Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/475E0D62164611F1865584EBDAE4EC9C.roa
File: 475E0D62164611F1865584EBDAE4EC9C.roa (raw, json)
Hash identifier: gVZ9dFpQtlyacvHFfLqr5zzatWzgyOJrPVlqDGNVe6g=
Subject key identifier: 7C:7D:F1:9B:68:13:CB:33:68:4F:BE:0E:8E:E0:95:D8:58:7C:35:02
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04AA
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/475E0D62164611F1865584EBDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:44:13 +0000
ROA not before: Mon 02 Mar 2026 14:44:09 +0000
ROA not after: Sat 02 Mar 2030 14:44:09 +0000
asID: 33763
IP address blocks: 160.242.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:44:09 2026 GMT
Not After : Mar 2 14:44:09 2030 GMT
Subject: CN=69a5a23d-f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:81:6b:2c:1c:38:69:62:13:bc:11:09:a1:
47:d0:81:9d:09:b2:a6:54:1e:a6:1d:31:0b:de:94:
ec:92:9f:41:b7:6c:40:d5:29:a3:41:46:46:a2:ac:
e9:c2:6e:3c:19:63:16:7e:71:a9:bd:5c:78:b7:64:
fd:e3:99:99:bb:33:9a:d4:bd:d6:bd:bc:21:7f:f5:
8b:6d:1b:2f:79:93:b2:02:5e:84:f4:1a:88:4a:77:
86:41:94:fb:61:8d:6f:b5:0a:37:08:ea:ca:a0:91:
60:6e:7b:fd:22:a4:65:3a:80:78:28:65:f1:0e:54:
9e:b7:c4:a5:24:89:2d:5b:4e:40:19:36:0e:28:bd:
36:fc:b7:65:65:b3:3f:a9:b6:fb:de:04:ed:8c:ad:
2a:1c:54:3d:33:6b:96:91:f2:70:b7:dd:a5:6a:da:
f4:94:ce:3b:fc:50:4e:56:eb:93:ce:68:61:b9:e1:
39:fd:94:f7:4a:6f:dd:d9:21:36:00:df:0a:d8:ba:
04:6f:c6:c9:1d:e1:64:9d:17:66:3d:e3:5b:18:53:
4d:57:f1:31:d2:0d:6c:9f:b1:e4:4e:a9:ab:e7:e2:
2e:39:0d:bc:47:8f:f2:fa:79:a5:87:6c:aa:7b:c0:
ee:d1:98:6c:7a:da:21:73:cd:df:37:64:91:d7:51:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:F1:9B:68:13:CB:33:68:4F:BE:0E:8E:E0:95:D8:58:7C:35:02
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/475E0D62164611F1865584EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.0.0/20
Signature Algorithm: sha256WithRSAEncryption
e2:70:56:f8:a1:5f:03:c0:11:94:6f:3f:db:d1:46:bb:23:78:
ef:8f:a8:7b:c5:c7:fa:53:3c:79:36:ac:2e:0e:69:1f:dc:3d:
61:97:4c:b8:b9:aa:89:85:70:43:73:24:29:0a:59:39:cd:ce:
3f:06:21:09:4b:ff:96:3d:ff:86:f1:57:ba:1b:c4:c7:87:59:
b6:33:19:be:27:87:2e:03:df:f5:43:cb:b8:77:db:24:2c:64:
4d:f6:80:16:6f:0b:f0:22:e7:04:3a:09:78:37:cf:f3:4a:4f:
4c:af:01:77:dd:5b:ee:41:14:e7:10:60:e6:de:10:65:9a:37:
de:0c:8f:f5:65:5c:78:41:58:e4:68:34:6c:c3:ef:d5:fd:1e:
b7:d7:bd:8d:dc:69:2d:4a:3f:c9:59:88:2d:cd:59:de:5a:68:
5c:26:30:3b:a4:47:c4:b9:bc:64:7f:8f:6c:b5:d7:3a:6c:04:
10:c6:42:78:ba:90:f5:83:a7:06:f2:e6:b3:02:58:f5:07:ae:
58:ec:4a:81:df:7f:68:95:d3:72:0e:60:54:60:6a:80:08:a8:
b8:0a:18:0d:be:4f:32:e3:d5:5a:aa:7a:0d:48:75:ea:1f:66:
e5:03:da:e9:d7:28:7c:da:b1:16:54:cd:8b:49:14:4d:c4:a9:
c7:71:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:23 2026 by rpki-client