Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/0D29923C21AF11F189E0F7ABDAE4EC9C.roa
File: 0D29923C21AF11F189E0F7ABDAE4EC9C.roa (raw, json)
Hash identifier: 8ZikLGmt4ec0ORFNQUxDPWAGIabOlnW5dc7hSnlXZeU=
Subject key identifier: CB:CC:2E:6D:F6:14:D6:EE:16:92:E3:C9:BB:C1:AA:55:96:7F:6F:CC
Certificate issuer: /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial: 0994
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Authority info access: rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/0D29923C21AF11F189E0F7ABDAE4EC9C.roa
Signing time: Tue 17 Mar 2026 03:11:55 +0000
ROA not before: Tue 17 Mar 2026 03:11:50 +0000
ROA not after: Mon 17 Mar 2036 03:11:50 +0000
asID: 328209
IP address blocks: 160.119.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F144CAR, serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Validity
Not Before: Mar 17 03:11:50 2026 GMT
Not After : Mar 17 03:11:50 2036 GMT
Subject: CN=69b8c67b-d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:30:6b:be:58:70:1f:d6:d2:23:ce:68:04:
8e:32:b6:17:22:95:32:bc:8c:a1:2a:a1:1b:00:49:
4e:1b:51:bf:c8:d2:a2:1d:d4:47:37:6e:d4:41:e4:
47:bf:40:d9:27:94:b0:90:07:57:0a:76:86:7a:33:
c4:0a:26:05:47:05:28:6b:45:3b:19:f9:4c:8b:b4:
f0:84:26:d4:1c:f5:b3:4f:b9:6d:86:ac:27:ac:ff:
7e:11:f6:3f:0b:80:33:d2:58:67:98:fe:6d:32:b8:
b0:a3:45:9e:ed:dd:a0:5f:a5:c1:68:fb:37:63:34:
2a:4f:5a:76:fa:c5:54:02:4e:7a:c6:4f:63:a8:75:
60:dd:6f:58:70:c1:de:07:e4:3d:a6:a7:16:85:79:
0c:38:96:27:68:9b:a1:2e:ef:6c:f4:cf:48:d6:8a:
f3:66:6c:3c:ea:63:88:8d:dc:69:85:4f:98:02:42:
4f:a6:b9:d8:6c:5d:54:11:b0:58:0d:2f:57:f9:9a:
54:65:bd:ac:39:d9:3a:ac:81:3c:62:f1:83:af:e0:
1a:ab:68:72:7a:99:d0:78:50:a7:ba:91:dc:6d:2c:
98:b1:1e:f7:fc:bb:b6:0c:4d:1c:bb:ed:15:53:a4:
03:16:8a:be:57:a3:39:82:56:c4:a9:89:b5:82:c1:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CC:2E:6D:F6:14:D6:EE:16:92:E3:C9:BB:C1:AA:55:96:7F:6F:CC
X509v3 Authority Key Identifier:
keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/0D29923C21AF11F189E0F7ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1f:99:51:7a:7b:ab:ea:44:c3:9f:36:4a:8e:ed:df:b4:9f:
50:63:ea:8c:38:64:a5:66:43:d8:98:b4:c4:fd:e5:0b:c5:44:
7f:fc:79:ce:40:2b:51:d9:06:a5:8f:5d:a3:d8:92:2f:c3:cd:
75:66:76:25:bb:97:22:e3:9e:b8:94:7a:c5:6b:91:62:15:17:
1d:fe:60:f0:74:10:82:e9:66:1b:47:54:b4:ac:19:55:2f:48:
3d:be:9f:d1:51:df:3c:f9:5f:db:0a:fb:7c:9d:c5:fb:42:e5:
81:dd:0d:bd:21:76:8d:68:ad:f5:37:fe:73:33:87:8b:b0:4e:
01:1a:02:33:55:dd:32:2b:3f:ae:67:09:49:f3:ed:03:14:39:
15:52:29:f1:2e:dd:1f:3b:b1:5c:cc:a2:4c:18:b1:9f:1d:c5:
09:9c:54:88:d5:4d:49:d0:fc:e3:f5:96:93:c8:cc:48:21:16:
a0:0b:c9:74:f8:d6:3c:f8:97:d8:d3:33:b5:3d:09:8d:c6:ac:
50:0b:9c:17:92:67:0f:77:c5:a4:74:10:85:fe:47:6b:26:51:
aa:e1:70:8e:6d:10:8c:e3:1a:0d:72:bf:c5:a4:bb:f2:fc:f3:
f1:2b:ba:58:91:0f:9d:9a:60:b0:75:2e:e7:04:42:16:6e:c6:
75:de:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:35 2026 by rpki-client