Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/72DFF09890E111F1A8FB63D7CE1D38B0.roa
File: 72DFF09890E111F1A8FB63D7CE1D38B0.roa (raw, json)
Hash identifier: Hr35II1OcdRzMZ9PKM/C5ju0YOjpxMPw6hm7Xor9osY=
Subject key identifier: 7F:CC:9D:B3:DA:BB:68:59:E6:1E:40:7A:A1:63:F3:5D:CF:34:3C:51
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 1151
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/72DFF09890E111F1A8FB63D7CE1D38B0.roa
Signing time: Wed 05 Aug 2026 15:22:20 +0000
ROA not before: Wed 05 Aug 2026 15:22:15 +0000
ROA not after: Sat 28 Sep 2030 15:22:15 +0000
asID: 203999
IP address blocks: 161.123.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4433 (0x1151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 5 15:22:15 2026 GMT
Not After : Sep 28 15:22:15 2030 GMT
Subject: CN=6a73552c-a2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:67:13:42:a6:3d:6d:44:92:28:f5:13:91:
fb:ba:cb:de:2e:c3:f3:d9:e8:8f:da:98:32:e5:4a:
26:ea:f5:13:9e:28:aa:e0:48:79:fd:86:4a:a6:03:
d2:8e:d7:99:21:b9:6d:6d:3d:bc:6b:be:09:37:a8:
9c:b9:be:b8:60:c4:66:e4:90:d4:a9:f4:ea:d1:b1:
bf:ac:bd:d8:de:86:00:1d:53:fd:47:8f:15:b9:13:
50:e3:b2:f8:cf:34:c1:18:0c:a9:c6:e6:ca:75:0d:
91:d5:9c:15:f2:41:47:69:1d:76:33:93:99:ff:f6:
4b:10:de:77:a6:e9:d5:5b:56:46:53:3e:ed:37:d8:
11:2e:e2:69:b9:ea:e6:4b:1b:54:49:d4:89:d8:1a:
aa:3e:a6:5b:68:4e:b7:76:34:1f:b7:ed:5f:53:bb:
b5:2b:6a:d2:19:27:63:29:4a:24:63:5a:37:4d:e8:
11:ae:1b:d8:32:b4:59:40:91:74:aa:88:50:65:ab:
c4:53:62:05:89:90:b0:71:bf:86:47:8a:42:84:9f:
79:bb:0d:76:e5:f3:94:07:7f:1e:ac:a6:15:6b:7a:
b0:94:35:98:6a:09:1a:83:d2:35:fe:06:ee:87:05:
e9:0f:ca:6e:3d:5d:50:ca:d4:35:ff:4d:af:8c:72:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:9D:B3:DA:BB:68:59:E6:1E:40:7A:A1:63:F3:5D:CF:34:3C:51
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/72DFF09890E111F1A8FB63D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.93.0/24
Signature Algorithm: sha256WithRSAEncryption
58:87:00:44:29:ef:07:c3:f3:60:7b:dc:f8:3f:e9:ef:84:d1:
0e:de:95:c2:ea:59:af:6d:94:b5:f8:5a:9e:7f:69:ff:c0:10:
ef:f0:90:fd:2a:07:e3:71:93:fc:76:79:92:dc:d3:b9:b8:cc:
01:38:e8:71:1c:be:4b:8b:e2:f9:43:9b:83:8f:7b:92:d7:a9:
03:f0:dc:be:9b:61:df:a5:5a:93:15:e8:70:3c:0a:20:1f:8f:
e9:31:1a:c4:4e:29:4b:bb:11:28:a9:02:0c:ec:00:bb:a2:40:
9f:8f:53:8e:df:a1:8d:44:ed:9f:c5:ab:62:49:8e:a8:c4:11:
4e:c8:83:82:46:08:d6:3b:fe:7b:7f:ce:02:9a:3d:72:cc:d6:
d6:bd:f4:7a:f2:5e:1f:f9:ad:ae:91:44:39:d7:f2:80:e9:b9:
69:84:82:12:29:69:4c:7b:d2:f4:29:74:be:af:41:23:f3:bf:
57:af:c1:ac:18:52:97:5a:32:59:7c:4f:bc:c3:4e:68:cf:a6:
6b:e7:f2:6a:b2:16:ef:32:f1:a5:df:df:b0:1d:df:5f:aa:09:
71:f9:5d:a8:1c:5b:f3:0e:fd:2a:06:9f:96:c7:ad:d9:d0:21:
a6:d7:7a:da:8e:ef:6b:1f:46:29:27:4a:65:a7:2b:ea:cd:10:
e7:1b:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:52:53 2026 by rpki-client