Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/6FF913CA16FF11F1A85261DFDAE4EC9C.roa
File: 6FF913CA16FF11F1A85261DFDAE4EC9C.roa (raw, json)
Hash identifier: iQniiQsV4FPnDcQIFs8/PL97KT4obDA4lMn2n96y9AE=
Subject key identifier: D1:A7:7D:15:2D:AD:C0:C5:A7:E7:DC:9D:31:88:7E:80:4E:21:9E:6A
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04D8
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/6FF913CA16FF11F1A85261DFDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:49:38 +0000
ROA not before: Tue 03 Mar 2026 12:49:33 +0000
ROA not after: Sun 03 Mar 2030 12:49:33 +0000
asID: 29286
IP address blocks: 160.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 02:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 3 12:49:33 2026 GMT
Not After : Mar 3 12:49:33 2030 GMT
Subject: CN=69a6d8e2-b650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:b9:8c:c0:8e:97:5b:2d:15:8a:0a:00:c5:
cf:cf:26:67:9d:34:48:ca:4c:b2:cc:fb:3d:ec:35:
0d:2b:c1:74:04:12:e7:04:7b:15:06:df:4c:da:e0:
c5:aa:03:a7:ae:3b:ce:a2:8e:73:c2:9f:aa:68:31:
58:e8:69:b6:cb:7a:e4:ed:be:1a:23:43:d1:b6:64:
2e:63:58:82:6d:61:67:c5:5c:37:8b:cf:13:16:81:
46:81:17:d1:8e:fa:fa:91:0c:eb:f0:01:cc:e5:49:
cd:a5:45:59:5b:9e:b1:3e:7d:bd:d2:c8:92:c1:8c:
75:e8:e3:23:21:b0:c2:a0:ec:a2:18:6d:4a:2e:d1:
51:dc:e7:a2:be:4a:3d:df:69:4b:9d:50:d0:bb:18:
13:86:75:e7:0f:70:43:65:5a:03:d8:1c:89:c4:0d:
1c:08:28:90:57:a4:e5:21:75:6c:18:7a:2a:6a:39:
c5:97:3f:50:72:dd:92:ac:d7:35:4e:8f:02:66:3e:
b7:ef:7a:38:4e:14:b7:82:54:67:5e:6f:ed:eb:7a:
67:e9:34:f9:fa:76:f4:6d:b3:62:bc:2d:34:d6:13:
3c:26:36:dd:b7:73:7f:7c:52:98:12:a8:63:72:e2:
4e:a9:62:20:e2:05:c2:8c:95:45:e3:9c:8a:cd:28:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:7D:15:2D:AD:C0:C5:A7:E7:DC:9D:31:88:7E:80:4E:21:9E:6A
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/6FF913CA16FF11F1A85261DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
be:33:5a:5a:01:e8:4b:65:84:a5:a8:87:7f:a0:5c:1e:e3:f4:
04:f3:32:45:5f:4a:36:57:63:14:aa:7b:5b:94:24:5a:8f:b5:
52:dd:1d:7e:70:2a:5c:11:bc:10:95:e4:64:5c:ef:ec:d6:38:
29:08:31:9b:e7:ff:9a:61:c9:04:7e:57:ad:c2:98:91:1b:87:
4b:aa:c7:47:6a:3a:c6:91:14:bd:63:78:91:9e:1b:15:0a:2e:
30:cd:bb:19:52:14:c0:e3:95:2b:a5:81:d8:98:f0:94:ad:92:
73:9c:72:67:05:ff:ba:cf:09:39:a6:41:5a:0a:7b:33:9e:d3:
db:bb:5e:61:2b:42:45:60:db:82:31:c7:04:b6:16:6d:3d:80:
22:9c:f1:09:75:3a:4f:27:48:77:99:f8:58:5e:5c:a1:3c:be:
f4:89:ef:88:40:42:22:6f:73:60:07:29:58:dc:dd:87:f6:ff:
19:54:2d:50:54:5d:df:f5:3a:cc:cb:30:21:a4:81:cc:82:98:
3d:68:16:d2:50:b5:a9:21:19:66:3e:65:ad:26:b9:eb:e1:1e:
79:0e:00:00:c5:15:82:41:7c:29:27:91:a8:e0:a1:61:96:58:
6b:ec:af:6b:80:b4:0e:71:a7:73:a0:74:d5:43:61:70:ee:c2:
4a:57:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:43:15 2026 by rpki-client