Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/15D6A7D4164811F18DF4F4F5DAE4EC9C.roa
File: 15D6A7D4164811F18DF4F4F5DAE4EC9C.roa (raw, json)
Hash identifier: 14smMykXcFq93duH/vGIC38LPO0s9E/b96sonJX6BGk=
Subject key identifier: 14:F9:6E:B3:2F:BD:A6:49:30:6D:6B:E4:2E:ED:BD:25:3D:19:FD:CF
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04B2
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/15D6A7D4164811F18DF4F4F5DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:57:08 +0000
ROA not before: Mon 02 Mar 2026 14:57:04 +0000
ROA not after: Sat 02 Mar 2030 14:57:04 +0000
asID: 33763
IP address blocks: 160.242.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:57:04 2026 GMT
Not After : Mar 2 14:57:04 2030 GMT
Subject: CN=69a5a544-e34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:e5:99:e9:f8:02:db:ae:7a:5f:c3:6e:0a:
24:d8:d2:1d:ab:75:ec:f5:2b:23:d7:7b:ab:e5:e0:
1f:36:05:63:44:00:37:31:01:3c:b1:bf:44:d8:01:
3c:3b:25:cc:c5:09:0b:4d:83:01:97:fe:d4:36:4b:
04:e7:31:d8:7d:e5:ef:65:dc:54:56:60:cf:17:e2:
3f:25:cd:5c:6d:1f:77:19:f6:0f:f6:ad:28:56:0a:
1c:77:c9:c5:91:c3:8f:ec:59:91:1b:54:04:b4:66:
2d:d4:14:c9:77:6b:70:02:9e:8a:09:2d:b9:40:df:
0c:da:a0:e4:a4:5f:b4:3b:1e:0b:ae:58:6f:54:10:
96:88:2c:76:bf:22:f3:f8:ee:d8:6d:9e:48:29:07:
8c:64:f5:6c:8f:cf:18:86:7f:07:34:a6:42:dd:e1:
f9:0f:3b:31:6b:e9:e0:74:a6:56:ca:6f:30:c0:03:
3d:c8:71:31:f4:70:0f:81:7a:00:8b:f9:dd:df:85:
74:35:d5:90:96:ca:8c:34:d4:47:70:45:08:7f:31:
0d:03:ab:e1:21:f2:c3:04:c1:de:a1:ea:cc:1e:33:
70:a0:ce:dc:f0:d6:41:5d:8e:ca:ab:da:a9:84:a1:
00:74:a8:3d:47:1a:a8:cf:df:ea:39:88:02:2c:2b:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:6E:B3:2F:BD:A6:49:30:6D:6B:E4:2E:ED:BD:25:3D:19:FD:CF
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/15D6A7D4164811F18DF4F4F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e7:ee:f2:8f:a1:b9:83:61:d3:32:eb:1e:f9:d4:a9:28:10:
c6:22:0c:4b:28:7d:68:26:11:5e:51:1e:56:6d:fe:a7:79:cf:
b4:5d:1e:bc:7b:fc:ae:02:d2:2c:8f:1a:ee:86:6c:26:47:e8:
cb:d9:8a:9d:0b:4e:e6:05:63:87:03:5d:d6:43:76:12:35:3f:
7c:86:1c:67:4f:a0:40:6e:60:4c:6f:be:8a:b4:45:2a:76:61:
a5:57:8f:ed:4b:01:9a:1f:9c:92:b0:09:6e:f3:b7:e8:e3:3b:
6a:0d:d6:e3:6b:ff:f4:dc:8c:11:7a:00:f2:4c:14:9f:44:6d:
8b:9d:b7:02:dd:d4:e1:4c:a0:eb:2f:5c:62:94:6b:2a:ef:81:
34:5e:9a:2e:e1:2a:a2:51:b3:f6:d0:93:80:77:03:e1:19:7a:
7e:a5:4a:e2:f6:a3:16:c8:9c:14:3d:73:5b:33:b6:46:cd:e1:
5b:5d:e8:18:7c:18:ef:d9:e6:bb:a2:a5:b5:8a:c1:3a:09:28:
c6:16:47:5e:dd:9a:3b:4d:b6:e9:fa:40:3b:31:73:c7:e0:a3:
a1:a5:fb:35:05:5a:9d:3c:7b:2c:94:39:93:df:f7:0c:b6:bc:
53:f0:68:06:02:6f:a2:1d:04:58:d4:9f:2b:e3:2d:4d:c2:8b:
df:a0:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:23 2026 by rpki-client