Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/1E82E1C0164A11F18D565A84DAE4EC9C.roa
File: 1E82E1C0164A11F18D565A84DAE4EC9C.roa (raw, json)
Hash identifier: xY1AdH6Ajb6s+F6mWaDtkkDVRv2Qu+u59Y5ltn/zBec=
Subject key identifier: C2:F6:73:11:48:38:D9:8C:BA:28:7E:FC:6B:4B:EB:83:65:46:BF:C0
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04C4
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/1E82E1C0164A11F18D565A84DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:11:42 +0000
ROA not before: Mon 02 Mar 2026 15:11:38 +0000
ROA not after: Sat 02 Mar 2030 15:11:38 +0000
asID: 33763
IP address blocks: 160.242.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:11:38 2026 GMT
Not After : Mar 2 15:11:38 2030 GMT
Subject: CN=69a5a8ae-8f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:31:ef:01:73:18:81:c0:1c:af:f8:a7:8d:
27:a7:c8:d7:59:8f:e1:25:01:81:78:a5:63:c6:3b:
42:af:03:82:e7:eb:ec:5c:33:c5:42:70:bb:e7:1f:
3d:8c:23:8c:90:de:57:8b:fb:86:10:3d:c0:bf:8b:
da:62:15:e6:af:44:e2:c7:59:87:21:de:31:1a:27:
56:54:2a:a5:e2:aa:e6:5b:8c:b6:a5:10:ad:ff:ec:
64:29:42:42:b3:0f:e2:67:74:f4:f9:9b:33:9b:17:
94:65:ba:37:f3:25:8b:0e:72:c6:6c:de:2a:1b:6b:
d7:8f:4f:f3:12:24:34:08:1e:ce:07:38:7f:4e:55:
83:98:16:1c:09:94:5a:da:73:e5:ce:05:d8:28:a8:
92:c9:3b:b1:d4:43:f2:1f:e9:40:7e:eb:19:a1:0d:
01:01:88:a7:1e:83:c2:10:f5:7d:59:0b:e8:f5:c8:
7a:53:73:cd:0a:6d:32:bd:5e:bd:ee:d3:4b:65:c5:
7f:33:a7:68:23:33:20:09:49:c8:26:e6:6d:51:93:
8c:99:59:68:66:19:41:e1:a9:62:85:88:34:5f:55:
3b:84:04:d2:0b:e4:e1:9c:94:25:5b:df:54:2e:c5:
56:17:a4:95:9d:6c:1b:4a:80:86:eb:f6:27:3a:6c:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:73:11:48:38:D9:8C:BA:28:7E:FC:6B:4B:EB:83:65:46:BF:C0
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/1E82E1C0164A11F18D565A84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.71.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2d:72:73:c8:9a:95:45:98:8a:df:29:17:8a:33:e9:ec:1a:
bd:76:27:35:f1:4d:27:20:ea:a8:c2:18:78:36:39:70:7c:ee:
db:88:f9:ae:04:2c:6b:43:da:f8:82:69:7b:60:27:82:67:65:
84:79:62:ae:60:ff:66:cc:f4:c2:7d:0c:84:e4:f1:be:98:32:
68:fa:c0:57:09:7a:5f:6a:50:bd:b9:d4:be:3d:f9:80:7b:cd:
18:f0:ff:fa:13:57:ec:1b:db:50:43:68:64:97:f4:98:76:57:
61:22:1b:f6:a9:54:b2:e0:5b:59:ec:40:c9:a0:2b:b3:5d:e2:
e2:82:5c:09:2f:51:c0:ae:cc:df:d8:9e:00:78:91:50:2f:1f:
1c:76:f8:56:3b:c6:65:49:f5:72:80:df:f4:df:fd:10:da:64:
37:f6:de:66:22:92:57:19:2b:ba:d9:a9:4e:2b:46:a4:ae:32:
2c:a7:5a:76:52:20:d4:49:dd:81:e0:5e:c6:a5:06:0f:26:60:
e0:77:43:6d:4b:c8:4c:4d:ae:0c:d6:b4:ee:51:2a:d2:af:4c:
13:1c:2e:af:f8:dd:14:d0:8e:39:a5:91:94:65:8f:c8:ea:b7:
39:ec:e1:b0:ce:9e:75:76:1c:87:3c:e6:43:75:01:23:99:a7:
91:2f:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:20 2026 by rpki-client