5:da:62:75:
10:c2:c9:b3:d4:ed:1b:42:1a:2a:28:fb:5c:89:ce:40:57:cf:
fe:3f:33:78:f9:3d:2a:3b:12:bb:f5:e2:51:f1:83:0b:b4:01:
25:97:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:57 2026 by rpki-client