Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/112931EA16FF11F189EF5EDDDAE4EC9C.roa
File: 112931EA16FF11F189EF5EDDDAE4EC9C.roa (raw, json)
Hash identifier: ZgZBnTWvmwDnOvNrILpi9EmkaK0Jj9X9JXHSy8EVaWA=
Subject key identifier: CB:DD:A4:F7:F4:DA:FC:8C:40:08:96:68:DF:66:0A:13:84:94:C7:F7
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04D1
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/112931EA16FF11F189EF5EDDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:46:58 +0000
ROA not before: Tue 03 Mar 2026 12:46:54 +0000
ROA not after: Sun 03 Mar 2030 12:46:54 +0000
asID: 29286
IP address blocks: 160.242.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 02:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 3 12:46:54 2026 GMT
Not After : Mar 3 12:46:54 2030 GMT
Subject: CN=69a6d842-15c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:f4:93:ea:84:ac:3b:59:74:62:ca:f5:5a:
f6:45:32:48:e8:22:2b:96:a1:f4:0e:f9:7a:fe:0f:
a6:39:92:62:15:2c:47:45:07:b5:73:8a:02:88:cc:
77:53:8e:2d:b3:4d:52:ee:e8:8a:5a:13:f4:5d:97:
91:77:70:93:98:62:2a:38:a6:74:3c:e9:31:d4:bb:
62:63:de:99:60:21:44:37:7f:a6:be:35:76:86:b0:
2f:f7:f7:72:71:e2:46:54:4f:83:48:53:f7:8b:36:
91:fa:25:0c:bf:d1:27:a3:05:ef:76:cd:69:c2:3c:
d3:46:9b:f7:40:27:62:cd:a7:79:62:b1:d3:39:63:
f3:20:fc:a5:78:a9:cf:d0:7e:05:e9:3e:8c:2a:43:
e1:5b:f7:73:95:b8:ee:14:5e:de:14:dc:45:24:6c:
7c:19:f3:60:46:ee:20:60:e0:64:96:19:16:dd:c2:
eb:8b:07:00:8e:39:5f:e8:a9:c5:04:81:9a:43:23:
72:c1:87:3a:b4:95:1e:1b:78:8e:bd:88:dd:18:40:
07:f1:18:35:0b:a7:ad:ea:7c:6b:b2:24:6d:28:c9:
09:84:e8:4a:fd:37:27:96:fe:f0:30:9f:c4:0f:2f:
60:d4:fc:4a:11:6d:3f:b2:56:27:95:b3:08:5c:22:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:A4:F7:F4:DA:FC:8C:40:08:96:68:DF:66:0A:13:84:94:C7:F7
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/112931EA16FF11F189EF5EDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.69.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a9:f6:71:55:47:c5:e2:9f:be:ce:da:c1:66:16:5a:d6:36:
e3:85:be:37:37:33:92:50:cb:b9:61:b7:f1:06:b0:36:31:6e:
09:8d:ef:9b:29:e3:4a:e5:ce:05:9d:cf:bf:b8:4a:75:be:c3:
d0:0f:2c:55:f6:7d:96:ec:56:8e:1c:f7:8b:01:d8:6b:3f:1b:
8b:2c:04:11:d6:e2:27:7a:76:fa:94:f6:50:0c:56:23:01:33:
0d:e6:62:4e:a1:49:89:b8:b2:a3:70:26:f3:31:a6:7e:9e:54:
28:8b:0a:af:8b:b1:7e:c4:d8:05:df:a7:1d:05:36:c6:c1:60:
4e:5a:0d:64:1c:ce:9a:b1:e5:29:80:83:e8:04:65:26:21:83:
99:c8:fd:de:03:db:4c:63:cd:82:00:f0:e9:fa:0d:6a:b5:ab:
cd:76:0c:00:11:48:91:f4:3c:59:76:49:b3:98:43:bb:7d:a9:
46:96:4e:1c:9b:b2:89:e9:91:aa:a4:c0:86:fa:db:b0:15:33:
d3:d7:e9:3c:be:d0:da:6d:e5:11:e1:a2:f0:1b:8e:fb:ae:01:
3d:ea:38:fe:fc:3b:f5:5f:26:bf:59:1f:fb:35:1b:cd:c7:26:
8c:57:3f:23:74:d8:0d:fa:40:d9:89:07:a2:da:10:09:8d:87:
ce:29:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:43:13 2026 by rpki-client