Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BAD1C0B2164211F1A5140FD5DAE4EC9C.roa
File: BAD1C0B2164211F1A5140FD5DAE4EC9C.roa (raw, json)
Hash identifier: LrKfPDaa2A9ec4OA/JYHGSq5CzhJGUqJ1ollvsbr8wI=
Subject key identifier: 88:E0:25:07:AA:67:6F:F1:A6:CF:D6:6A:DA:39:0E:BE:19:5A:86:2F
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 049F
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BAD1C0B2164211F1A5140FD5DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:18:48 +0000
ROA not before: Mon 02 Mar 2026 14:18:44 +0000
ROA not after: Sat 02 Mar 2030 14:18:44 +0000
asID: 33763
IP address blocks: 160.242.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:18:44 2026 GMT
Not After : Mar 2 14:18:44 2030 GMT
Subject: CN=69a59c48-e86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:15:b9:81:c0:22:b0:c3:97:b0:03:cd:d2:
e6:ff:c9:88:fd:cc:14:d9:c7:2b:22:0f:33:5f:df:
fe:1d:c5:cb:1b:26:45:2a:03:05:a9:cc:98:58:f4:
67:12:10:a7:16:c2:c9:71:84:fb:29:a3:56:5c:39:
d1:f7:fd:37:15:8c:3e:a4:12:3e:36:48:83:d6:57:
f2:08:39:58:a7:62:f2:86:ca:25:d0:fe:4b:ea:4a:
62:cc:88:24:89:16:ce:35:75:b7:94:eb:66:ca:63:
cc:e1:c2:13:65:4d:4b:29:33:5b:cc:8b:9a:e5:99:
3b:bc:bc:3c:5d:f2:96:4c:d0:07:ad:31:ab:40:02:
98:46:15:16:e1:3f:da:dd:28:4d:bb:3b:2e:84:6f:
3e:8a:f7:2a:47:c3:bc:d6:07:cc:1a:b5:47:5a:58:
9d:d6:0e:53:4c:39:61:ae:11:6b:4c:cd:53:13:a0:
3e:71:a3:2f:3e:b8:c0:40:87:78:3a:03:20:3b:c4:
a6:42:72:0f:4c:16:41:02:5f:2c:11:1c:db:96:9c:
d2:cb:9f:dc:bb:fe:6f:bd:0d:8a:75:64:4a:df:44:
b9:eb:5d:3c:b4:86:49:cd:46:9d:3e:b8:1f:50:e9:
5f:09:78:63:ed:95:d2:06:44:7d:9c:d3:23:64:57:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E0:25:07:AA:67:6F:F1:A6:CF:D6:6A:DA:39:0E:BE:19:5A:86:2F
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BAD1C0B2164211F1A5140FD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4d:1b:fb:82:1a:49:c6:b2:df:09:3e:d7:ee:61:ba:e0:bd:
24:78:b0:23:81:4e:b0:d4:81:f3:ca:7b:b1:84:a7:d1:a1:c2:
64:7a:31:ed:b0:bc:12:6d:7d:c7:4b:e7:7d:3d:bb:04:4a:02:
9d:29:f4:ba:33:03:0e:ba:74:37:66:cb:93:70:a9:55:fa:14:
64:56:3b:6b:af:55:4b:88:e3:e0:64:2c:62:5f:b2:53:5b:5d:
ea:3d:c8:39:49:a0:ec:56:56:d5:8f:c6:08:e2:77:95:9e:b4:
1c:19:eb:c5:bb:b3:cb:63:73:ce:bc:19:b8:7b:e7:9f:ea:b8:
c1:54:1b:31:0c:f0:64:0a:34:ec:fb:a7:89:ab:9f:bc:8a:bd:
0b:97:5b:e1:02:37:07:0f:fc:ae:bc:8f:43:ae:4c:1d:1f:bc:
44:56:0a:b7:1c:2d:86:fc:9c:b2:47:db:f4:0b:71:bb:31:e5:
44:b6:d9:88:82:e0:4b:d4:c8:0f:92:0d:cd:1b:b7:af:9c:a0:
dc:ff:6f:98:26:d4:48:43:ed:2d:90:1f:d0:ba:5b:1d:62:6d:
46:f5:70:24:36:c8:59:0a:9d:e9:02:58:38:93:e2:72:2f:37:
3c:11:c8:72:cd:60:db:24:bb:c6:ab:51:b5:25:fc:08:90:8d:
cb:13:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:22 2026 by rpki-client