Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC6C8552853711F1846544B9CE1D38B0.roa
File: AC6C8552853711F1846544B9CE1D38B0.roa (raw, json)
Hash identifier: XgZyKG8kqXBiGElsDyPdAtbdd9XDHvpbKb0ICo3Grk0=
Subject key identifier: 76:26:F0:0B:D8:33:FE:A4:E6:F4:6D:C3:A3:5F:84:AF:5F:34:C6:C1
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 112B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC6C8552853711F1846544B9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 19:09:19 +0000
ROA not before: Tue 21 Jul 2026 19:09:15 +0000
ROA not after: Sun 21 Jul 2030 19:09:15 +0000
asID: 210193
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 21 19:09:15 2026 GMT
Not After : Jul 21 19:09:15 2030 GMT
Subject: CN=6a5fc3df-ca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:db:e1:22:47:6b:2f:85:d3:e3:33:8c:f1:
8d:b2:92:9d:fd:d9:f5:08:33:58:b9:82:7b:85:1e:
c4:68:60:6c:80:c8:b6:33:8c:9b:a9:88:74:4e:19:
09:7d:41:d4:f6:52:44:f0:93:9d:d9:7f:90:c7:6e:
fa:1b:34:ef:9f:9a:3e:8c:3f:02:a9:77:45:6a:91:
d6:b8:8e:e4:ee:ff:cc:17:61:33:d4:d5:a0:d5:6e:
8c:1e:b5:4d:40:99:c6:4f:ba:0f:80:36:c5:b9:61:
5a:80:b5:05:79:e2:2f:16:26:66:20:1c:85:e2:de:
e7:2b:f8:27:7e:68:fb:4c:54:85:5a:0d:a9:f0:8c:
1e:be:94:e6:e1:4a:a4:2f:be:16:a6:61:4d:9d:aa:
f3:00:a2:4e:69:34:e4:e0:89:59:3a:e8:bc:41:22:
8e:fe:ff:e8:da:42:18:f5:f3:3d:8a:a1:ae:fe:6c:
57:c9:d3:62:67:40:4a:c2:4a:9c:01:5a:01:bd:f9:
9e:a0:18:19:a3:5f:66:26:21:9d:9b:fd:ba:e4:c4:
3a:38:d1:af:19:f7:9c:aa:a0:a6:9f:6d:61:d5:a2:
08:87:1e:7b:28:86:6c:e6:e0:4e:3d:ca:dc:e6:e4:
30:51:af:ee:70:92:f2:93:4a:0f:b8:cb:e3:c0:aa:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:F0:0B:D8:33:FE:A4:E6:F4:6D:C3:A3:5F:84:AF:5F:34:C6:C1
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC6C8552853711F1846544B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:55:48:5e:7f:93:fa:52:ab:a0:d7:df:b3:1c:0b:83:a6:98:
15:3f:18:8a:be:1f:13:12:5d:29:55:a3:38:62:26:9d:ab:a9:
e3:e2:6b:44:96:55:d5:13:be:3d:2b:1b:82:e0:6b:99:15:ca:
2c:a0:fb:08:38:03:df:d1:5c:d0:d8:cb:b5:03:a1:2a:58:27:
c6:c1:66:25:0b:d9:3f:6d:ba:cb:f7:5e:77:5d:a9:c0:f6:09:
79:ef:45:55:ae:78:fe:14:14:c1:e2:9a:b0:4e:90:f8:a1:5f:
01:8d:2b:f5:79:48:9c:64:c7:01:19:36:b1:b7:ce:6a:e7:38:
c8:87:0b:66:9c:af:41:67:45:80:83:2b:c0:a5:03:ae:f3:20:
f9:a8:5c:08:28:e7:e8:79:e8:57:a1:fc:e5:2c:41:49:39:c2:
d4:ce:61:d5:62:7a:59:a3:05:fa:54:62:cd:e7:f3:6a:60:ed:
6d:7c:94:e0:63:78:a5:77:b3:c9:56:f4:66:78:bf:10:e9:ec:
c2:0c:57:a7:ad:60:88:f2:f0:a2:bf:af:5f:ec:36:b2:c3:5a:
b1:e2:6d:b4:60:14:10:d6:76:67:16:da:0b:2d:b8:b5:63:27:
89:f0:1d:d4:31:68:f0:43:dd:0e:d4:fe:97:d4:fe:21:d3:6a:
c4:6f:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:13 2026 by rpki-client