Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/372376C2164A11F195987A84DAE4EC9C.roa
File: 372376C2164A11F195987A84DAE4EC9C.roa (raw, json)
Hash identifier: SX0HcwMmLGA74205qXIPpm5Mb0y6dX2WD04yQZRgzuo=
Subject key identifier: 30:20:73:38:63:51:86:2A:1C:DA:83:58:51:9F:89:C1:D0:F9:62:BF
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04C6
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/372376C2164A11F195987A84DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:12:23 +0000
ROA not before: Mon 02 Mar 2026 15:12:18 +0000
ROA not after: Sat 02 Mar 2030 15:12:18 +0000
asID: 33763
IP address blocks: 160.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:12:18 2026 GMT
Not After : Mar 2 15:12:18 2030 GMT
Subject: CN=69a5a8d7-400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:0f:8d:c3:0f:fa:44:19:86:56:f4:ff:6c:
83:58:5e:4a:46:6f:4a:ab:6a:54:59:72:06:3b:08:
46:09:80:8b:e3:fd:c3:30:4c:05:51:63:e1:45:5d:
63:a7:fc:3d:55:36:7f:f2:df:3c:01:e5:bc:d7:5d:
b4:68:08:79:94:8a:31:08:86:f3:26:35:e8:d5:c7:
09:b0:86:36:a5:11:9d:65:44:97:f2:4b:8f:e5:a6:
24:f0:85:42:67:32:96:c9:83:9e:ae:55:52:39:4b:
f2:68:47:59:91:8b:e1:15:33:ea:3a:02:a1:65:ec:
4f:be:07:58:d2:69:b5:5d:75:3c:c0:a3:61:ed:c2:
7c:29:31:27:2f:7e:a9:c8:da:f2:5a:ed:b1:f5:39:
d9:b9:fc:2c:3a:f6:32:de:83:a4:a9:b5:41:20:b9:
52:e1:0c:db:94:de:6d:5a:b6:5d:79:62:7c:cf:c7:
a2:61:95:f8:b3:3b:0c:df:bf:38:04:0e:9d:45:4a:
cb:8b:35:24:3b:17:de:8f:84:9b:68:71:93:5d:8b:
05:11:ba:a4:69:b1:82:44:f0:c9:3a:fe:d3:14:5f:
a5:36:13:f4:9b:8b:68:53:37:96:8d:a8:18:9c:35:
50:9b:0a:8b:f7:7d:48:5f:ab:17:e0:f4:b5:d3:48:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:73:38:63:51:86:2A:1C:DA:83:58:51:9F:89:C1:D0:F9:62:BF
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/372376C2164A11F195987A84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:92:f1:c3:96:91:73:dc:45:25:99:8b:79:93:fe:48:e3:88:
ae:cc:8f:69:59:c3:12:3f:1c:9b:4e:3e:a6:01:ce:1d:0d:c0:
e3:5c:22:73:4b:06:a6:41:7a:a7:fe:5d:d4:ea:ae:8e:4f:97:
3d:db:74:8e:8b:b6:67:4a:6c:45:2a:35:e2:df:f3:47:a9:03:
e9:bf:43:8a:63:d1:cb:df:c8:fa:a3:3b:53:09:1c:90:a5:2a:
73:06:66:78:52:e9:7d:c1:67:9a:c3:75:df:c0:d2:f5:c6:01:
52:a1:7f:9c:64:bd:fe:3c:e1:9f:c4:a3:9b:f4:c1:f2:e8:b2:
93:f6:0b:5b:19:e2:7b:32:61:85:17:6a:0c:fb:d5:28:dd:74:
54:30:44:64:97:34:65:5a:e9:08:59:b9:6d:93:66:9e:67:31:
6c:35:3c:8c:f5:04:3a:86:3d:ec:8a:57:ac:14:9d:95:47:0e:
01:62:9b:a4:2a:5f:63:b0:1b:29:b5:65:c7:70:65:50:14:05:
e5:7e:28:27:3e:88:62:90:f7:e9:fb:c6:35:10:11:bb:a5:7a:
6c:2d:de:cc:89:ea:24:8d:9d:c7:ef:a3:7e:f1:19:5c:18:c7:
d5:ab:b8:4e:8b:f6:86:42:a3:d8:50:f7:13:54:71:af:79:c3:
81:96:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:59 2026 by rpki-client