Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2E2D703A16FF11F1AE9583DDDAE4EC9C.roa
File: 2E2D703A16FF11F1AE9583DDDAE4EC9C.roa (raw, json)
Hash identifier: +XqUdRwBEEbCB2RNCdbzmLthsuLaA1iKWwIhtLwPD8M=
Subject key identifier: 08:66:49:CC:E0:61:9C:18:3F:C5:F3:2B:08:E3:37:45:F5:EA:0D:BB
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04D3
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2E2D703A16FF11F1AE9583DDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:47:47 +0000
ROA not before: Tue 03 Mar 2026 12:47:43 +0000
ROA not after: Sun 03 Mar 2030 12:47:43 +0000
asID: 29286
IP address blocks: 160.242.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 02:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 3 12:47:43 2026 GMT
Not After : Mar 3 12:47:43 2030 GMT
Subject: CN=69a6d873-4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:20:9d:27:45:85:e4:18:16:0e:96:5b:2c:
34:a1:62:0f:06:54:47:c7:5e:27:ad:c0:c4:b2:5b:
90:3c:47:7f:0b:a5:59:f2:45:5a:4a:b0:9c:36:8d:
44:c4:58:18:ee:f5:db:48:19:b8:a7:80:54:91:4b:
05:1c:c2:9e:c6:df:4e:ec:e3:a9:34:3a:55:26:62:
40:54:24:7c:a6:a6:3f:95:f2:6c:d8:23:dc:8a:21:
61:a5:42:20:41:e9:07:da:fa:5e:67:76:9a:07:0b:
13:1a:66:19:fc:ed:a7:35:a5:af:6a:d6:ee:00:44:
46:95:2d:21:83:6c:50:bf:91:98:9f:29:1c:65:c0:
13:da:9a:b8:2a:af:ce:fa:ce:0b:7f:fa:07:3e:6d:
49:76:13:c8:1d:5b:9a:db:62:a0:f0:80:db:23:5f:
e9:fe:ea:da:58:9e:10:51:3e:74:8f:fa:32:25:72:
a9:12:3d:cd:05:82:30:2c:b1:f0:f8:c2:9b:6b:69:
d7:11:66:a8:76:1d:f2:c3:6c:da:26:f7:c3:6e:e7:
f3:24:4f:f8:46:57:ca:15:a9:7c:80:d8:39:fe:79:
a0:fb:be:6b:0d:22:20:41:bd:e2:ea:23:35:90:ed:
59:b1:f8:68:70:a7:a0:2f:31:b7:c6:c1:99:7b:b4:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:49:CC:E0:61:9C:18:3F:C5:F3:2B:08:E3:37:45:F5:EA:0D:BB
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2E2D703A16FF11F1AE9583DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cb:9d:75:60:f1:e3:17:66:ae:d3:0f:d5:b8:cf:03:9c:77:
75:ef:71:55:bb:18:79:2b:a7:2a:af:db:44:51:53:ef:5e:5c:
b1:e7:7d:44:2e:7c:93:65:0f:de:31:19:3b:b6:1c:27:1e:12:
28:c2:21:9a:0a:e1:47:29:fa:04:d5:59:be:48:e4:bc:73:d7:
9c:06:6a:50:e3:c9:e2:b3:27:65:d3:8e:0c:11:2a:4f:c4:fc:
2a:70:5c:69:0e:fe:99:42:09:0e:e4:e7:bd:03:84:89:7b:f2:
7d:de:9d:ae:10:6e:95:a0:e0:ce:e0:b2:58:ac:36:48:98:99:
a0:1b:2e:48:a4:2e:85:7e:0d:8d:de:28:97:49:27:83:2a:31:
2a:9e:25:58:1b:14:32:c6:cb:93:00:5c:b8:ea:1f:d4:d7:ba:
47:83:9c:cd:2f:91:89:26:b2:0a:6f:c7:44:99:dd:e5:26:75:
0b:eb:ef:d4:ec:83:15:19:97:72:76:cd:e0:b2:4e:f0:b7:7e:
78:d0:d1:75:66:d7:8a:dc:83:d2:a7:de:2b:f6:f2:e8:ad:60:
96:ca:f2:5c:7b:59:dd:ed:4f:a1:94:1c:0a:76:aa:68:39:1f:
1e:df:9b:c7:51:d7:43:94:ce:af:60:6d:12:5d:3b:65:41:2d:
f5:45:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:43:15 2026 by rpki-client