Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/5072AEFE89D111F18B20B5CDCE1D38B0.roa
File: 5072AEFE89D111F18B20B5CDCE1D38B0.roa (raw, json)
Hash identifier: F8n2BcR3ryzUl8HMLoSq2Rf5j6pryb+IcWt69b/OZWk=
Subject key identifier: 82:3E:F5:34:D0:6C:23:B2:F8:57:6D:BF:21:7A:09:80:63:F5:B2:38
Certificate issuer: /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial: 09BA
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Authority info access: rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/5072AEFE89D111F18B20B5CDCE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:39:12 +0000
ROA not before: Mon 27 Jul 2026 15:39:08 +0000
ROA not after: Mon 06 Dec 2032 15:39:08 +0000
asID: 37650
IP address blocks: 168.253.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Validity
Not Before: Jul 27 15:39:08 2026 GMT
Not After : Dec 6 15:39:08 2032 GMT
Subject: CN=6a677ba0-619b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:5b:07:94:97:3c:f9:f3:b5:d6:8e:19:bd:
e9:50:21:31:d4:02:cb:e1:f1:1c:2b:ed:af:12:79:
5a:b1:dc:43:6e:55:74:e9:7e:8e:5f:84:30:5f:03:
5c:1d:6b:49:ff:b2:73:83:82:f3:cb:d1:4e:3d:de:
19:31:ed:d8:58:2f:b0:ae:c1:9f:76:0b:3e:91:40:
2c:e9:23:93:f7:16:49:cd:7c:7e:69:fc:a3:17:bf:
4e:c6:0d:0a:b0:e8:da:73:3f:c9:89:83:7d:49:dd:
7a:3c:a3:9e:a8:7a:e2:78:60:2e:9f:21:d6:43:c5:
dd:06:16:73:92:74:31:8b:ec:e8:52:f3:b8:7c:01:
0e:e2:9c:af:18:a7:0f:a6:40:92:f3:96:32:95:5e:
15:b1:f2:de:3c:00:12:1d:8c:57:e0:5d:ce:b9:20:
1b:8f:4e:82:c7:75:a0:ea:9d:13:f1:ae:29:8b:0c:
30:27:1d:43:07:d7:5d:36:89:e8:bc:49:22:e8:52:
7c:ec:2f:28:10:ad:32:f3:27:17:1b:30:56:a3:e3:
eb:0c:40:f4:b6:f6:9b:b8:d7:ed:45:ab:3d:63:cb:
21:9f:64:86:69:cf:8f:7a:cd:25:6d:c6:4e:f3:b8:
c4:46:01:db:ad:67:14:f8:4f:c6:3e:67:bb:c8:67:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:F5:34:D0:6C:23:B2:F8:57:6D:BF:21:7A:09:80:63:F5:B2:38
X509v3 Authority Key Identifier:
keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/5072AEFE89D111F18B20B5CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.80.0/20
Signature Algorithm: sha256WithRSAEncryption
60:77:f2:95:3c:65:ac:2a:93:cb:a4:36:1c:ef:4a:9e:c5:82:
25:54:c1:69:b2:92:7c:07:76:0d:0d:9e:31:87:f7:1c:09:f4:
26:f5:0a:07:e7:e4:b9:54:10:38:c5:18:f0:3b:77:f8:9d:4e:
ba:3f:20:79:79:ed:6e:61:ac:65:13:df:8f:30:f7:f6:10:1c:
6f:3e:2d:fb:af:1f:db:b3:f8:9a:34:6a:28:3b:eb:5d:3c:43:
67:c5:1a:07:51:be:01:91:8e:e2:64:33:1a:03:a4:1d:e1:4e:
35:fe:b0:63:4f:25:0d:11:55:4e:7c:b7:d1:66:a0:3b:84:e2:
91:43:3f:48:c9:e7:08:21:a6:02:31:1c:51:21:fb:10:3c:e5:
64:fd:f7:bf:79:86:58:12:1e:6a:43:a3:25:f3:94:90:c1:4c:
21:a1:0f:31:0c:6a:60:32:d6:db:06:46:24:d2:14:3c:ca:1c:
7c:0f:ca:65:1b:b7:d1:94:e9:25:34:a5:6e:19:4f:66:1d:7d:
2e:fb:fe:4e:a2:36:a2:e4:7f:37:57:f4:4f:cc:20:2e:7d:4b:
c6:93:c8:07:9b:a8:47:33:9d:55:3d:cb:f0:70:ba:71:b9:c8:
09:c2:2f:9b:29:44:50:da:5d:d0:72:47:8e:ed:e3:bf:12:50:
f6:e7:a7:9e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTVFRTRBUjExMC8GA1UEBRMoMTgzNzFGRTkwM0VGMDg2RjVDMUZGNkY2ODQwQkE2
Nzc2NzI2NzY3MDAeFw0yNjA3MjcxNTM5MDhaFw0zMjEyMDYxNTM5MDhaMBgxFjAU
BgNVBAMTDTZhNjc3YmEwLTYxOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGA1sHlJc8+fO11o4ZvelQITHUAsvh8Rwr7a8SeVqx3ENuVXTpfo5fhDBf
A1wda0n/snODgvPL0U493hkx7dhYL7CuwZ92Cz6RQCzpI5P3FknNfH5p/KMXv07G
DQqw6NpzP8mJg31J3Xo8o56oeuJ4YC6fIdZDxd0GFnOSdDGL7OhS87h8AQ7inK8Y
pw+mQJLzljKVXhWx8t48ABIdjFfgXc65IBuPToLHdaDqnRPxrimLDDAnHUMH1102
iei8SSLoUnzsLygQrTLzJxcbMFaj4+sMQPS29pu41+1Fqz1jyyGfZIZpz496zSVt
xk7zuMRGAdutZxT4T8Y+Z7vIZ+8DAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUgj71
NNBsI7L4V22/IXoJgGP1sjgwHwYDVR0jBBgwFoAUGDcf6QPvCG9cH/b2hAumd2cm
dnAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU1RUU0L0FENkY2NTVBMTgxNTExRUFCMzFFNEY3RUY4QUVBMjI4L0dEY2Y2
UVB2Q0c5Y0hfYjJoQXVtZDJjbWRuQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0dEY2Y2UVB2Q0c5Y0hfYjJoQXVtZDJjbWRuQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU1RUU0L0FENkY2NTVBMTgxNTExRUFCMzFFNEY3RUY4QUVB
MjI4LzUwNzJBRUZFODlEMTExRjE4QjIwQjVDRENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASo/VAwDQYJKoZIhvcNAQELBQAD
ggEBAGB38pU8Zawqk8ukNhzvSp7FgiVUwWmyknwHdg0NnjGH9xwJ9Cb1Cgfn5LlU
EDjFGPA7d/idTro/IHl57W5hrGUT348w9/YQHG8+LfuvH9uz+Jo0aig76108Q2fF
GgdRvgGRjuJkMxoDpB3hTjX+sGNPJQ0RVU58t9FmoDuE4pFDP0jJ5wghpgIxHFEh
+xA85WT99795hlgSHmpDoyXzlJDBTCGhDzEMamAy1tsGRiTSFDzKHHwPymUbt9GU
6SU0pW4ZT2YdfS77/k6iNqLkfzdX9E/MIC59S8aTyAebqEcznVU9y/BwunG5yAnC
L5spRFDaXdByR47t478SUPbnp54=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:40 2026 by rpki-client