Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FF4CBEC290E011F1B66C27D5CE1D38B0.roa
File: FF4CBEC290E011F1B66C27D5CE1D38B0.roa (raw, json)
Hash identifier: 3nUlnStc053A3/qU+9XpVK+MOle9jVYs2gK6f8+zhVo=
Subject key identifier: EE:22:09:D6:25:79:C9:EF:97:85:D7:A5:91:88:DE:21:49:67:2D:0D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 114E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FF4CBEC290E011F1B66C27D5CE1D38B0.roa
Signing time: Wed 05 Aug 2026 15:19:06 +0000
ROA not before: Wed 05 Aug 2026 15:19:02 +0000
ROA not after: Sat 28 Sep 2030 15:19:02 +0000
asID: 203999
IP address blocks: 161.123.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4430 (0x114e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 5 15:19:02 2026 GMT
Not After : Sep 28 15:19:02 2030 GMT
Subject: CN=6a73546a-6b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:50:21:4e:80:d3:2e:5c:f3:ec:4b:90:68:
33:47:0d:74:06:45:4d:d2:7f:f0:7e:68:8d:56:6a:
17:2f:a0:9e:a8:8f:d2:89:86:fc:18:5a:ee:a2:42:
b7:b5:39:7a:54:87:6a:44:2b:fd:6f:95:12:0e:45:
81:89:ad:03:0d:41:34:07:47:71:ea:49:35:fa:7f:
49:a5:48:3e:fd:8d:f8:7d:5f:fe:e5:4b:5f:87:a5:
8c:e3:5a:2f:0e:01:cd:a1:ef:d6:15:a7:d8:75:90:
bb:e1:b9:2c:37:68:3d:a7:ad:8e:69:1b:48:78:5c:
f2:ad:72:41:ad:d9:0c:d1:c2:43:91:df:68:05:0e:
40:e1:18:63:ff:39:c3:64:45:1e:1f:26:fe:1d:46:
32:02:b8:17:42:94:85:28:d0:8a:4a:b5:7f:ba:08:
e7:41:00:6d:bd:44:c2:d3:cb:84:9c:68:56:e5:c8:
53:43:05:79:25:2b:1c:98:12:87:d0:23:7b:ea:2f:
9e:01:dc:94:c3:a7:f6:be:e7:68:35:4c:4d:db:3d:
0d:9f:9b:1b:c8:61:9a:e9:fe:5e:32:55:12:f4:30:
25:72:c9:0d:84:53:62:41:e9:5c:90:15:72:fe:8c:
6c:82:b6:1e:b3:9e:f5:81:42:d2:1f:02:30:f3:20:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:09:D6:25:79:C9:EF:97:85:D7:A5:91:88:DE:21:49:67:2D:0D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FF4CBEC290E011F1B66C27D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6a:ca:15:f0:86:c9:c2:09:e1:2a:30:11:b7:f9:ff:cf:6b:
e3:5b:ac:62:de:a1:ab:b3:b5:53:2b:cc:da:93:e6:81:c7:a9:
65:81:24:a2:c8:3b:73:2e:cb:ce:e1:fe:73:b2:92:24:96:54:
d4:46:97:27:15:3a:80:f8:19:88:dc:86:22:9f:9f:60:df:91:
9f:90:d2:ec:66:b2:64:1d:b9:b4:d3:39:6e:24:38:75:2b:58:
ee:c2:3d:6b:a6:2f:d2:f7:c6:e7:8b:af:a7:a9:5c:be:c5:a6:
48:87:ed:27:bd:6c:f5:a8:15:f5:ac:92:ea:93:7d:c7:47:c9:
d6:d6:c9:e6:5c:fa:51:07:d5:24:7d:73:bf:7c:ec:3f:77:5a:
2f:d7:bf:a5:ee:0f:43:d3:f6:da:83:99:40:fd:b6:9f:c5:ef:
34:5c:98:c5:1a:02:00:88:33:aa:70:7c:f7:9e:1b:c3:6a:65:
92:cf:84:24:8a:b7:f5:d3:26:76:28:8c:3e:0c:9c:27:04:8f:
60:44:c2:7a:d0:45:31:e4:c1:60:61:c8:d1:72:6c:2b:e3:ca:
bf:3b:48:0f:d8:91:df:2a:72:62:0d:dc:06:fe:96:84:3f:21:
24:f6:4f:57:1a:cd:86:22:a0:4a:4d:48:1c:78:02:25:5e:6d:
16:af:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:53:01 2026 by rpki-client