Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/0B19DF248A9111F1A2F431E7CE1D38B0.roa
File: 0B19DF248A9111F1A2F431E7CE1D38B0.roa (raw, json)
Hash identifier: vhoxmYwsSQulDdm74mm4Hcep+k5eg56/9gWsR/B37S4=
Subject key identifier: 8E:7A:01:95:7B:96:C3:4A:F3:06:FF:99:A0:0D:3D:DE:B6:4D:72:C3
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 0570
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/0B19DF248A9111F1A2F431E7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:31:39 +0000
ROA not before: Tue 28 Jul 2026 14:31:35 +0000
ROA not after: Fri 01 Mar 2030 14:31:35 +0000
asID: 33763
IP address blocks: 160.242.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Jul 28 14:31:35 2026 GMT
Not After : Mar 1 14:31:35 2030 GMT
Subject: CN=6a68bd4b-1784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:fa:69:3f:d2:5a:f3:c7:e4:66:83:fd:6e:
27:61:95:a5:fb:0a:73:29:4d:74:c9:b4:90:9d:33:
4a:06:b2:5a:0b:39:5e:d0:9a:51:73:09:fa:3d:a3:
f9:b2:8a:36:e3:3c:8a:3d:0f:1f:0e:db:df:31:1f:
49:67:53:03:8e:1d:d0:55:3e:c1:5d:b6:ac:09:73:
d8:26:3d:db:96:54:f1:c2:59:f0:3a:c9:1b:61:12:
a2:dd:af:2e:43:ca:e7:31:35:56:ac:fb:2e:ed:73:
0f:f2:75:a4:a6:37:bb:34:ec:b4:31:56:7f:5a:e9:
5b:34:7d:85:1a:33:f1:97:c0:4c:cb:41:49:dd:48:
f4:66:ee:f7:87:11:23:98:b9:84:19:dd:64:5b:eb:
d1:46:ce:7c:18:20:91:2d:c7:60:e7:14:e1:7a:da:
60:37:bf:cf:84:69:2d:a7:91:fb:f3:23:b4:1e:b2:
a8:93:07:32:49:c9:e5:4e:c5:52:74:0d:aa:27:c8:
25:62:61:30:84:c9:7e:b0:90:f7:3e:c6:67:b0:4b:
e8:79:9e:0f:05:2c:b6:29:1f:8d:f1:ed:69:76:e1:
5b:9c:6b:79:c0:6e:92:ff:2f:02:a7:65:2b:ec:16:
9f:da:c2:df:2d:cf:36:f4:e6:32:84:9a:47:ea:fa:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:01:95:7B:96:C3:4A:F3:06:FF:99:A0:0D:3D:DE:B6:4D:72:C3
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/0B19DF248A9111F1A2F431E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.24.0/22
Signature Algorithm: sha256WithRSAEncryption
25:8a:6a:02:9a:9c:be:e8:7c:26:46:63:f0:c2:30:05:9a:2b:
00:52:26:72:b6:0c:7e:89:f3:4d:db:aa:9c:8b:d6:99:0a:e1:
e2:1d:5f:bc:fb:e8:39:33:b2:7b:b5:59:1b:de:8a:0e:df:2a:
8d:e7:90:63:b1:74:29:d6:e0:95:b3:22:b2:bd:9a:df:14:db:
92:66:62:b6:da:de:f3:16:54:7b:09:99:51:a9:91:fc:43:3c:
4a:b1:4d:66:ac:4f:dd:54:9f:f0:7c:d7:bf:21:84:b1:db:f7:
b9:f3:54:61:18:24:ee:03:44:dc:c4:ba:bc:e1:f0:28:bf:2f:
30:c3:f6:b6:13:e3:d7:cb:9c:71:bc:c4:09:27:0b:e1:60:7b:
47:1d:e1:90:b8:87:89:ee:23:82:1a:99:3e:c1:6f:cb:f1:64:
fc:0b:af:83:7d:23:bd:87:9e:1f:a2:26:d7:c6:cc:05:36:de:
3c:4e:63:62:87:fa:7a:cf:ec:09:b2:02:06:10:14:1a:fc:3e:
10:5c:65:57:be:35:bd:41:8c:dd:52:ce:6f:69:de:93:71:37:
51:c1:53:dd:06:f4:38:ed:5b:00:38:eb:b5:ba:0e:a0:4e:9d:
69:73:96:63:d1:13:c0:b6:84:cb:9e:66:3d:be:d9:87:cf:18:
71:47:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:59 2026 by rpki-client