Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E43565F8853711F1AC80AEB9CE1D38B0.roa
File: E43565F8853711F1AC80AEB9CE1D38B0.roa (raw, json)
Hash identifier: RSRDY/3RSOhLcVtjmwiZSdOT909oWwaS0UnPaAoxtv8=
Subject key identifier: 9A:2F:99:C0:32:33:64:E8:0C:ED:28:BF:27:83:A2:DE:B3:5E:B7:9A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 112F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E43565F8853711F1AC80AEB9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 19:10:53 +0000
ROA not before: Tue 21 Jul 2026 19:10:49 +0000
ROA not after: Sun 21 Jul 2030 19:10:49 +0000
asID: 6424
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 01:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4399 (0x112f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 21 19:10:49 2026 GMT
Not After : Jul 21 19:10:49 2030 GMT
Subject: CN=6a5fc43d-e518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:45:01:8b:0a:f3:00:7e:5c:7e:ce:a8:9f:
ed:72:9c:69:23:3f:b8:71:d9:0b:3f:64:c1:48:55:
0d:a6:c5:0d:78:df:09:b5:71:74:dc:ba:47:14:30:
b3:d5:29:91:4a:f2:b0:b6:48:8e:dd:c8:0c:b2:a9:
c8:d4:57:a6:85:09:0a:44:f8:c2:8c:f0:9f:22:56:
14:ea:e3:ad:aa:38:85:83:0d:8f:f0:af:71:f2:5b:
94:1f:0e:83:b3:bc:ce:92:53:5f:19:e3:1d:19:d6:
ff:86:94:45:b7:5d:c5:7b:5a:20:31:64:dd:cc:3d:
87:61:58:90:8d:d0:11:b1:1c:d1:a5:80:4c:11:c5:
8f:df:9a:ae:f4:7f:36:11:12:11:49:fd:07:d1:a6:
9a:a7:70:1c:4f:ce:5b:0f:d6:dc:1f:63:c1:f5:09:
d0:8f:2f:99:41:ff:f0:c3:06:82:f2:cf:cc:dd:8d:
2f:ea:17:8d:11:cc:d7:3e:2b:02:ed:2f:0c:27:d0:
70:5c:c4:54:5f:4e:8e:54:b9:59:40:65:a5:7a:f3:
d2:bc:39:e4:b4:39:e4:83:79:e8:f1:06:99:bd:0a:
3a:9e:5e:c3:7f:11:8b:66:50:3e:f3:a4:d8:4c:1e:
fc:a6:7e:19:d3:24:dd:6d:96:5f:3b:d7:49:b5:4b:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:99:C0:32:33:64:E8:0C:ED:28:BF:27:83:A2:DE:B3:5E:B7:9A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E43565F8853711F1AC80AEB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:f4:c2:9d:d0:ba:38:7e:77:41:56:bd:34:3f:dc:5d:b5:db:
32:35:61:c8:86:e7:e0:0c:2d:ea:4e:c7:74:9a:86:4c:31:2d:
c9:96:18:35:b8:c6:0f:48:88:fb:7b:0a:97:b8:67:f6:5d:04:
9a:32:53:6f:04:b6:f9:45:a9:3e:f5:2a:f3:dc:ee:53:11:1a:
04:36:84:b6:33:17:b9:41:c3:00:db:14:36:00:8c:5c:88:9b:
33:bb:bf:0b:a5:57:1f:0d:e6:e1:8b:b9:69:44:2f:b9:73:81:
ac:cb:b7:f5:7f:61:fd:fd:5b:59:33:98:52:2d:84:e1:61:a6:
cb:a7:41:74:16:01:fc:ce:ba:ba:7e:0d:0a:8c:ca:ab:ca:ef:
3a:71:cc:6b:1b:ab:14:0e:b0:15:b7:cd:b2:ef:8c:63:22:9f:
24:7c:80:7e:7a:07:1a:e3:4f:c4:8e:09:88:38:a4:47:63:c5:
13:26:30:af:63:77:4c:d5:f7:0f:3e:2a:85:27:fd:fe:f4:6d:
a9:0f:37:26:5a:bb:4d:f8:62:76:97:9f:f3:f5:73:05:65:4a:
8d:f5:4c:54:2c:08:3e:ba:5a:6d:f8:92:7f:56:70:a8:3f:f7:
32:74:f0:4c:11:1a:d2:20:23:61:6b:8a:89:a7:8c:2c:7b:d8:
3b:29:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:59 2026 by rpki-client