Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/3662A21A8A8711F1847C6FADCE1D38B0.roa
File: 3662A21A8A8711F1847C6FADCE1D38B0.roa (raw, json)
Hash identifier: h5GCok/tJj+xpPXttdEjtTMAXHD+z9Klj9/GCr4zhdQ=
Subject key identifier: 03:16:1F:55:D1:60:F5:93:BA:17:DD:13:65:FE:D4:F4:6F:F8:F8:45
Certificate issuer: /CN=F365062AAR/serialNumber=1ADCB578254AC0C819B1C168EF55C01BB2C24A93
Certificate serial: 04EB
Authority key identifier: 1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
Authority info access: rsync://rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/3662A21A8A8711F1847C6FADCE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:21:16 +0000
ROA not before: Tue 28 Jul 2026 13:21:12 +0000
ROA not after: Thu 31 Mar 2033 13:21:12 +0000
asID: 37309
IP address blocks: 160.182.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.mft
rsync://rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAR, serialNumber=1ADCB578254AC0C819B1C168EF55C01BB2C24A93
Validity
Not Before: Jul 28 13:21:12 2026 GMT
Not After : Mar 31 13:21:12 2033 GMT
Subject: CN=6a68accc-1730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:a0:9f:00:e2:52:89:66:1d:62:f0:a5:39:
2c:0c:6b:4d:d3:91:c1:ac:c7:18:73:76:9c:8a:b0:
92:ff:6d:68:fd:96:7a:fb:26:8a:56:cb:9b:cb:09:
d4:41:95:7e:76:3c:ac:15:ee:6d:e0:92:3d:63:b1:
34:3a:a6:58:97:4c:61:48:28:db:15:1f:21:dc:22:
84:cc:5e:71:ee:78:c2:ab:44:3c:f1:1a:de:fd:9f:
f8:74:ba:70:01:22:09:ab:ec:80:5c:5c:7b:d8:32:
97:95:0d:76:74:de:98:8e:23:26:3a:3c:bf:1a:75:
c6:15:38:83:f3:5a:3c:03:da:aa:69:dd:a7:a9:92:
27:a5:d2:bc:6e:a6:8e:51:91:c5:c4:e5:45:9b:ec:
8d:63:7e:50:76:4f:a9:ad:8a:2f:4a:e9:c4:75:0a:
e2:b0:43:0c:9f:a3:dc:c4:4b:38:2f:1e:bb:08:0e:
87:da:68:14:a0:c1:e2:f8:2a:15:de:b9:b4:06:94:
e4:2e:2b:40:35:f8:ce:0a:75:28:6f:24:73:50:bf:
76:d0:9f:1e:c4:87:7d:5b:16:c3:25:39:48:b9:2d:
9d:83:b3:3a:4b:95:b1:d6:b2:7a:a1:e3:4e:04:0f:
5e:79:68:6a:78:12:8b:84:6a:33:43:c2:44:21:4e:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:1F:55:D1:60:F5:93:BA:17:DD:13:65:FE:D4:F4:6F:F8:F8:45
X509v3 Authority Key Identifier:
keyid:1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/3662A21A8A8711F1847C6FADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.182.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0a:b2:09:70:19:31:d5:58:6f:37:bc:42:23:7e:91:c7:15:22:
30:87:42:2e:36:49:c8:0e:af:83:36:50:46:57:f8:a3:ff:59:
c9:46:6b:bf:b6:dc:78:e7:73:10:eb:c6:b8:0a:be:24:82:52:
cb:14:13:df:e1:15:4d:36:18:66:24:3a:72:f7:d3:61:74:3f:
38:13:ca:47:60:f9:74:05:60:97:a4:27:93:f1:f8:01:5e:1d:
be:82:a2:af:8f:49:88:95:de:b2:19:e4:78:0d:22:34:cf:bb:
f2:29:8b:a5:e0:d0:f7:ca:c4:3a:f0:42:15:f9:86:05:ca:4f:
33:e1:43:bd:89:88:6d:fb:ca:ed:6c:0c:e3:02:d2:fd:86:9d:
57:1f:fd:6e:50:b9:2c:46:63:51:5d:08:00:34:2b:ad:ea:bf:
70:7b:63:28:a6:f1:a0:64:9d:cb:e6:a6:21:b1:5f:16:29:4a:
93:0e:90:1a:66:fb:a0:fc:71:e6:14:30:c0:0e:28:70:ca:33:
11:d4:7c:51:1b:ae:e3:6f:f9:3b:a9:8e:28:d0:cd:6d:a3:cb:
89:f0:87:88:2c:d7:4d:c1:12:24:5d:86:ad:6d:fa:5e:37:05:
43:09:b6:eb:b9:0b:6e:82:b3:27:9b:d2:e5:da:60:6d:bd:6d:
ac:92:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:56:16 2026 by rpki-client