Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/02FCDA2A8A9211F1A51C89EBCE1D38B0.roa
File: 02FCDA2A8A9211F1A51C89EBCE1D38B0.roa (raw, json)
Hash identifier: kaE23hHrEaGcX+JU9kKbhbl9cGhGBvp+953IjP3cM7s=
Subject key identifier: A5:68:79:E1:5F:85:FA:DC:C8:85:B1:D0:59:B1:A3:72:8D:A9:AB:47
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 0574
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/02FCDA2A8A9211F1A51C89EBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:38:35 +0000
ROA not before: Tue 28 Jul 2026 14:38:31 +0000
ROA not after: Fri 01 Mar 2030 14:38:31 +0000
asID: 33763
IP address blocks: 160.242.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Jul 28 14:38:31 2026 GMT
Not After : Mar 1 14:38:31 2030 GMT
Subject: CN=6a68beeb-c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:a8:be:d1:68:d6:85:69:23:92:73:b4:83:
12:9b:3e:0f:eb:5f:05:d5:2a:31:93:df:b0:99:de:
65:fd:df:68:da:71:7c:d7:22:32:07:68:4c:e3:7e:
bd:45:79:6d:cc:4b:37:d8:30:ec:53:48:c5:20:e4:
bb:3a:d2:70:67:af:fb:59:73:c5:f9:a5:9b:05:8b:
e5:5f:cd:51:f5:8b:cf:b5:16:a8:e2:cc:aa:36:4a:
43:63:a2:99:d6:66:86:fe:f4:4d:50:b9:8c:cb:fb:
01:83:0c:06:88:ba:a8:3b:f3:db:46:5f:42:6b:11:
fb:03:d1:1c:25:2d:3c:4b:9d:9e:60:b3:3c:13:6b:
6d:0f:5a:f4:f1:51:ad:61:57:f1:ec:17:e1:5c:40:
7c:d6:4f:e3:3f:fe:fa:d2:47:1e:e0:3b:99:85:44:
e4:91:20:64:16:8e:da:40:50:ad:41:5b:cc:4b:01:
6d:65:57:96:83:70:a0:36:f9:db:d1:ee:d5:79:15:
6c:f6:82:1f:36:d5:19:f7:74:93:de:fb:4b:d3:aa:
03:b0:e5:41:dd:55:a4:0d:cb:c2:5f:14:80:48:16:
a7:12:7d:6c:e8:16:dc:31:8b:4f:32:32:82:98:d6:
10:4a:3b:5d:43:60:88:32:05:89:80:bb:ae:0f:c2:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:79:E1:5F:85:FA:DC:C8:85:B1:D0:59:B1:A3:72:8D:A9:AB:47
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/02FCDA2A8A9211F1A51C89EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:b7:92:f4:3e:aa:56:cd:84:b4:0a:5b:0e:5e:71:45:0e:c5:
b3:6f:2f:cb:41:a7:83:6e:13:24:90:26:8c:4e:f0:9a:c2:0e:
30:e1:55:18:b0:eb:c3:d5:ff:12:5d:1f:93:40:1b:ac:e2:a6:
f7:9b:ea:85:8b:ff:2e:7e:eb:24:7d:0e:6b:b6:e4:bd:a1:a8:
a5:b8:19:2b:7a:7f:a9:98:14:a3:77:ab:8f:99:87:c0:ad:05:
3e:8a:c9:78:7c:c5:f7:d1:db:e5:76:55:f5:35:d6:74:b0:76:
90:0a:89:ab:2d:2e:fe:c8:1d:5d:16:e2:f4:17:f9:3f:7b:56:
c8:2d:84:b9:e8:b3:7d:fd:da:6c:d9:e6:bd:27:fe:fa:a6:64:
3b:ae:37:9e:51:23:5a:d7:5f:d7:7d:dd:e1:43:d9:05:1b:c7:
a6:57:2e:fe:25:19:7e:ff:2e:50:90:96:b1:ff:0a:6b:48:14:
06:b2:1e:1f:8d:09:f6:f8:6d:c6:79:72:ed:9a:56:5b:5e:1d:
f4:5d:f6:cd:ac:9a:9e:9b:14:5c:02:35:51:d2:13:9c:f1:ea:
a1:2f:0f:5d:0c:b1:98:6e:f2:2b:50:d1:ba:b7:b6:7f:ad:13:
d1:c5:c6:07:1c:20:88:3e:66:79:55:76:51:0a:f6:0c:2c:49:
49:e0:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:07 2026 by rpki-client