Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/8B5CC092164811F191889C7BDAE4EC9C.roa
File: 8B5CC092164811F191889C7BDAE4EC9C.roa (raw, json)
Hash identifier: lSB9/WEXqq3+A7EAEzssfuCjG/BvQRzkvd1f1Gn35v8=
Subject key identifier: 6D:FF:85:07:62:65:CA:87:A7:94:90:0E:83:11:FF:CD:76:B6:4B:4A
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04B6
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/8B5CC092164811F191889C7BDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 15:00:26 +0000
ROA not before: Mon 02 Mar 2026 15:00:21 +0000
ROA not after: Sat 02 Mar 2030 15:00:21 +0000
asID: 33763
IP address blocks: 160.242.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:00:21 2026 GMT
Not After : Mar 2 15:00:21 2030 GMT
Subject: CN=69a5a60a-6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:43:da:4c:49:9a:0f:1f:7b:dc:9c:d5:71:
c3:c4:5d:38:1a:ef:06:c6:64:f9:59:89:26:a9:a4:
8f:df:87:8f:8e:09:9b:a3:39:c2:a4:72:8b:ff:7f:
3e:63:bf:0e:20:f0:b5:2e:95:dc:f9:3f:aa:7b:73:
54:5f:09:90:df:9c:56:9d:c8:ec:f2:3c:60:14:6d:
d4:08:ec:0e:1b:b3:b7:42:c7:1d:73:a0:b3:6a:2e:
76:7f:35:9b:8b:64:79:02:5e:57:62:47:a2:15:d7:
42:51:10:74:d9:e2:d4:b5:fd:82:6b:84:69:76:73:
c4:63:88:8e:c6:40:82:7d:db:43:57:2c:fc:f8:8c:
b1:46:c8:1c:03:82:cd:60:d2:71:73:c1:17:aa:5f:
ba:a5:65:6e:fc:63:2e:a6:60:27:36:0b:7c:e3:70:
a0:c6:6c:96:d8:18:d6:f9:8e:7f:40:bf:f6:a0:34:
f6:ca:4c:28:5d:4e:25:fc:a0:62:81:fd:96:bf:bd:
78:ae:82:5c:82:77:04:93:18:63:37:fa:de:36:0e:
e8:1e:a8:80:fd:e3:fa:b0:53:6c:b1:d7:ad:2e:6b:
da:8b:e7:b6:80:26:b9:82:fb:4f:42:a0:94:a2:4a:
6e:ce:b8:09:c7:37:a6:d5:5c:8f:65:8e:37:6c:33:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:85:07:62:65:CA:87:A7:94:90:0E:83:11:FF:CD:76:B6:4B:4A
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/8B5CC092164811F191889C7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:51:f0:4b:a0:7d:02:f2:37:ff:3d:bb:ed:e0:f7:6f:60:c5:
16:10:c0:bd:fd:91:7b:6a:49:c9:20:9a:1b:71:d8:a8:6b:76:
09:15:c3:19:5d:78:e4:44:ce:a2:ae:17:42:d4:d7:f8:aa:b3:
85:4c:c2:96:97:dc:a2:6f:ee:55:1a:14:96:eb:1f:5b:54:b9:
38:f6:f4:ae:c8:f7:ce:58:ac:54:65:23:65:11:3d:48:1e:44:
05:ac:0f:db:c7:66:25:10:ab:b0:ab:da:c5:54:32:7f:7a:86:
f4:b4:41:0e:ce:95:1d:c4:d2:b4:7b:16:26:3f:a9:e3:02:c7:
2e:d6:5c:20:4c:37:f9:ac:c7:2a:50:e2:cb:48:38:ad:cb:43:
71:b1:f8:73:2c:6c:2c:27:86:62:3c:d0:7c:c1:3c:a4:5b:86:
99:e4:ea:32:92:d5:1e:89:f5:61:5e:c0:cb:ff:ab:55:e9:d8:
1e:04:23:74:85:a3:24:3b:32:67:15:97:30:d4:0d:94:be:af:
75:fd:b8:3b:e8:5d:3e:b0:38:e5:90:77:3a:17:51:5d:20:1b:
0a:e7:de:a9:96:02:3d:e6:47:02:3e:ea:5b:5c:13:01:38:8e:
78:b3:d4:f5:67:73:3a:3f:87:f2:43:14:5f:fa:e8:4b:ed:18:
b5:31:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:21 2026 by rpki-client