Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/A16239EC8C3D11F1BE7644A3CE1D38B0.roa
File: A16239EC8C3D11F1BE7644A3CE1D38B0.roa (raw, json)
Hash identifier: 0JYmzfGx8sLMXKvehvd/IVdvY+JnR2awowJUxkVlje0=
Subject key identifier: 53:D1:6E:20:D8:A2:E3:76:15:DD:45:EA:39:C7:35:CF:37:D7:54:F4
Certificate issuer: /CN=F3644DAEAR/serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Certificate serial: 07D8
Authority key identifier: 6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
Authority info access: rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/A16239EC8C3D11F1BE7644A3CE1D38B0.roa
Signing time: Thu 30 Jul 2026 17:39:36 +0000
ROA not before: Thu 30 Jul 2026 17:39:21 +0000
ROA not after: Thu 31 Jul 2036 17:39:21 +0000
asID: 37731
IP address blocks: 160.119.224.0/24 maxlen: 24
160.119.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DAEAR, serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Validity
Not Before: Jul 30 17:39:21 2026 GMT
Not After : Jul 31 17:39:21 2036 GMT
Subject: CN=6a6b8c58-9f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:3c:bd:fe:6e:93:84:6b:95:81:9a:f2:9a:
e9:39:6f:15:24:2c:3d:fe:e9:49:48:28:f1:4c:a3:
e0:d7:b4:bc:27:55:5d:cb:cf:23:df:20:4c:2c:d4:
0b:f2:b5:9e:6a:61:8b:6e:12:97:3d:76:d6:0d:84:
48:96:5a:79:cd:e7:49:ba:61:cd:f5:a0:3a:7f:e2:
c8:a5:11:26:8f:bd:93:db:a8:7c:62:c5:5c:b3:43:
e4:76:32:c3:d3:54:73:56:49:53:1f:ec:52:fb:83:
d0:55:b4:91:fc:db:82:17:9b:d2:26:ea:d6:d8:de:
0c:f1:b2:d1:a6:2f:7d:86:4d:97:2a:57:79:41:27:
9c:1d:18:5a:99:c8:e4:cd:83:7c:e2:78:b3:4d:65:
63:34:f7:31:6b:00:36:01:d2:6d:93:f0:6c:1a:b3:
c2:9d:9d:4a:8f:54:2b:d0:7e:7a:98:05:e4:e6:20:
f4:97:26:0a:67:4a:67:91:86:6d:55:58:ea:64:d9:
ad:70:8d:f9:6a:e8:97:91:8a:93:f4:f0:eb:0d:a5:
c0:b5:85:da:4c:4d:39:e6:f7:0f:4a:25:5c:c0:09:
5a:90:5e:0b:75:e0:b5:bc:60:c2:dd:4c:3c:2f:a6:
64:eb:bf:ad:2c:80:50:8b:0d:96:08:d4:f8:91:cf:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D1:6E:20:D8:A2:E3:76:15:DD:45:EA:39:C7:35:CF:37:D7:54:F4
X509v3 Authority Key Identifier:
keyid:6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/A16239EC8C3D11F1BE7644A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.224.0/24
160.119.232.0/24
Signature Algorithm: sha256WithRSAEncryption
95:fe:2b:08:aa:3d:91:be:34:8f:14:11:6f:70:72:3c:a3:a9:
f5:45:81:b2:bc:4b:e0:18:4c:fe:54:d7:d2:0e:4f:4b:c7:50:
ea:dc:88:56:c9:83:a4:ee:c2:54:da:82:7a:01:19:4b:57:d7:
2f:0e:88:26:68:cb:23:2d:41:e8:65:62:30:4d:38:c8:82:19:
02:2f:fb:4b:fc:b4:7b:43:5a:b9:94:47:87:e0:ad:d9:52:e6:
38:a0:f1:5f:70:84:a2:04:26:9c:6a:54:e1:bc:37:09:22:3e:
a0:18:a8:d1:ea:2d:78:d3:a9:cf:c7:c1:d3:f8:d3:16:2e:f9:
c4:1a:c1:18:42:b5:72:7d:3a:32:76:cc:57:42:51:70:44:bd:
d5:65:98:a2:64:04:33:1b:37:e7:d5:5e:bf:9d:ff:bc:11:41:
b6:cf:50:ab:cc:42:91:30:e9:a0:d6:12:9b:93:64:37:92:c4:
96:d2:f1:9b:c0:75:d4:03:8e:09:84:d6:df:c2:57:0c:dd:22:
4b:0a:ca:9f:33:3d:9d:53:ab:4f:51:6f:b9:98:a3:21:5e:7f:
97:5e:42:db:e9:8c:18:a2:d2:53:02:fc:1e:d0:f8:f5:36:a4:
10:bf:22:95:b1:cf:cc:12:3f:2b:5a:46:14:f4:0f:a2:80:6c:
d0:4e:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:11:43 2026 by rpki-client