Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/65C358568A9111F1ACF111E9CE1D38B0.roa
File: 65C358568A9111F1ACF111E9CE1D38B0.roa (raw, json)
Hash identifier: JaU5nH8aptEvSi4nGdjy1c2XIZ9FUS2u9voNPYY/cdY=
Subject key identifier: D2:4A:BD:23:86:E5:F7:5F:6B:F3:67:B6:07:F4:5C:52:AE:8D:F3:3C
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 0572
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/65C358568A9111F1ACF111E9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:34:11 +0000
ROA not before: Tue 28 Jul 2026 14:34:07 +0000
ROA not after: Fri 01 Mar 2030 14:34:07 +0000
asID: 33763
IP address blocks: 160.242.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Jul 28 14:34:07 2026 GMT
Not After : Mar 1 14:34:07 2030 GMT
Subject: CN=6a68bde3-157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:10:e3:36:05:2b:20:97:92:5d:29:da:a2:72:
04:b8:88:76:e9:b9:7f:a5:0b:7d:ac:bd:6a:c1:58:
3a:5b:89:37:b8:ce:c6:da:69:3b:77:81:2f:59:44:
24:58:e2:b5:49:28:54:e2:8b:12:85:14:33:aa:3c:
61:36:15:74:af:9a:16:d1:ff:63:e8:3a:71:d9:7d:
3d:13:7b:a6:27:9d:a8:c1:53:86:bc:a0:a6:17:11:
87:38:b7:40:6b:64:90:8c:58:ae:85:b3:6d:c4:ed:
90:43:79:69:2b:e8:91:51:a4:45:6d:42:49:bc:c6:
e7:f5:9a:2a:05:cd:21:e5:32:14:90:66:54:b6:d4:
d0:db:d4:54:7f:84:0c:6d:3a:cb:a3:00:88:34:93:
2b:53:21:7d:41:06:d1:35:76:56:c5:8b:a6:c4:56:
ee:d5:47:7d:d0:e7:53:97:7a:06:07:29:f0:27:d9:
7f:c3:9b:7c:36:7e:d3:c5:b4:11:69:43:87:05:e5:
8c:c4:f5:4f:58:61:e9:3c:49:b8:e8:7c:43:44:67:
1c:0e:6e:a9:b2:ae:2d:5c:89:dd:02:86:f6:f3:4f:
84:f5:bd:cf:23:57:f1:81:04:a9:a1:54:f5:18:99:
d6:10:04:6d:66:67:31:ea:85:07:e8:ec:d6:12:41:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:BD:23:86:E5:F7:5F:6B:F3:67:B6:07:F4:5C:52:AE:8D:F3:3C
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/65C358568A9111F1ACF111E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.32.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:f1:71:75:13:8d:9b:6a:5e:1a:d9:01:20:34:b8:20:d8:dc:
d6:79:0a:ff:35:43:eb:da:b5:b7:76:3f:a1:de:ad:25:99:49:
8f:e3:b2:d6:cd:a4:98:74:f7:12:7a:81:5f:c8:5c:50:4e:93:
e7:49:d7:f8:38:d8:1e:1a:b7:ba:99:fb:af:cc:06:02:14:39:
44:d8:1d:66:1b:09:b2:f0:11:3e:a6:a9:67:26:ba:6c:ca:08:
0c:eb:24:c6:2f:26:68:88:66:f4:9f:3c:d8:56:99:51:41:8b:
df:f7:74:c8:a6:89:08:68:d2:33:9a:65:c6:90:9a:a0:12:39:
3e:5f:18:88:00:23:0d:a4:42:fa:66:f5:84:2b:0e:17:84:af:
d4:d2:6c:5d:ab:7b:02:eb:ab:d4:ee:82:d3:47:9c:49:08:4c:
a3:56:d8:db:1f:90:70:69:3d:0e:01:d4:71:74:39:3a:a3:64:
b6:ed:d9:1b:66:74:96:ec:78:78:b5:2e:00:49:e1:b3:a5:3e:
8a:59:6a:22:b5:66:d0:ae:a5:c1:d9:32:ec:37:6c:55:3a:18:
13:ab:c7:c2:6b:2b:f2:8c:17:23:17:c0:c4:7a:5e:f9:59:bc:
4a:ef:9f:89:47:9b:94:3e:fe:81:8e:50:17:44:36:99:0c:4a:
c2:a9:45:ee
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBUjExMC8GA1UEBRMoRDlDMEIyMzNBQ0IwNjM1NDM1NzREM0Y1RjMyN0JF
QjhCMkI5OTExODAeFw0yNjA3MjgxNDM0MDdaFw0zMDAzMDExNDM0MDdaMBgxFjAU
BgNVBAMTDTZhNjhiZGUzLTE1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDlEOM2BSsgl5JdKdqicgS4iHbpuX+lC32svWrBWDpbiTe4zsbaaTt3gS9Z
RCRY4rVJKFTiixKFFDOqPGE2FXSvmhbR/2PoOnHZfT0Te6YnnajBU4a8oKYXEYc4
t0BrZJCMWK6Fs23E7ZBDeWkr6JFRpEVtQkm8xuf1mioFzSHlMhSQZlS21NDb1FR/
hAxtOsujAIg0kytTIX1BBtE1dlbFi6bEVu7VR33Q51OXegYHKfAn2X/Dm3w2ftPF
tBFpQ4cF5YzE9U9YYek8SbjofENEZxwObqmyri1cid0ChvbzT4T1vc8jV/GBBKmh
VPUYmdYQBG1mZzHqhQfo7NYSQaONAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU0kq9
I4bl919r82e2B/RcUq6N8zwwHwYDVR0jBBgwFoAU2cCyM6ywY1Q1dNP18ye+uLK5
kRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzVBNDExRjlFQjhFRjExRURBNUIwOUREQUYxMjIyNDY4LzJjQ3lN
Nnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzJjQ3lNNnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjg4NkIzLzVBNDExRjlFQjhFRjExRURBNUIwOUREQUYxMjIy
NDY4LzY1QzM1ODU2OEE5MTExRjFBQ0YxMTFFOUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOg8iAwDQYJKoZIhvcNAQELBQAD
ggEBAM7xcXUTjZtqXhrZASA0uCDY3NZ5Cv81Q+vatbd2P6HerSWZSY/jstbNpJh0
9xJ6gV/IXFBOk+dJ1/g42B4at7qZ+6/MBgIUOUTYHWYbCbLwET6mqWcmumzKCAzr
JMYvJmiIZvSfPNhWmVFBi9/3dMimiQho0jOaZcaQmqASOT5fGIgAIw2kQvpm9YQr
DheEr9TSbF2rewLrq9TugtNHnEkITKNW2NsfkHBpPQ4B1HF0OTqjZLbt2RtmdJbs
eHi1LgBJ4bOlPopZaiK1ZtCupcHZMuw3bFU6GBOrx8JrK/KMFyMXwMR6XvlZvErv
n4lHm5Q+/oGOUBdENpkMSsKpRe4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:59 2026 by rpki-client