Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/160BFC16162711F18AE341B0DAE4EC9C.roa
File: 160BFC16162711F18AE341B0DAE4EC9C.roa (raw, json)
Hash identifier: 4jZHgz0VtlmAHNZL2KAEYFRJ2+MvIFFRx8eeV16fTDM=
Subject key identifier: E6:06:B5:E5:73:60:80:FE:AC:3F:2B:5F:56:18:52:17:94:79:EA:0E
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B19
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/160BFC16162711F18AE341B0DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 11:00:56 +0000
ROA not before: Mon 02 Mar 2026 11:00:51 +0000
ROA not after: Wed 31 Dec 2036 11:00:51 +0000
asID: 63199
IP address blocks: 165.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Mar 2 11:00:51 2026 GMT
Not After : Dec 31 11:00:51 2036 GMT
Subject: CN=69a56de7-e455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:e1:a4:bf:49:72:c3:57:10:3c:d1:d7:45:
83:72:cc:e8:7f:7a:4a:88:b7:55:7d:7d:42:d7:f2:
fe:36:14:3c:03:08:ca:c6:8f:73:91:b4:89:51:b6:
e3:94:9d:ea:df:30:b2:4e:13:9b:7b:65:13:bf:24:
f0:78:93:76:44:d1:40:71:45:7e:10:82:6a:e6:a0:
16:51:ad:15:ec:79:c4:66:82:71:7d:a7:84:75:38:
d4:b2:77:7a:85:c3:40:65:b1:fc:5f:f7:b2:ee:1f:
72:5e:4f:4b:d2:8a:26:d8:57:cf:6b:cb:fa:cf:80:
9e:a2:ac:15:b5:a8:b2:99:12:6d:17:c3:fa:f6:ce:
23:79:49:43:09:f7:04:4d:23:a9:b3:4d:32:99:1d:
29:24:a7:16:61:a3:7d:ec:13:c8:a5:e2:a2:62:57:
f9:78:7e:6b:9c:26:97:54:1c:0f:3a:e3:6f:2a:e7:
05:84:a1:b5:3c:2a:cb:5f:83:f0:bb:65:b2:58:66:
c2:11:53:c4:ef:de:08:fb:4d:c9:af:ba:49:36:62:
6b:b1:9f:c4:92:4b:46:0c:7e:cc:f7:95:6f:06:88:
e2:48:9d:ec:96:4f:62:3d:63:dc:da:b1:b9:d2:d4:
cc:5e:20:1b:2a:56:a9:d5:39:6b:46:fc:0c:e2:6e:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:06:B5:E5:73:60:80:FE:AC:3F:2B:5F:56:18:52:17:94:79:EA:0E
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/160BFC16162711F18AE341B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:23:66:82:38:60:87:b3:8b:06:0b:fd:2c:ad:28:97:98:a7:
56:b7:b7:e3:9f:6e:2d:c0:cd:b0:33:95:92:e9:6c:00:21:4c:
b4:53:66:95:1e:bb:bd:e8:12:66:10:e0:2b:ce:1f:32:e1:de:
5a:3b:98:b2:24:3e:e4:06:f2:72:3d:ad:88:58:1f:5d:57:ff:
49:0a:f6:30:b7:8a:a4:e0:59:79:42:f0:08:c3:84:d6:d9:c6:
ab:3c:ae:24:ff:5b:4c:c8:c9:c9:d5:5f:09:59:8c:53:9d:06:
ee:fa:d8:dd:f7:07:24:ea:ef:b1:93:37:a4:f5:64:a2:d6:a3:
83:99:a5:81:db:d4:19:36:be:cc:21:86:73:90:02:97:d1:4f:
e7:9d:5d:8d:81:ed:2a:e9:51:5b:ea:7d:f4:d3:a1:99:c3:c6:
71:59:a2:7f:91:fa:49:99:26:af:27:91:3e:50:78:79:6e:ad:
92:e8:95:b4:e9:c6:c7:98:a7:74:be:b5:08:e9:09:a9:ee:da:
7d:12:92:d3:62:f2:a5:2c:ff:af:46:93:55:d3:31:58:f3:40:
36:56:61:7b:b9:71:85:35:75:07:ba:92:fa:62:35:1b:7c:12:
ce:03:5f:51:92:c1:68:7b:c4:e9:b3:57:d6:98:0c:20:76:bf:
2d:b0:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:43:42 2026 by rpki-client