Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/01F4B7DC164911F1AA82037CDAE4EC9C.roa
File: 01F4B7DC164911F1AA82037CDAE4EC9C.roa (raw, json)
Hash identifier: SJBq2f5PEAQ7jMq2RDwqV4pd3LXt7LixkprBqHneLz0=
Subject key identifier: 72:A6:A0:90:3A:27:FA:B5:F3:57:03:99:D8:10:DD:A8:32:65:92:1F
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04BC
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/01F4B7DC164911F1AA82037CDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:03:45 +0000
ROA not before: Mon 02 Mar 2026 15:03:41 +0000
ROA not after: Sat 02 Mar 2030 15:03:41 +0000
asID: 33763
IP address blocks: 160.242.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:03:41 2026 GMT
Not After : Mar 2 15:03:41 2030 GMT
Subject: CN=69a5a6d1-6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:15:88:6c:0d:3b:59:84:83:39:68:2a:64:
5c:06:98:25:f0:b5:ed:23:e3:84:2f:3d:84:f5:26:
68:16:35:81:36:39:f5:f5:c7:5f:4d:84:a4:e0:a9:
50:4d:ad:a7:9a:f6:b6:75:fd:c7:15:c1:8a:b3:2c:
07:60:83:70:32:58:72:f9:bf:b5:36:30:49:66:1a:
ec:33:bf:f1:cf:cc:3c:09:7e:47:bb:c6:e4:36:47:
e3:7d:6a:d0:34:f0:91:0a:aa:2f:dc:2b:25:e1:e3:
a3:cb:e1:b5:15:7f:f3:4a:fe:ef:a1:91:ea:7c:ea:
88:b5:26:c5:0c:52:36:8e:aa:40:96:18:d3:ff:b2:
98:d5:29:c6:08:91:ba:08:87:5b:2b:07:b7:db:e8:
5f:47:1f:42:3f:da:77:21:02:44:a6:5a:d7:da:75:
1d:f5:af:ce:23:11:36:f9:38:a8:d9:9e:37:bb:39:
6e:e1:c5:20:59:2e:0c:9d:04:b2:42:15:8b:49:d3:
fc:49:50:c7:b4:09:4f:c0:56:36:71:64:7b:a2:ce:
46:7f:96:82:6c:c5:ee:bf:04:c5:f1:f8:6a:46:69:
ca:e3:13:1c:7a:78:d1:56:71:cf:d1:59:57:d3:1f:
f4:87:f8:f2:5e:d1:83:d1:38:da:39:68:5b:bb:96:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:A0:90:3A:27:FA:B5:F3:57:03:99:D8:10:DD:A8:32:65:92:1F
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/01F4B7DC164911F1AA82037CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:e3:25:d8:3b:36:f8:ac:3a:5e:ae:6f:eb:0e:43:c9:4d:8b:
d1:93:8e:33:65:43:0e:71:53:81:09:b6:c3:12:a1:69:66:31:
14:27:90:ab:1f:5f:61:9e:b9:80:af:19:e8:42:ca:ce:17:28:
e7:07:64:7a:4c:21:52:1f:77:d3:80:39:c6:c2:f7:83:6d:57:
2a:51:3d:c4:e9:02:51:a2:24:ba:3f:8e:d4:ce:73:df:46:81:
d0:5d:57:88:56:76:02:2a:39:51:35:4f:cf:b3:c5:48:7f:77:
a9:ea:a8:f9:97:0c:fe:d0:d0:93:64:59:1c:4f:35:0d:d9:ac:
d6:fe:24:c2:7b:a3:9f:d6:0b:b4:ef:18:74:4e:c8:72:22:e1:
30:dc:6b:e4:f7:17:5a:8c:55:60:af:2b:f6:c7:3f:61:84:dc:
d4:5d:0f:22:b5:e7:d1:72:f9:10:2d:09:43:ac:42:f9:5d:c7:
27:d8:fb:da:08:fa:b5:d5:ed:44:63:cc:76:97:e6:d5:06:52:
ed:07:0b:fc:e8:10:d3:8c:d1:cc:32:7e:87:f5:ef:51:ad:e2:
47:94:ee:07:48:64:b5:f4:c6:59:a9:14:0f:19:4d:37:51:28:
7e:03:61:16:43:44:3f:91:36:fe:54:ae:f6:ff:1d:de:ae:ea:
1d:c8:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:23 2026 by rpki-client