Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/CC58F7C422BD11F183461ADFDAE4EC9C.roa
File: CC58F7C422BD11F183461ADFDAE4EC9C.roa (raw, json)
Hash identifier: DWZrC4+ZCy9WarSzpXK13RhrAoH94T/igwaBF75lQlY=
Subject key identifier: A4:FC:4E:AB:D3:9F:54:CE:49:98:EC:C6:FA:05:B9:4B:76:0E:04:51
Certificate issuer: /CN=F36B9F4BAR/serialNumber=7B4E00490D40841240B3A676B6E328A6EFD0FDA2
Certificate serial: 09FA
Authority key identifier: 7B:4E:00:49:0D:40:84:12:40:B3:A6:76:B6:E3:28:A6:EF:D0:FD:A2
Authority info access: rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/CC58F7C422BD11F183461ADFDAE4EC9C.roa
Signing time: Wed 18 Mar 2026 11:30:00 +0000
ROA not before: Wed 18 Mar 2026 11:29:55 +0000
ROA not after: Tue 18 Mar 2036 11:29:55 +0000
asID: 2018
IP address blocks: 155.232.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAR, serialNumber=7B4E00490D40841240B3A676B6E328A6EFD0FDA2
Validity
Not Before: Mar 18 11:29:55 2026 GMT
Not After : Mar 18 11:29:55 2036 GMT
Subject: CN=69ba8cb8-1f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:81:3b:c5:27:71:54:c8:0b:d7:b4:23:2d:
80:91:02:f7:b8:7e:7c:71:63:ba:48:b1:91:ea:ab:
59:5e:e5:44:f5:28:64:4c:32:2e:c4:3b:8b:26:e6:
d5:23:98:af:2f:95:41:e9:3d:d6:f1:9e:0d:48:19:
07:5a:ba:c9:5d:42:b2:ba:3f:9a:41:a9:bd:3a:88:
b1:fd:df:7a:11:ec:eb:40:cb:a8:95:f3:46:c9:6b:
39:f7:2c:c8:cb:92:e9:8f:96:0f:3f:2a:60:03:37:
20:da:88:af:ce:6e:2a:f5:0d:9d:5e:1f:1e:74:06:
e9:14:b2:eb:01:bc:a0:07:9a:4d:6e:88:72:d1:be:
7a:29:a1:c6:11:53:b3:68:03:a9:9f:3c:bc:2b:6f:
b2:e9:00:24:52:1c:71:be:d2:41:d8:22:be:b6:32:
05:5c:9d:79:ef:db:fb:73:8d:12:8e:9a:5e:d0:95:
9e:3e:89:eb:4f:83:bd:6f:d3:8f:ea:2a:71:ca:51:
1b:e3:49:bd:bc:fc:f8:1a:0e:1c:c3:cd:0c:c0:d6:
92:b8:3c:a1:9c:f0:5d:92:2a:f8:b7:19:c5:cb:5c:
8e:d2:d1:ce:30:0a:42:86:42:bb:77:bf:66:21:cc:
1c:97:16:f7:61:78:34:6a:ea:ab:3d:1f:d1:5d:0e:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:4E:AB:D3:9F:54:CE:49:98:EC:C6:FA:05:B9:4B:76:0E:04:51
X509v3 Authority Key Identifier:
keyid:7B:4E:00:49:0D:40:84:12:40:B3:A6:76:B6:E3:28:A6:EF:D0:FD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/CC58F7C422BD11F183461ADFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:a7:e2:db:fb:18:b6:20:90:ac:66:dc:37:f7:4d:5f:54:81:
06:d1:8a:b5:37:9c:c8:2b:af:71:94:b5:f4:47:6f:b8:ac:68:
2e:35:1f:bd:95:1d:9c:17:c5:de:ab:cc:aa:99:da:69:b5:9f:
9a:73:85:05:8d:4c:ff:7a:29:93:b4:3e:63:e6:e7:b5:38:19:
5b:c0:74:b9:64:9d:b3:51:6b:5e:db:c8:35:de:09:52:6f:06:
1d:a9:59:ab:c1:1d:17:8e:ef:7b:c3:81:25:91:f5:be:52:0b:
0c:02:35:85:c8:ec:37:3c:84:5e:a3:98:e1:c8:a2:11:ca:68:
22:bc:48:62:c3:d9:f6:1e:10:62:d8:da:16:d3:9a:6c:94:42:
ce:5b:fe:ae:bf:8f:2c:71:62:0d:22:50:5b:a2:31:72:ed:e2:
54:0e:3f:f0:53:b8:08:f3:1b:4b:40:a3:35:63:08:d3:2b:0a:
1f:11:16:30:73:a6:de:d4:16:b3:59:cd:df:e3:b1:e5:cc:3d:
d9:13:ae:87:c6:6b:48:83:eb:6f:e6:18:43:dd:11:77:8d:52:
d7:59:fa:09:26:5b:cf:76:01:a3:54:35:73:bc:a6:e5:12:99:
6a:7b:c7:a0:94:c7:d1:f5:01:b1:a5:c5:0a:e9:ad:55:28:1d:
0b:c9:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:24 2026 by rpki-client