Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/C0B861D41CFF11F199815BDEDAE4EC9C.roa
File: C0B861D41CFF11F199815BDEDAE4EC9C.roa (raw, json)
Hash identifier: OSOMPml4dWonWMy5j4ZjUxfK0LOQE9IMO9et91Z/nf8=
Subject key identifier: 0C:C1:49:AB:78:4E:34:6E:55:16:00:07:1D:31:46:2D:4E:0F:86:50
Certificate issuer: /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial: 064D
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Authority info access: rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/C0B861D41CFF11F199815BDEDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 04:07:00 +0000
ROA not before: Wed 11 Mar 2026 04:06:56 +0000
ROA not after: Wed 01 Dec 2049 04:06:56 +0000
asID: 327979
IP address blocks: 169.239.216.0/22 maxlen: 24
169.239.216.0/24 maxlen: 24
169.239.217.0/24 maxlen: 24
169.239.218.0/24 maxlen: 24
169.239.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 22 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Validity
Not Before: Mar 11 04:06:56 2026 GMT
Not After : Dec 1 04:06:56 2049 GMT
Subject: CN=69b0ea64-d460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:4e:aa:e5:2e:ed:56:bd:25:e5:58:d0:fa:
0f:1a:1b:8b:fe:39:9c:f3:f1:fc:4c:c5:be:aa:98:
5c:08:0c:cf:e2:a1:da:83:77:62:8a:61:da:8d:d5:
87:07:e7:5d:48:a9:a4:a7:8d:17:6b:e3:a4:cf:61:
d8:c8:43:81:63:64:c0:12:3c:1a:04:ad:40:30:93:
2a:d7:7b:2e:33:ad:66:4d:5f:b9:b0:48:75:ff:58:
ea:d5:10:51:03:2f:c6:a9:29:c2:b6:10:31:3d:19:
1f:45:5f:21:02:17:5c:c5:8a:0b:74:ca:e1:da:c0:
fd:f7:e9:24:a4:93:16:51:a1:0b:10:77:21:39:5c:
e9:51:69:57:3a:05:07:dd:f0:4d:9c:93:ed:1b:13:
4e:3f:72:2c:eb:89:56:24:3b:e9:54:14:22:f7:c1:
e3:74:26:43:2b:54:ca:ba:6a:b7:06:3a:e4:86:e0:
63:03:c4:43:48:92:36:6d:af:5c:51:d6:e5:19:97:
7c:17:cb:25:85:d4:12:b7:45:34:63:b0:50:cb:51:
6f:0a:a5:15:6a:c0:63:fe:11:c7:de:09:08:70:da:
8e:7e:2a:b0:74:16:35:f3:71:3b:bf:01:4e:59:f2:
78:34:5c:e0:d3:52:d0:22:a9:88:7b:cc:85:a9:8c:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:49:AB:78:4E:34:6E:55:16:00:07:1D:31:46:2D:4E:0F:86:50
X509v3 Authority Key Identifier:
keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/C0B861D41CFF11F199815BDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.216.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:ac:5f:bc:83:9e:43:a4:88:b1:95:e9:64:98:10:53:5d:ad:
e9:23:90:5c:6f:0e:86:67:b7:d9:1e:e7:3f:ef:31:27:48:5a:
f0:22:04:e8:0c:fa:3c:3b:69:77:1d:c5:eb:13:12:77:4a:d9:
52:c0:76:de:b4:6c:6e:15:e8:a1:d2:b6:40:eb:12:9d:51:8d:
87:42:3e:d1:3e:fa:66:dc:d1:ee:eb:4e:e5:75:6a:5b:f2:52:
58:35:55:ec:6f:69:41:9b:64:35:b6:40:36:c6:bd:0e:e0:ff:
33:90:24:52:06:66:c4:70:77:78:e5:fe:36:4a:19:01:2d:5a:
a3:f4:3f:ac:54:67:6f:a7:18:c5:7c:92:e4:f8:c1:43:d6:dd:
6a:95:c5:89:87:22:98:94:e9:19:85:b8:0f:36:3a:c9:17:49:
67:11:3f:8e:35:5e:cf:c2:f2:43:15:3a:a8:81:59:74:99:18:
ce:c6:7c:78:50:62:0c:37:5c:0d:7b:d7:a8:cc:da:b4:83:27:
ef:80:95:f7:81:9e:08:3a:73:e1:07:1b:12:57:ed:6e:c0:8d:
a4:5d:be:09:eb:d2:72:31:0f:ae:7b:ce:c4:bb:4c:31:a6:27:
de:df:ad:57:eb:07:6a:31:3e:16:92:c9:99:f4:4b:f8:df:3d:
88:04:15:07
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIxMkRBUjExMC8GA1UEBRMoREYwNjY2OTdCMEEwMzU5ODhDMEVGMzNCNDJCRUVE
N0U3MEE1NTU0QjAeFw0yNjAzMTEwNDA2NTZaFw00OTEyMDEwNDA2NTZaMBgxFjAU
BgNVBAMTDTY5YjBlYTY0LWQ0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC30E6q5S7tVr0l5VjQ+g8aG4v+OZzz8fxMxb6qmFwIDM/iodqDd2KKYdqN
1YcH511IqaSnjRdr46TPYdjIQ4FjZMASPBoErUAwkyrXey4zrWZNX7mwSHX/WOrV
EFEDL8apKcK2EDE9GR9FXyECF1zFigt0yuHawP336SSkkxZRoQsQdyE5XOlRaVc6
BQfd8E2ck+0bE04/cizriVYkO+lUFCL3weN0JkMrVMq6arcGOuSG4GMDxENIkjZt
r1xR1uUZl3wXyyWF1BK3RTRjsFDLUW8KpRVqwGP+EcfeCQhw2o5+KrB0FjXzcTu/
AU5Z8ng0XODTUtAiqYh7zIWpjLSfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUDMFJ
q3hONG5VFgAHHTFGLU4PhlAwHwYDVR0jBBgwFoAU3wZml7CgNZiMDvM7Qr7tfnCl
VUswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMTJELzMzRjRFQjBFNTFCNzExRUM4MjFBOTg0M0Q4QTAxNENFLzN3Wm1s
N0NnTlppTUR2TTdRcjd0Zm5DbFZVcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzN3Wm1sN0NnTlppTUR2TTdRcjd0Zm5DbFZVcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjMyMTJELzMzRjRFQjBFNTFCNzExRUM4MjFBOTg0M0Q4QTAx
NENFL0MwQjg2MUQ0MUNGRjExRjE5OTgxNUJERURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKp79gwDQYJKoZIhvcNAQELBQAD
ggEBAKqsX7yDnkOkiLGV6WSYEFNdrekjkFxvDoZnt9ke5z/vMSdIWvAiBOgM+jw7
aXcdxesTEndK2VLAdt60bG4V6KHStkDrEp1RjYdCPtE++mbc0e7rTuV1alvyUlg1
VexvaUGbZDW2QDbGvQ7g/zOQJFIGZsRwd3jl/jZKGQEtWqP0P6xUZ2+nGMV8kuT4
wUPW3WqVxYmHIpiU6RmFuA82OskXSWcRP441Xs/C8kMVOqiBWXSZGM7GfHhQYgw3
XA1716jM2rSDJ++AlfeBngg6c+EHGxJX7W7AjaRdvgnr0nIxD657zsS7TDGmJ97f
rVfrB2oxPhaSyZn0S/jfPYgEFQc=
-----END CERTIFICATE-----
Generated at Fri Mar 20 23:35:30 2026 by rpki-client