Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/86AB974A8A3211F18AFBDBA0CE1D38B0.roa
File: 86AB974A8A3211F18AFBDBA0CE1D38B0.roa (raw, json)
Hash identifier: 1cXTxnZs75tnvy4l6NPeWheUC5AUarlP+avu1Um9RK0=
Subject key identifier: 33:B2:8C:E3:7B:07:86:DB:F2:DB:A8:40:F0:E7:D8:25:AB:DF:C9:2E
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 0898
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/86AB974A8A3211F18AFBDBA0CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:15:04 +0000
ROA not before: Tue 28 Jul 2026 03:14:59 +0000
ROA not after: Sun 31 Jul 2033 03:14:59 +0000
asID: 3741
IP address blocks: 168.210.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 03:14:59 2026 GMT
Not After : Jul 31 03:14:59 2033 GMT
Subject: CN=6a681eb8-3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:c2:18:b1:bf:27:49:32:a3:94:5d:14:e1:
76:d3:2e:32:38:23:55:08:d8:ef:41:61:eb:b1:e5:
1f:e4:96:44:ca:2a:18:ab:73:c2:ae:55:b6:9d:5c:
5c:ba:fd:9d:2e:a3:86:75:3c:a9:9e:41:0d:b3:2c:
2b:b8:44:0a:39:35:a3:43:a7:c4:06:eb:2d:71:c6:
1f:f6:18:26:55:49:24:04:ec:ec:04:32:19:d6:ad:
13:89:3c:80:01:66:09:ec:92:4e:6d:ad:18:d5:3e:
b0:6c:6f:4a:d5:98:2a:60:8e:25:c4:40:e3:29:6e:
91:47:5a:27:c6:4e:bb:87:8a:b0:a6:71:3c:b8:ac:
88:c3:c9:fb:22:f2:84:25:89:57:33:9b:1e:d6:57:
77:3a:a0:2a:d9:42:13:ba:f9:18:24:0c:39:f9:3d:
e9:57:d7:63:36:73:b6:d3:e9:b7:fd:60:72:51:ba:
47:bb:97:d3:7b:86:84:d2:09:a6:9b:f1:8d:ae:8a:
63:f8:0c:49:c1:23:1e:58:8c:61:7d:a2:24:f2:b7:
90:e2:c1:c5:b7:4b:f9:1d:bc:05:11:ad:83:2d:f2:
61:63:d4:8f:71:75:af:66:00:13:dd:ce:79:8b:64:
f2:c8:bb:d0:4d:c1:d3:0c:a2:fe:a3:d1:4d:0e:1e:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B2:8C:E3:7B:07:86:DB:F2:DB:A8:40:F0:E7:D8:25:AB:DF:C9:2E
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/86AB974A8A3211F18AFBDBA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:b6:e2:52:18:87:b1:c9:40:cc:f4:58:ea:cb:2a:6e:b4:0e:
73:2b:e5:fc:ff:6f:50:7b:fd:c0:94:d7:8e:26:cd:17:94:8b:
a9:4b:64:c0:4c:8f:1a:df:c5:93:e8:9e:94:2e:a6:e9:b8:82:
17:36:cb:3e:75:09:c2:22:e8:9d:03:32:fe:f1:f2:32:44:17:
d1:f8:f9:25:be:4c:de:68:18:84:1e:29:1b:13:f7:3d:2b:dc:
c4:6c:f7:71:42:3f:62:4d:ae:80:c0:97:b0:82:5b:32:e8:12:
67:b6:77:b5:57:ae:72:38:19:d2:0a:bf:04:6c:9a:99:5e:28:
60:e4:8c:e3:f4:0a:1c:ba:7c:4d:6b:e0:07:58:59:28:89:ed:
8b:8b:5b:57:bf:bf:ac:ef:7c:80:c8:ae:93:dc:5e:05:ad:da:
0e:92:4e:cd:9b:60:9e:9e:56:33:3f:d2:ef:c7:8e:bb:4b:45:
e6:c0:75:7a:1c:fa:78:1f:db:3b:8e:d1:e8:01:3b:82:fe:81:
ec:d2:55:26:81:eb:cc:c4:56:3a:4f:62:32:a8:25:0e:b9:5f:
50:28:52:1d:f9:77:e2:19:7e:15:44:fc:63:ee:ac:49:20:6f:
20:38:d3:ae:2a:3b:7b:fa:22:bc:5f:1b:99:1f:a4:c2:2e:71:
42:bd:ae:a1
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBUjExMC8GA1UEBRMoNkM2MDJBMjZGQjJDNDY2NzA3MjJERkM3M0Y3MkZD
NEI2QTczRUJDNDAeFw0yNjA3MjgwMzE0NTlaFw0zMzA3MzEwMzE0NTlaMBgxFjAU
BgNVBAMTDTZhNjgxZWI4LTMxNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgp8IYsb8nSTKjlF0U4XbTLjI4I1UI2O9BYeux5R/klkTKKhirc8KuVbad
XFy6/Z0uo4Z1PKmeQQ2zLCu4RAo5NaNDp8QG6y1xxh/2GCZVSSQE7OwEMhnWrROJ
PIABZgnskk5trRjVPrBsb0rVmCpgjiXEQOMpbpFHWifGTruHirCmcTy4rIjDyfsi
8oQliVczmx7WV3c6oCrZQhO6+RgkDDn5PelX12M2c7bT6bf9YHJRuke7l9N7hoTS
Caab8Y2uimP4DEnBIx5YjGF9oiTyt5DiwcW3S/kdvAURrYMt8mFj1I9xda9mABPd
znmLZPLIu9BNwdMMov6j0U0OHoqjAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUM7KM
43sHhtvy26hA8OfYJavfyS4wHwYDVR0jBBgwFoAUbGAqJvssRmcHIt/HP3L8S2pz
68QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVBMjI4L2JHQXFK
dnNzUm1jSEl0X0hQM0w4UzJwejY4US5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2JHQXFKdnNzUm1jSEl0X0hQM0w4UzJwejY4US5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVB
MjI4Lzg2QUI5NzRBOEEzMjExRjE4QUZCREJBMENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCo0jANBgkqhkiG9w0BAQsFAAOC
AQEAibbiUhiHsclAzPRY6ssqbrQOcyvl/P9vUHv9wJTXjibNF5SLqUtkwEyPGt/F
k+ielC6m6biCFzbLPnUJwiLonQMy/vHyMkQX0fj5Jb5M3mgYhB4pGxP3PSvcxGz3
cUI/Yk2ugMCXsIJbMugSZ7Z3tVeucjgZ0gq/BGyamV4oYOSM4/QKHLp8TWvgB1hZ
KInti4tbV7+/rO98gMiuk9xeBa3aDpJOzZtgnp5WMz/S78eOu0tF5sB1ehz6eB/b
O47R6AE7gv6B7NJVJoHrzMRWOk9iMqglDrlfUChSHfl34hl+FUT8Y+6sSSBvIDjT
rio7e/oivF8bmR+kwi5xQr2uoQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:24:00 2026 by rpki-client