Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/32C56C048AA611F183809FE4CE1D38B0.roa
File: 32C56C048AA611F183809FE4CE1D38B0.roa (raw, json)
Hash identifier: 05NOZTIQSGIxosBWg5s1k2e5173s+rKsv547cl8cIvw=
Subject key identifier: A7:71:3D:C5:66:5C:FF:64:E6:E5:B9:BA:5D:95:95:3E:32:33:F1:E3
Certificate issuer: /CN=F36432B6AR/serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
Certificate serial: 0503
Authority key identifier: 6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Authority info access: rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/32C56C048AA611F183809FE4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 17:03:05 +0000
ROA not before: Tue 28 Jul 2026 17:03:01 +0000
ROA not after: Thu 28 Feb 2030 17:03:01 +0000
asID: 36992
IP address blocks: 156.160.0.0/11 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 17:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36432B6AR, serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
Validity
Not Before: Jul 28 17:03:01 2026 GMT
Not After : Feb 28 17:03:01 2030 GMT
Subject: CN=6a68e0c9-1aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:fa:92:77:c1:52:ec:0f:b8:04:4e:7d:f5:
52:01:79:d3:3f:cd:de:16:3d:92:a4:35:0c:42:a6:
f5:66:cd:30:03:77:01:61:1e:b8:c4:d0:cb:a9:79:
ce:90:78:b9:09:05:8b:ad:d5:83:4c:dc:ba:e5:92:
27:e5:e8:46:18:21:9b:3a:f8:dc:eb:4c:1e:dd:34:
74:8f:96:5e:9a:5a:50:6a:e0:0d:5d:e3:6e:b9:e2:
bd:56:81:23:46:cb:7b:51:70:7b:63:99:8e:03:f5:
27:76:37:e6:24:96:52:2d:e8:48:24:d1:88:fc:d2:
51:ec:f1:99:28:af:93:8d:11:b7:f3:44:53:d1:52:
a5:5b:e3:6d:10:d1:53:3a:e7:11:dc:9e:4a:de:35:
59:c3:35:1f:70:7e:0c:d9:70:fb:d1:b0:ff:34:f0:
d1:88:6e:9c:77:aa:14:c7:f8:11:cd:5c:c4:96:97:
75:73:d9:cf:77:bd:ec:6b:3d:e1:3d:29:de:54:56:
3b:c3:85:9b:d4:37:08:48:d2:6f:8a:8d:52:18:8d:
21:0e:bf:b8:ac:ea:6b:3f:e2:23:7b:61:c6:5e:53:
47:38:36:c3:0a:38:f7:b7:50:2b:db:01:23:08:5d:
e1:fb:76:92:ae:60:4a:b9:97:8e:46:5e:d2:ee:88:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:3D:C5:66:5C:FF:64:E6:E5:B9:BA:5D:95:95:3E:32:33:F1:E3
X509v3 Authority Key Identifier:
keyid:6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/32C56C048AA611F183809FE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.160.0.0/11
Signature Algorithm: sha256WithRSAEncryption
56:9a:c7:e8:a5:34:ab:a2:b9:a4:80:ce:f3:2b:14:38:bb:7b:
03:4d:b6:29:00:22:24:89:95:93:24:6f:12:49:ae:bf:0f:3c:
25:ed:f2:bf:c7:3f:d9:1b:e6:04:95:dd:d1:44:03:73:88:62:
04:a9:ac:a1:86:0a:31:7b:8e:b6:e2:4a:52:e4:bf:39:fa:aa:
fe:d8:79:3c:92:89:ce:39:1d:46:23:70:ef:15:8d:98:46:4e:
17:68:58:b9:ec:07:51:ef:e1:21:6d:58:7c:e2:1c:27:db:3c:
26:7b:95:b9:15:d7:11:94:7b:c4:4d:5f:b5:38:ca:f4:68:2a:
aa:25:3d:8b:c1:91:da:ba:a7:43:e1:cc:70:12:01:ac:b5:c0:
5c:30:49:36:7c:79:53:1a:f4:ac:e1:ad:5b:eb:25:97:43:1e:
94:86:0d:4a:6b:08:9c:cc:e0:e6:70:e5:9f:0d:ba:07:66:cc:
9e:48:cd:89:b5:e3:da:7e:c4:fc:b6:d8:18:ab:21:5f:a8:2e:
a2:27:31:49:bc:1c:b8:13:6a:be:41:12:fd:50:98:50:56:19:
ac:fc:0e:b2:37:9c:ca:84:45:0e:a5:99:b0:3a:af:96:af:2f:
b2:61:44:22:e1:75:f9:d3:e4:2b:d7:41:9b:cb:79:e4:e8:51:
c7:00:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:44 2026 by rpki-client