Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C894CB227A9C11F1801C48B8CE1D38B0.roa
File: C894CB227A9C11F1801C48B8CE1D38B0.roa (raw, json)
Hash identifier: 1IPK4BX01765XvgabUel+LFxUfVqDusolutUw5gZxb4=
Subject key identifier: 2C:B4:36:87:65:2F:15:34:1A:A8:76:A3:82:52:4E:F0:E3:4B:15:57
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 1116
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C894CB227A9C11F1801C48B8CE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:15:23 +0000
ROA not before: Wed 08 Jul 2026 07:15:17 +0000
ROA not after: Tue 31 Jul 2035 07:15:17 +0000
asID: 210193
IP address blocks: 161.123.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 01:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4374 (0x1116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 8 07:15:17 2026 GMT
Not After : Jul 31 07:15:17 2035 GMT
Subject: CN=6a4df90b-2e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:fd:d5:8c:89:ca:36:72:61:0e:fa:f8:13:
c2:31:d2:a6:6e:79:34:5c:81:77:86:2f:5f:8f:65:
22:cb:a6:6e:87:c3:4a:a8:4f:1b:29:83:49:4b:dd:
88:50:50:60:bd:64:58:70:a9:4c:95:a3:b6:c1:16:
1c:9d:bf:cd:90:0f:2b:85:45:4f:57:2f:09:72:1f:
af:76:c3:e6:33:1a:6f:e2:f5:5f:1d:bc:28:3e:5b:
f2:0d:69:ab:28:44:49:70:77:e7:8d:6a:d9:6c:90:
3f:05:f6:b8:97:12:50:4c:66:56:2c:36:d8:ed:de:
76:2c:fc:76:07:76:59:be:d9:7f:06:42:af:5d:e3:
52:d5:82:b3:f4:3d:e1:f5:c4:8d:6b:9e:34:41:57:
39:84:28:bb:f1:38:40:2d:9c:41:f7:83:4c:de:0e:
89:0f:4a:86:73:43:89:8c:8b:f6:ea:09:ce:da:8c:
59:ed:08:cd:c3:ba:16:35:5d:8a:b3:c3:28:e9:ad:
88:b8:7e:62:d1:be:17:ca:0d:37:8e:7b:61:f5:f0:
11:b5:36:d6:d5:70:32:bf:24:13:33:b0:89:62:26:
d3:f8:9b:f0:16:f7:b8:96:34:72:d6:10:68:f6:2a:
71:c1:97:72:9d:99:40:97:48:9f:66:98:7b:65:38:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:36:87:65:2F:15:34:1A:A8:76:A3:82:52:4E:F0:E3:4B:15:57
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C894CB227A9C11F1801C48B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c4:8e:d1:7c:42:ae:99:60:44:f8:3a:b5:7d:c8:48:bb:83:
2f:1c:10:1a:a2:b8:53:22:74:25:d7:4a:2d:1f:f0:18:74:63:
5e:b9:2b:52:fc:c3:15:0e:e5:a7:d4:1f:91:d0:34:78:bd:17:
25:51:d8:73:d3:d4:c6:c3:4f:ec:ce:21:75:af:10:5b:0f:93:
0c:2b:c5:a7:b3:3c:66:00:ac:2f:ad:cc:5d:d2:14:8c:d6:60:
8c:47:39:b1:65:7b:07:b3:30:ee:59:2f:5a:53:cb:6e:94:fc:
78:64:22:1a:2c:74:49:d1:69:43:ef:a2:f3:b3:9d:2a:d3:63:
eb:48:ac:c8:7c:68:90:88:e6:8d:12:7e:88:f3:cd:29:5d:9f:
a6:3d:a9:45:06:9b:e4:0a:11:de:b6:dc:d1:77:c2:cd:7e:79:
cc:19:f4:4b:59:ed:15:bc:5a:19:df:61:1b:8e:3a:fe:b0:3f:
7a:8b:b2:89:79:03:df:2b:04:d4:45:e8:fb:f7:b1:c5:48:b0:
ca:f0:00:ee:4d:00:0d:3e:1e:22:8b:03:a6:90:4f:98:f2:95:
bf:e4:0c:8b:88:18:0f:52:8c:70:ed:80:08:1f:61:4b:ce:3a:
db:2f:56:73:71:0f:cb:14:af:ff:64:6c:44:d8:cb:0a:0c:c7:
23:b9:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:17 2026 by rpki-client