Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/76FBD6B0164311F1BD56F3DADAE4EC9C.roa
File: 76FBD6B0164311F1BD56F3DADAE4EC9C.roa (raw, json)
Hash identifier: Gj9pS0NU6aD4F5/RLKRtgqvJR42xaOuVLePBdK86QyQ=
Subject key identifier: DB:9B:54:08:B5:19:2A:C4:E4:EE:8E:50:32:50:AA:48:CA:63:09:28
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04A2
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/76FBD6B0164311F1BD56F3DADAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:24:04 +0000
ROA not before: Mon 02 Mar 2026 14:24:00 +0000
ROA not after: Sat 02 Mar 2030 14:24:00 +0000
asID: 33763
IP address blocks: 160.242.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:24:00 2026 GMT
Not After : Mar 2 14:24:00 2030 GMT
Subject: CN=69a59d84-628d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:60:59:fc:44:11:26:39:0e:c1:5d:20:b9:
36:f0:05:3c:ce:3f:88:52:1f:fe:b8:80:f4:b4:43:
4b:b8:eb:0f:ae:d3:9a:a8:b4:e6:22:45:86:59:aa:
5b:0c:95:0c:9c:e4:6e:07:6f:4d:43:4b:55:72:fc:
37:3a:ac:a6:aa:c8:eb:1c:42:10:8d:63:59:a3:5d:
af:15:80:5c:ca:a9:1b:74:a5:f7:9f:6d:3c:9a:c0:
3e:3a:a5:fd:b5:81:b8:ae:f5:0b:f5:60:c5:0f:e8:
ac:17:70:11:6d:9f:36:cc:b5:71:68:e3:63:45:3d:
ea:6c:a6:71:41:e2:9a:df:a7:ce:76:eb:fa:b5:2d:
87:5a:41:1b:39:01:40:0d:12:ae:0a:df:d0:16:a0:
e5:81:3d:b6:59:53:da:fd:d0:f6:90:e4:be:f1:7b:
af:19:76:71:72:3d:60:52:88:77:2c:f4:79:f6:01:
35:11:6e:88:ff:83:0d:95:db:fa:48:d9:a4:21:be:
9f:8b:8a:6d:fc:f2:51:9a:81:4c:9f:3f:a9:61:a6:
39:02:9b:80:54:82:0f:8c:b6:f6:e2:6c:e7:cb:d7:
fd:21:71:49:7a:2c:40:c8:26:ec:23:22:27:9a:fa:
99:50:76:3d:a3:c8:ee:5e:66:f7:64:e4:28:09:c0:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:54:08:B5:19:2A:C4:E4:EE:8E:50:32:50:AA:48:CA:63:09:28
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/76FBD6B0164311F1BD56F3DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.116.0/22
Signature Algorithm: sha256WithRSAEncryption
03:18:29:6f:24:92:f6:1d:20:32:01:a3:a0:d9:33:4a:78:38:
63:b6:5b:a8:2f:d8:04:71:2f:dc:e5:df:c2:38:4c:43:0a:9d:
1a:4b:16:e6:d8:07:b5:0b:a8:f4:b7:fd:f9:73:28:56:eb:e4:
8c:30:31:e4:91:80:07:88:c5:e7:26:98:de:25:85:99:dc:3d:
55:81:f0:97:e9:d3:1e:81:8e:8e:18:02:90:b2:a9:75:3c:0c:
3e:1f:a1:3a:1a:c7:0c:72:f0:c7:5d:29:0e:1e:5f:4b:cc:db:
d7:1e:24:e2:fb:f2:fe:1b:58:e9:e3:44:e1:14:42:3b:f1:9b:
46:55:75:8c:f5:dd:f5:80:be:cf:bc:7c:21:ad:8a:01:ca:e2:
c4:1d:d7:3b:bf:51:de:a1:f6:2b:f7:01:3e:1c:0c:92:e9:ae:
af:31:cd:59:14:3f:0b:74:af:4c:c5:fa:50:d7:00:25:dc:a0:
6e:bd:78:b7:28:a4:a2:32:90:ae:fe:42:6b:90:01:d6:ee:78:
63:ba:5b:5d:f3:22:c5:f5:90:a3:b1:09:1c:b8:42:53:26:a4:
f4:f7:d4:07:cd:e9:b6:f8:fc:2e:8e:d0:88:20:bd:9e:f8:db:
0a:a6:66:16:34:d1:91:74:05:dc:b2:bf:b8:a0:60:e7:36:2b:
dd:0f:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:59 2026 by rpki-client