Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/D6331B72083B11F18A9892A4DAE4EC9C.roa
File: D6331B72083B11F18A9892A4DAE4EC9C.roa (raw, json)
Hash identifier: L0HQjZQdcJ4UK8/c1v+7YcsQ/yAdwETv10wnZiS2sKo=
Subject key identifier: 5E:32:0C:91:A2:7B:AA:1A:5F:C7:CB:E8:C1:21:81:CB:A7:1A:96:C9
Certificate issuer: /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial: 09F3
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/D6331B72083B11F18A9892A4DAE4EC9C.roa
Signing time: Thu 12 Feb 2026 17:54:12 +0000
ROA not before: Thu 12 Feb 2026 17:54:07 +0000
ROA not after: Wed 12 Feb 2031 17:54:07 +0000
asID: 327804
IP address blocks: 160.119.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2547 (0x9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AR, serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Validity
Not Before: Feb 12 17:54:07 2026 GMT
Not After : Feb 12 17:54:07 2031 GMT
Subject: CN=698e13c4-f40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:94:a7:69:f1:96:23:37:e2:67:cb:df:e7:
5c:ba:d3:6f:dd:9b:cf:18:9a:1a:00:59:be:16:57:
02:87:0e:d9:38:ae:9e:99:dc:84:59:b9:cf:6b:2b:
0f:7a:7a:51:cf:f4:3c:9d:c8:f0:dc:c2:01:c5:d0:
92:3c:45:08:fb:b8:09:5f:b5:73:88:c3:4b:7e:a0:
ee:99:99:a2:24:f9:16:15:9b:8e:d6:9f:fb:26:b9:
e5:0e:77:63:e4:12:73:3f:a7:a8:2e:8c:ff:98:b0:
a5:52:84:9b:a1:53:d9:ef:67:67:34:15:8c:27:2c:
c0:cb:7b:ad:f2:32:50:42:fb:9d:a3:da:a6:c5:4e:
bf:63:5a:d6:b3:a3:78:89:1d:44:9b:73:83:d5:5a:
5b:02:eb:4b:47:b2:36:84:05:4d:c6:5b:be:84:3c:
48:62:c4:c0:d1:2a:83:37:c6:d4:c2:80:21:12:7c:
16:c5:40:f9:ec:dd:dd:05:9b:1b:1c:97:7c:bc:51:
99:dd:65:10:19:35:72:20:29:35:83:f2:cb:36:0e:
df:8d:1c:a3:2f:7d:ad:5c:07:6b:24:b2:ab:71:98:
25:f2:d1:af:7a:9d:dc:6c:50:4e:2a:0f:cc:bc:fc:
dd:47:a9:7b:dc:fb:50:02:9c:28:91:e9:e3:02:0d:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:0C:91:A2:7B:AA:1A:5F:C7:CB:E8:C1:21:81:CB:A7:1A:96:C9
X509v3 Authority Key Identifier:
keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/D6331B72083B11F18A9892A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.40.0/21
Signature Algorithm: sha256WithRSAEncryption
49:18:15:2f:d3:1e:93:3f:b0:41:53:b5:2f:b7:14:3f:8d:29:
0f:3e:4c:f9:bf:26:91:88:14:e3:54:ef:10:c8:c7:38:3f:cc:
38:d4:85:ca:2e:86:6b:77:bf:45:07:a2:4a:5f:da:4f:e4:0c:
47:88:26:4a:54:9a:75:5f:0f:fd:ea:ab:ee:f3:6b:d6:67:cf:
b0:53:a5:51:53:84:d8:e7:77:28:59:7a:ab:04:fc:2a:08:75:
75:25:57:43:c8:05:07:15:3c:26:af:4f:0a:34:35:bd:74:ff:
8b:87:9d:28:34:39:bb:12:00:a7:64:f3:a6:35:40:bd:6f:43:
3d:3c:85:b1:50:8c:02:62:a9:b5:fc:23:5c:02:0d:d1:76:8d:
38:e6:31:39:3d:61:f0:e1:d1:01:3b:7e:29:df:e1:65:3a:c4:
18:7c:5e:3e:3f:2c:fe:54:46:52:8c:9a:15:0e:1b:22:36:95:
e7:c2:15:2a:70:75:16:45:72:7a:32:f0:8d:b2:30:95:c0:88:
bd:20:93:55:3a:ad:a9:54:36:6b:85:88:0e:ab:54:4d:93:67:
a8:d3:f5:d6:35:b8:36:9f:66:24:2f:56:f7:88:d4:c7:27:62:
dd:7a:1e:29:8d:c8:69:99:54:79:4b:0f:6a:3d:2a:88:29:2a:
91:b8:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:00 2026 by rpki-client