Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/4A1F521C21AF11F1AFF9D3ADDAE4EC9C.roa
File: 4A1F521C21AF11F1AFF9D3ADDAE4EC9C.roa (raw, json)
Hash identifier: EgoFvPh8BZLqAUs5ARxtz1AMfn7yN93szVvusnSBYKY=
Subject key identifier: A7:AD:2E:69:88:D6:EB:40:12:93:81:DB:EB:B2:DB:07:D9:7E:B1:D1
Certificate issuer: /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial: 0996
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Authority info access: rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/4A1F521C21AF11F1AFF9D3ADDAE4EC9C.roa
Signing time: Tue 17 Mar 2026 03:13:38 +0000
ROA not before: Tue 17 Mar 2026 03:13:33 +0000
ROA not after: Mon 17 Mar 2036 03:13:33 +0000
asID: 328209
IP address blocks: 160.119.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F144CAR, serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Validity
Not Before: Mar 17 03:13:33 2026 GMT
Not After : Mar 17 03:13:33 2036 GMT
Subject: CN=69b8c6e1-d89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:83:b4:78:0c:4f:ca:f7:50:35:73:43:e9:
3d:de:c6:79:5b:e4:1d:1a:26:3c:01:48:54:6b:dd:
63:51:73:14:34:73:f2:91:67:c6:69:25:60:df:79:
55:9d:67:f8:6c:3e:f1:89:29:ca:51:d5:f1:ef:21:
06:8d:ee:7b:66:2b:36:eb:46:69:97:2f:25:d2:8e:
c8:1e:f7:85:69:8e:7f:55:dc:54:ba:d9:69:34:9e:
2e:3c:aa:63:2d:33:79:d8:e6:96:0d:05:fa:d8:0b:
8c:58:03:62:de:2e:aa:74:99:06:4d:e9:4a:9f:9e:
6f:96:bc:ed:6a:fc:7a:8a:b9:8c:00:f4:26:a1:a4:
76:b5:7d:82:0e:2e:f9:07:63:fb:47:20:64:71:00:
25:98:e5:b8:56:46:9e:f5:cd:40:9c:d3:cb:15:0a:
fb:f6:d2:49:54:56:52:48:f2:cf:98:ef:34:d6:f8:
53:a2:82:e0:11:86:35:06:3a:ad:17:d7:44:58:85:
04:8e:f8:5e:60:31:9d:5b:b8:d7:05:7d:73:c5:de:
e7:e7:98:35:fe:b9:12:0a:3e:f0:ff:07:f2:07:58:
de:70:e5:ba:5c:36:6f:cd:ae:32:24:1a:99:ee:ee:
14:9b:07:81:ce:74:0a:fb:43:68:2e:bf:0e:a5:c6:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:2E:69:88:D6:EB:40:12:93:81:DB:EB:B2:DB:07:D9:7E:B1:D1
X509v3 Authority Key Identifier:
keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/4A1F521C21AF11F1AFF9D3ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.97.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4c:cf:aa:13:ef:8f:77:40:37:1e:1d:8f:db:a0:9b:26:6a:
47:e1:b7:cf:b7:b8:c2:78:13:cb:d1:d8:a7:ad:57:18:69:d8:
0a:a2:77:62:e2:c3:16:50:f9:e5:88:5a:95:02:51:9e:c3:70:
4f:10:92:48:be:11:42:5e:42:59:dc:db:30:25:b0:2f:81:f8:
c1:6c:80:d5:fb:78:96:81:c8:2f:80:65:6e:3f:6d:29:6e:d6:
f4:6e:32:ab:a7:43:e9:b0:82:04:bc:49:6d:8d:f3:47:e5:f8:
0c:6f:be:90:cb:ae:d1:9b:5c:89:6b:f4:0c:76:cd:d0:60:f7:
64:32:bb:d8:60:c4:f5:d3:ee:1f:39:6c:47:c4:b0:f6:d9:2e:
b7:5e:12:9f:59:4a:eb:90:ce:7d:0d:88:f9:bf:19:63:29:85:
1b:7c:07:e6:52:4b:37:93:df:5c:ca:48:c4:0e:99:0e:01:0f:
27:e0:d0:e1:8f:f7:e1:5f:4c:99:29:58:f8:8f:a3:cd:c1:a3:
8a:73:08:47:42:07:b5:1b:24:7b:dc:19:77:a7:78:dc:9b:1f:
96:83:ef:2a:f1:79:ea:b3:4d:b4:ae:14:64:62:7a:f7:55:b6:
92:ff:1a:3f:86:3b:7b:ad:a2:e4:6d:a7:d2:8a:99:4f:ae:f2:
06:3e:a3:a3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjE0NENBUjExMC8GA1UEBRMoQkZGMTBENzNBQTgxMzhEQ0UzNjc0MkE3NjZGOTY1
MjM4NTlFNDg3QzAeFw0yNjAzMTcwMzEzMzNaFw0zNjAzMTcwMzEzMzNaMBgxFjAU
BgNVBAMTDTY5YjhjNmUxLWQ4OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDefIO0eAxPyvdQNXND6T3exnlb5B0aJjwBSFRr3WNRcxQ0c/KRZ8ZpJWDf
eVWdZ/hsPvGJKcpR1fHvIQaN7ntmKzbrRmmXLyXSjsge94Vpjn9V3FS62Wk0ni48
qmMtM3nY5pYNBfrYC4xYA2LeLqp0mQZN6Uqfnm+WvO1q/HqKuYwA9CahpHa1fYIO
LvkHY/tHIGRxACWY5bhWRp71zUCc08sVCvv20klUVlJI8s+Y7zTW+FOiguARhjUG
Oq0X10RYhQSO+F5gMZ1buNcFfXPF3ufnmDX+uRIKPvD/B/IHWN5w5bpcNm/NrjIk
Gpnu7hSbB4HOdAr7Q2guvw6lxlMNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUp60u
aYjW60ASk4Hb67LbB9l+sdEwHwYDVR0jBBgwFoAUv/ENc6qBONzjZ0KnZvllI4We
SHwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxNDRDLzkwMzAxNTdDRDJFNTExRTk5QTRDRTM2OEY4QUVBMjI4L3ZfRU5j
NnFCT056alowS25admxsSTRXZVNIdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3ZfRU5jNnFCT056alowS25admxsSTRXZVNIdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkYxNDRDLzkwMzAxNTdDRDJFNTExRTk5QTRDRTM2OEY4QUVB
MjI4LzRBMUY1MjFDMjFBRjExRjFBRkY5RDNBRERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgd2EwDQYJKoZIhvcNAQELBQAD
ggEBABdMz6oT7493QDceHY/boJsmakfht8+3uMJ4E8vR2KetVxhp2Aqid2LiwxZQ
+eWIWpUCUZ7DcE8Qkki+EUJeQlnc2zAlsC+B+MFsgNX7eJaByC+AZW4/bSlu1vRu
MqunQ+mwggS8SW2N80fl+AxvvpDLrtGbXIlr9Ax2zdBg92Qyu9hgxPXT7h85bEfE
sPbZLrdeEp9ZSuuQzn0NiPm/GWMphRt8B+ZSSzeT31zKSMQOmQ4BDyfg0OGP9+Ff
TJkpWPiPo83Bo4pzCEdCB7UbJHvcGXeneNybH5aD7yrxeeqzTbSuFGRievdVtpL/
Gj+GO3utouRtp9KKmU+u8gY+o6M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:27:07 2026 by rpki-client