Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/007480EE8A3511F1AE1B81AFCE1D38B0.roa
File: 007480EE8A3511F1AE1B81AFCE1D38B0.roa (raw, json)
Hash identifier: cJNbbHye0DCiPyaT/oO0oofaZWFs63pIqNMXNgTOsKI=
Subject key identifier: EC:71:2A:11:F7:BF:D4:0A:A1:03:10:52:A3:76:ED:F7:5B:6A:DD:0C
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 08A0
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/007480EE8A3511F1AE1B81AFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:32:47 +0000
ROA not before: Tue 28 Jul 2026 03:32:43 +0000
ROA not after: Sun 31 Jul 2033 03:32:43 +0000
asID: 20011
IP address blocks: 168.210.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 03:32:43 2026 GMT
Not After : Jul 31 03:32:43 2033 GMT
Subject: CN=6a6822df-f075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:a8:bd:3d:74:25:af:8a:e1:38:77:33:be:
5e:4f:40:9a:62:94:e0:73:1f:95:3b:f0:38:b6:a0:
48:00:79:fd:45:47:a7:b4:eb:81:26:53:f8:74:ca:
16:e7:13:2e:3e:72:43:55:70:43:df:f4:ab:42:91:
ea:da:c0:21:0c:9b:11:cb:9b:9b:e9:8f:02:0f:2d:
28:e9:80:37:72:71:d0:cf:30:52:97:a3:73:d3:d8:
e9:d3:8f:5e:49:75:c6:75:5d:2a:c5:07:50:90:dd:
77:04:0e:e3:1b:ec:a2:f9:ff:62:45:1f:94:c3:26:
af:08:94:a8:ff:56:9e:e2:7b:98:df:b7:20:1b:09:
e7:d9:9e:2b:2c:ab:50:db:f8:50:84:96:fb:a7:a4:
ea:74:ae:d3:b3:2b:b3:c4:a9:a8:d1:55:23:d8:5c:
e6:3f:a5:c4:92:ae:ca:6f:b2:9f:a8:12:e2:ca:03:
a0:e2:9d:d9:9e:ec:f9:1b:1b:74:06:b6:22:b3:f3:
8e:02:85:9b:b6:48:5e:8f:51:2f:80:bc:da:e9:ab:
ec:cd:e0:ac:38:32:a9:fc:f6:cb:7b:02:c7:66:af:
f7:6e:e7:9a:3a:60:f9:2a:26:e0:5e:29:6e:9b:c6:
e0:cd:c2:45:89:52:15:a0:17:c0:01:b3:c5:20:3d:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:2A:11:F7:BF:D4:0A:A1:03:10:52:A3:76:ED:F7:5B:6A:DD:0C
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/007480EE8A3511F1AE1B81AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.12.0/22
Signature Algorithm: sha256WithRSAEncryption
88:3d:fd:9c:2d:e6:c0:ad:29:7f:8a:73:3d:63:e2:7a:ed:40:
d4:9a:b7:02:e7:e9:58:40:17:24:95:0b:f5:d8:57:f4:9d:ac:
27:8d:28:6b:1b:de:f3:23:88:07:c5:5d:9e:d3:4e:a2:2c:40:
02:b1:e1:d3:6f:6f:e9:3c:16:c0:24:36:89:e5:d4:db:b5:fd:
7b:ee:10:9a:36:cf:45:51:7d:9e:f8:a2:00:c5:03:b5:48:d7:
4c:51:b6:9c:ea:a6:df:e7:e4:03:e4:45:98:7b:5a:4d:bb:47:
84:41:98:27:9f:4b:cb:c7:e4:30:68:3f:f3:11:a8:e3:92:89:
d5:6b:ab:52:cf:cd:c6:f0:8a:a1:da:a9:71:e4:bb:b0:6c:58:
ff:04:d0:07:a5:90:78:23:74:cc:db:6a:51:b9:3a:0b:90:7a:
73:d3:d0:90:e0:52:cb:65:fa:ae:6a:52:0b:26:c1:39:da:a8:
67:cc:65:14:0b:b0:ef:4a:02:2c:e0:b1:d7:51:29:23:72:e4:
04:26:10:eb:ca:5b:c9:0f:58:05:8f:bb:b2:a2:e6:c5:0c:2b:
44:e0:59:f5:7c:7e:1c:e7:f9:4d:5a:02:7c:c9:67:b7:b3:07:
c0:4d:64:a8:cc:98:10:93:21:de:51:41:1b:a8:83:77:26:4b:
07:7f:69:47
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBUjExMC8GA1UEBRMoNkM2MDJBMjZGQjJDNDY2NzA3MjJERkM3M0Y3MkZD
NEI2QTczRUJDNDAeFw0yNjA3MjgwMzMyNDNaFw0zMzA3MzEwMzMyNDNaMBgxFjAU
BgNVBAMTDTZhNjgyMmRmLWYwNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcY6i9PXQlr4rhOHczvl5PQJpilOBzH5U78Di2oEgAef1FR6e064EmU/h0
yhbnEy4+ckNVcEPf9KtCkerawCEMmxHLm5vpjwIPLSjpgDdycdDPMFKXo3PT2OnT
j15JdcZ1XSrFB1CQ3XcEDuMb7KL5/2JFH5TDJq8IlKj/Vp7ie5jftyAbCefZniss
q1Db+FCElvunpOp0rtOzK7PEqajRVSPYXOY/pcSSrspvsp+oEuLKA6Dindme7Pkb
G3QGtiKz844ChZu2SF6PUS+AvNrpq+zN4Kw4Mqn89st7Asdmr/du55o6YPkqJuBe
KW6bxuDNwkWJUhWgF8ABs8UgPbTjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7HEq
Efe/1AqhAxBSo3bt91tq3QwwHwYDVR0jBBgwFoAUbGAqJvssRmcHIt/HP3L8S2pz
68QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVBMjI4L2JHQXFK
dnNzUm1jSEl0X0hQM0w4UzJwejY4US5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2JHQXFKdnNzUm1jSEl0X0hQM0w4UzJwejY4US5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVB
MjI4LzAwNzQ4MEVFOEEzNTExRjFBRTFCODFBRkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo0gwwDQYJKoZIhvcNAQELBQAD
ggEBAIg9/Zwt5sCtKX+Kcz1j4nrtQNSatwLn6VhAFySVC/XYV/SdrCeNKGsb3vMj
iAfFXZ7TTqIsQAKx4dNvb+k8FsAkNonl1Nu1/XvuEJo2z0VRfZ74ogDFA7VI10xR
tpzqpt/n5APkRZh7Wk27R4RBmCefS8vH5DBoP/MRqOOSidVrq1LPzcbwiqHaqXHk
u7BsWP8E0AelkHgjdMzbalG5OguQenPT0JDgUstl+q5qUgsmwTnaqGfMZRQLsO9K
AizgsddRKSNy5AQmEOvKW8kPWAWPu7Ki5sUMK0TgWfV8fhzn+U1aAnzJZ7ezB8BN
ZKjMmBCTId5RQRuog3cmSwd/aUc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:53 2026 by rpki-client