Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/027A0FEE164A11F18DEF4584DAE4EC9C.roa
File: 027A0FEE164A11F18DEF4584DAE4EC9C.roa (raw, json)
Hash identifier: oNfz8hrXiu2H4vhtRLdtpUGxK19ejxmkdElx+cnN8L8=
Subject key identifier: 8D:5A:A6:7D:1D:FD:EA:6E:82:35:D7:32:6D:9D:03:C6:D5:79:79:16
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04C2
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/027A0FEE164A11F18DEF4584DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:10:55 +0000
ROA not before: Mon 02 Mar 2026 15:10:51 +0000
ROA not after: Sat 02 Mar 2030 15:10:51 +0000
asID: 33763
IP address blocks: 160.242.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:10:51 2026 GMT
Not After : Mar 2 15:10:51 2030 GMT
Subject: CN=69a5a87f-a5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:27:4f:26:02:7d:ce:4b:05:69:fa:84:1f:
49:75:09:bb:e0:af:a5:04:72:6f:f6:11:80:42:12:
4d:80:7c:9c:01:cb:00:9b:27:1e:0b:17:10:60:63:
cf:61:11:42:d4:3f:ad:18:43:b1:67:e1:bb:b5:dc:
96:0b:91:8f:b0:dc:d8:b2:2f:ad:48:f0:99:b0:aa:
62:af:00:3e:cc:e2:e9:6b:74:b8:37:e3:57:23:ce:
2f:d7:4f:21:51:6f:05:26:85:b6:65:8c:10:86:72:
41:7a:7d:04:ac:c3:46:5b:c2:db:19:7d:d8:50:59:
83:06:d7:3d:76:6a:5a:9c:89:13:0f:ae:ea:f5:ba:
7e:04:10:aa:10:e0:2e:71:6b:b4:f8:60:5a:45:39:
5e:89:0b:49:9a:35:a6:81:d4:4a:69:f0:b1:7d:99:
7a:de:43:f2:47:cd:02:70:96:9c:00:e5:f5:6c:e6:
78:5b:3d:df:3e:8d:a8:df:c9:93:0d:4a:59:54:46:
51:ed:42:bb:76:8e:8c:67:76:48:ca:98:47:a0:a4:
15:50:e3:9e:f8:db:f1:45:12:85:ff:62:32:8b:94:
02:48:b2:7e:c2:42:42:20:e7:3b:79:2e:c6:9f:8f:
2b:ea:d9:60:5f:99:bc:44:05:d7:f8:a8:dc:57:08:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5A:A6:7D:1D:FD:EA:6E:82:35:D7:32:6D:9D:03:C6:D5:79:79:16
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/027A0FEE164A11F18DEF4584DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a5:5b:d7:4e:12:ab:75:12:78:82:e1:99:0e:a0:9b:a1:50:
22:b9:91:8e:ab:56:bc:7d:6c:f3:95:b6:ac:f2:5a:27:ba:c9:
7a:69:35:61:9d:c3:a3:67:f4:97:b7:b9:b0:46:24:67:a8:aa:
80:22:18:bb:66:63:54:3e:54:f2:1b:d9:f2:05:dd:4a:6e:3f:
f2:e7:fc:23:34:f3:69:39:cc:4c:bc:38:1e:3e:a6:f3:4c:ee:
a5:a4:c2:89:ea:bd:fe:04:22:98:a3:8b:b1:e4:de:84:fb:a9:
7a:4d:8a:ad:dc:c0:db:01:d8:3b:dd:f2:ef:96:ad:cf:7b:5c:
4a:29:23:8d:d7:23:dc:3a:e3:33:67:67:7c:ba:3c:40:34:0b:
41:01:b4:e0:38:00:4b:46:36:76:21:4a:4a:50:42:ed:72:9f:
dc:7f:78:11:98:d8:ef:7c:76:4a:2b:7f:32:ee:d4:c3:58:7f:
05:62:1c:1b:a5:0b:ae:55:e2:71:af:94:8c:69:1a:3b:56:b4:
b6:26:02:07:8d:3e:bc:70:ec:93:bd:34:9e:4e:79:c7:dd:13:
3e:a3:9a:18:15:da:af:0b:18:60:87:d1:6e:cf:57:34:4f:67:
5a:c9:b3:04:91:2a:f3:55:fa:e7:24:3c:9d:5e:5a:af:9d:1e:
de:23:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:23 2026 by rpki-client