Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/4F2349C6164711F19BD3C8F1DAE4EC9C.roa
File: 4F2349C6164711F19BD3C8F1DAE4EC9C.roa (raw, json)
Hash identifier: t/sQT9zOtUxK/aumZF4eGuu6FrtnQZBtft6dvkz36IM=
Subject key identifier: FD:74:8A:D5:19:F8:38:9C:8E:C8:D1:9B:22:D2:9E:FA:4B:C2:DF:6C
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04AE
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/4F2349C6164711F19BD3C8F1DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:51:35 +0000
ROA not before: Mon 02 Mar 2026 14:51:31 +0000
ROA not after: Sat 02 Mar 2030 14:51:31 +0000
asID: 33763
IP address blocks: 160.242.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:51:31 2026 GMT
Not After : Mar 2 14:51:31 2030 GMT
Subject: CN=69a5a3f7-5f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:ee:2a:0d:e4:b0:df:70:62:15:ae:ff:20:
24:a9:3c:87:8a:27:e7:d2:28:c2:48:4e:e7:ac:01:
0a:a5:4f:22:a8:69:ab:20:fc:9d:c4:bc:fd:fb:35:
da:9b:eb:c9:6e:b4:37:6b:70:78:8b:1a:aa:92:68:
da:8a:16:c4:76:05:b3:d2:aa:43:93:7b:2f:fd:a1:
3d:0f:5c:5b:2d:5d:98:07:af:04:22:0a:c6:18:c1:
8d:0e:93:65:91:da:ee:5e:2b:74:17:fa:8b:98:81:
ab:aa:c8:a0:1a:71:11:1f:c7:e6:6d:5a:5c:14:74:
2d:d9:fb:dc:34:72:fa:f4:b2:1d:c7:f6:66:82:2c:
ea:32:5c:91:bf:9c:f9:ea:84:fd:b1:12:52:5c:24:
c6:2a:97:64:88:52:37:44:8a:12:7c:d9:81:8f:0b:
17:eb:7c:78:50:45:0d:93:ec:c6:c6:72:cd:98:87:
fd:47:a6:4e:94:90:90:d0:bf:18:1a:52:ca:15:b0:
eb:9d:cd:e6:23:61:0a:e8:f7:c5:96:77:da:ab:a6:
31:58:a0:00:4b:21:b3:49:57:5c:e3:f9:a8:90:c5:
3d:21:2f:ae:e8:b8:26:49:9d:a0:5b:2a:95:0c:7c:
72:40:f5:27:99:7d:e2:f1:49:6c:20:50:92:f9:34:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:8A:D5:19:F8:38:9C:8E:C8:D1:9B:22:D2:9E:FA:4B:C2:DF:6C
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/4F2349C6164711F19BD3C8F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.28.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:d5:94:61:8b:cc:0a:2d:04:2a:4f:fa:60:6e:7f:8f:31:7d:
ae:dd:cc:a7:92:1c:49:1f:1d:c0:0d:a3:ec:16:3c:ea:95:d3:
17:1b:f9:49:27:40:a3:b6:d2:fa:37:07:ba:65:24:8a:8c:c6:
7a:3e:9c:58:25:b9:cc:94:07:99:c8:df:41:f2:4c:99:09:d7:
b0:8e:93:23:44:2b:cc:5f:d2:fd:1b:d5:7d:c3:80:03:49:bb:
d0:bb:6d:71:3f:5e:70:9a:85:a0:43:2f:10:96:94:2a:93:48:
0a:d0:e4:e3:7d:9f:a6:6f:10:51:40:d9:49:d1:c8:40:01:7b:
52:56:53:9c:1f:2b:b4:6a:79:67:9c:d5:4b:3b:e4:11:1f:17:
71:88:22:01:91:8d:ba:38:6c:17:f6:f5:b1:23:5d:8b:d3:39:
5c:aa:ac:aa:52:68:65:40:72:25:47:69:78:e2:fc:51:c2:c5:
23:c6:30:ae:ce:20:e2:96:2c:d3:07:f2:42:74:0d:12:b6:37:
b8:fd:bb:8a:ac:9d:c1:99:83:4c:69:0e:94:57:10:a9:1f:97:
51:3e:67:d4:fc:ad:43:45:81:98:8a:fb:e0:e0:ff:2b:9a:ce:
b8:50:b2:d8:14:c8:22:55:d5:37:dd:ac:de:b0:47:da:1f:d1:
f9:4a:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:21 2026 by rpki-client