Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/EF7CA1661BC811F191747ABCDAE4EC9C.roa
File: EF7CA1661BC811F191747ABCDAE4EC9C.roa (raw, json)
Hash identifier: 8zPcIcmHlnwPuwO0hTXiAKZ37wG3vRTUhN1D1Rum7GA=
Subject key identifier: E2:DE:F4:54:83:18:22:CC:E0:28:A0:5F:B3:00:DD:19:C6:56:86:E8
Certificate issuer: /CN=F36C65C6AR/serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
Certificate serial: 06FE
Authority key identifier: 1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Authority info access: rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/EF7CA1661BC811F191747ABCDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 15:02:05 +0000
ROA not before: Mon 09 Mar 2026 15:02:01 +0000
ROA not after: Sun 09 Mar 2036 15:02:01 +0000
asID: 327901
IP address blocks: 45.220.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AR, serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
Validity
Not Before: Mar 9 15:02:01 2026 GMT
Not After : Mar 9 15:02:01 2036 GMT
Subject: CN=69aee0ed-aaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:e3:24:13:a8:fe:b7:ed:b3:62:20:09:7b:
83:29:5b:fa:d4:ac:dc:d6:52:5e:b8:33:d8:44:2b:
74:ea:4a:59:ba:7a:bb:fd:ba:0c:7e:0d:b4:3a:27:
b5:e1:f6:da:f4:59:4a:c5:4e:cc:19:b3:b5:d8:d6:
1b:fa:2a:d1:40:f3:4b:c4:c8:82:39:ff:e5:29:cc:
74:5d:f0:e7:0c:54:7e:40:19:18:c2:4e:e9:89:ab:
f0:a3:05:5d:28:83:0c:d5:1a:53:30:28:e1:16:41:
be:e8:bc:18:8c:f8:0f:8d:e8:c8:ec:c5:30:2c:e8:
f0:72:72:f3:1f:db:eb:0a:9d:45:59:ed:32:5c:4b:
82:0a:99:c0:aa:e1:9d:e4:4e:b5:b8:fd:ba:31:9f:
3a:f5:0a:b6:87:5a:65:de:b8:dd:2d:ab:cb:a9:cd:
73:52:14:f3:9f:2a:f6:9c:63:67:e4:d2:07:69:71:
ea:c4:d4:99:eb:15:aa:69:06:b4:8c:58:0f:bf:d3:
33:b9:03:49:47:9f:d3:75:2a:18:17:11:01:58:17:
0d:6c:56:98:ce:19:dd:d6:c8:de:c1:c6:3d:ba:e9:
d9:6c:01:17:ff:d7:91:a7:b2:4a:05:13:2d:59:66:
37:3a:31:4c:e1:92:de:14:86:e0:bb:41:e2:49:4e:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:F4:54:83:18:22:CC:E0:28:A0:5F:B3:00:DD:19:C6:56:86:E8
X509v3 Authority Key Identifier:
keyid:1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/EF7CA1661BC811F191747ABCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.220.0.0/19
Signature Algorithm: sha256WithRSAEncryption
10:77:cf:90:45:4d:b2:44:25:c9:81:d3:b6:c2:40:60:ad:3c:
35:f7:39:59:60:e9:ee:bf:1b:46:f4:9a:04:7a:12:8c:12:41:
fc:4f:22:ed:67:fb:07:fd:e1:f2:15:a2:0c:9b:93:99:a3:a3:
3c:f5:93:e5:e3:e2:e2:05:b7:67:09:8f:7f:f9:27:91:b9:5b:
64:36:4d:33:47:9c:42:b2:7d:9b:e1:aa:14:de:41:0c:90:43:
45:f5:86:ad:1e:09:41:9e:4d:7e:36:e3:7c:55:40:eb:df:95:
c5:86:17:f9:65:58:52:e7:24:24:08:cd:10:e5:54:bb:61:2f:
e1:c4:ef:5c:7b:c9:df:0a:df:02:f7:93:53:be:88:5f:cd:21:
79:af:4f:8e:38:a3:b3:23:44:18:48:85:0f:9a:0e:6e:22:3f:
e3:ca:f8:e6:3f:38:6d:98:61:ac:6e:5d:d3:47:bc:7e:9a:99:
1d:ab:c6:6d:f9:6b:37:8a:18:72:8c:2a:b5:a2:cc:16:70:73:
8f:a0:7b:1c:89:93:d2:64:4a:d6:b1:c4:5d:82:c9:49:19:72:
56:45:80:3a:68:b9:b5:ca:e6:f1:6b:77:e5:51:a8:58:81:69:
b1:f8:2d:bb:dd:3e:2b:7d:a5:de:a4:60:cf:9f:ca:c8:86:45:
46:f6:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:47:18 2026 by rpki-client