Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/20E578B6164911F184B5D47DDAE4EC9C.roa
File: 20E578B6164911F184B5D47DDAE4EC9C.roa (raw, json)
Hash identifier: GjT6tvvAwcdiXjyTcs5xoFxiRyrpZUNEZqRr7lISbHE=
Subject key identifier: 0B:3A:CE:DC:0D:19:50:E5:DE:F7:46:33:22:1E:0C:9F:63:11:12:FF
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04BE
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/20E578B6164911F184B5D47DDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:04:37 +0000
ROA not before: Mon 02 Mar 2026 15:04:33 +0000
ROA not after: Sat 02 Mar 2030 15:04:33 +0000
asID: 33763
IP address blocks: 160.242.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:04:33 2026 GMT
Not After : Mar 2 15:04:33 2030 GMT
Subject: CN=69a5a704-576d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:57:04:fc:0f:1e:d2:2e:f5:78:f3:83:1c:
65:ae:bc:a3:fd:20:54:f3:f9:16:1a:01:21:06:42:
87:38:d7:f4:c6:da:ee:83:38:dc:f3:4b:71:cf:b8:
5a:65:93:4b:46:8a:be:cb:f4:30:95:f3:30:4b:1d:
b4:f1:9f:a3:aa:ca:f2:b0:41:c5:4c:75:a2:33:77:
45:e5:1b:05:ef:1f:6c:32:33:f0:cc:de:e2:ac:90:
f1:1a:b2:38:cf:79:86:27:66:2d:98:96:1f:9b:9c:
81:72:93:73:4e:50:d7:1c:d5:8f:0f:5a:62:fd:7f:
ae:0b:f2:18:ed:a0:56:e7:e6:15:61:8d:28:8d:dd:
9b:39:85:f7:a2:53:34:f2:6a:02:c9:ad:5c:89:88:
75:ad:2f:2a:af:da:e9:0f:04:dd:aa:06:ee:c0:fb:
59:1a:6f:48:b9:95:33:2c:7f:8c:e9:a9:41:6c:f1:
73:2e:0b:eb:c5:c3:fd:c3:93:59:9b:47:de:0f:62:
dd:b5:f6:a2:52:8c:ca:b4:67:7d:f0:bb:9f:f2:95:
3c:b9:9e:0f:cf:ea:a4:ce:66:44:53:f9:04:93:a7:
d0:4a:49:e3:7c:23:7b:56:91:fa:a6:07:01:af:a8:
f0:93:df:d6:8d:3e:02:49:9e:d0:ec:8e:d5:57:0e:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3A:CE:DC:0D:19:50:E5:DE:F7:46:33:22:1E:0C:9F:63:11:12:FF
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/20E578B6164911F184B5D47DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.112.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b4:bd:d5:0e:80:93:61:66:9e:46:f1:bb:dd:1f:03:bd:88:
4a:b6:aa:a1:e3:11:eb:0c:93:a4:f7:10:6e:e6:d7:c8:af:bc:
03:89:f5:af:fc:64:d5:52:ee:6f:fa:1c:27:70:b4:1e:94:76:
0e:d0:10:5d:3c:09:8a:db:87:9d:bd:7c:b4:9b:6e:7f:ed:b9:
c2:6e:83:dd:99:bf:e6:e1:d2:0a:34:5c:25:94:4b:58:e9:42:
c0:58:ce:d9:f9:94:df:4b:78:1b:04:f6:aa:8c:15:5e:ab:d7:
48:0e:21:70:f8:47:cf:72:7d:16:61:7e:fb:96:42:5a:b1:2e:
81:d2:42:90:78:41:a4:ec:50:d0:96:1a:5e:31:e7:6b:00:d7:
27:9e:49:27:6c:e6:06:85:c3:c0:84:2d:26:5a:54:61:5d:40:
56:a4:8e:e5:8c:f5:bb:55:e1:4d:df:dd:d7:ea:dd:ee:e9:3d:
ec:32:d1:dd:e3:33:4d:b5:63:93:11:c0:9b:ac:8c:44:30:8d:
ce:54:f2:f0:f2:d9:c6:c0:a8:33:86:09:10:65:ab:2d:da:69:
17:81:20:40:3f:a5:9a:51:4c:79:5f:cd:e8:e1:a3:b5:7a:fb:
49:3e:e2:ee:e7:6a:08:02:dd:ce:e0:c1:42:01:b2:42:60:88:
5d:81:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:20 2026 by rpki-client