Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/AAC6E05E8A9011F18378F7E4CE1D38B0.roa
File: AAC6E05E8A9011F18378F7E4CE1D38B0.roa (raw, json)
Hash identifier: JIjslw1y4PxMG8w0bVuRsS73DTXnWqqEjqzGJCLK+DY=
Subject key identifier: 53:56:21:5D:E7:09:3D:C0:4E:A0:E9:3F:BB:75:01:5C:C2:52:D7:7D
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 056E
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/AAC6E05E8A9011F18378F7E4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:28:57 +0000
ROA not before: Tue 28 Jul 2026 14:28:53 +0000
ROA not after: Fri 01 Mar 2030 14:28:53 +0000
asID: 33763
IP address blocks: 160.242.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 14:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Jul 28 14:28:53 2026 GMT
Not After : Mar 1 14:28:53 2030 GMT
Subject: CN=6a68bca9-796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:58:da:94:0e:25:3b:16:4b:4a:03:8f:f9:
93:99:51:74:a8:53:ae:e2:6c:45:5a:0b:40:ca:2f:
ec:6c:58:97:dd:5c:59:06:51:20:93:b2:0a:61:62:
ba:9a:b8:60:c0:4f:0a:85:0d:fc:20:a1:67:e2:cb:
94:6f:e6:48:ca:b3:94:b1:33:52:89:c4:56:3f:46:
30:a8:75:3f:b5:eb:db:b3:6b:4e:6c:70:31:7b:13:
dc:01:1c:74:2a:00:a4:b4:5b:91:e2:5d:01:54:32:
92:f4:13:f8:a9:de:bb:e2:1d:1a:97:31:2a:8b:88:
f1:2f:31:fb:8e:bd:b1:dc:27:bc:af:f7:79:54:fb:
2d:0a:37:32:79:16:6d:e2:00:26:0c:f3:18:2d:4f:
ef:de:1b:9b:d3:01:87:c2:0a:a4:d1:6f:5d:32:e5:
ed:af:64:da:3f:c1:e4:0e:6e:bf:09:f5:8a:2e:c3:
29:f4:6c:90:2c:98:51:85:30:d9:df:d3:39:29:68:
b8:e9:57:bd:c0:1a:38:e5:8e:ef:1e:3e:f8:36:2b:
17:89:98:6b:d2:09:a8:10:5c:55:8c:57:71:8a:86:
13:cb:39:91:65:b1:e5:0d:f2:4d:72:49:3f:5e:94:
aa:fc:e7:9e:ca:53:60:37:e9:80:e9:ee:80:96:b1:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:21:5D:E7:09:3D:C0:4E:A0:E9:3F:BB:75:01:5C:C2:52:D7:7D
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/AAC6E05E8A9011F18378F7E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.16.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:70:06:46:42:e9:71:36:9d:6e:2f:8c:bb:28:b3:cf:fc:b1:
ed:8a:f3:d1:b3:49:6f:ea:af:40:6b:58:06:b1:92:8d:4c:59:
02:34:f9:ba:0e:40:3c:15:51:10:fe:1c:4a:0a:7f:f0:2f:67:
b7:5b:87:61:5c:ab:5e:e8:2b:0e:52:7c:86:c0:ca:ef:02:38:
52:89:61:e9:5a:3b:b2:54:d0:52:c0:4c:4b:47:60:74:a4:db:
cb:63:b9:ab:78:04:43:46:05:5c:4c:bb:bb:1a:52:ad:31:4e:
c2:44:69:e7:a5:46:39:46:67:33:e9:84:26:7b:8f:5f:97:60:
f9:8a:37:e8:31:70:7c:47:90:b7:9d:9b:32:d3:14:8c:03:94:
e3:7e:54:9b:45:9f:de:06:f6:9f:4c:72:6c:60:e1:76:d9:77:
8b:da:8c:bc:13:a4:5e:ed:4d:fa:09:4a:a5:99:57:71:42:44:
59:74:3a:26:f7:de:10:e0:93:a8:b7:0d:d6:8f:9a:58:71:f7:
2b:a9:6b:7d:2f:11:37:07:0d:9d:10:f9:54:63:5f:8e:0e:b0:
4b:7b:e5:55:b6:9e:d0:d3:66:83:85:e0:f2:86:76:01:23:6b:
77:77:a8:8a:32:b8:8e:4b:95:c2:6d:8b:14:ee:c1:cb:14:5b:
2e:10:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:19:31 2026 by rpki-client