Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/86664F868A9211F19A6099EFCE1D38B0.roa
File: 86664F868A9211F19A6099EFCE1D38B0.roa (raw, json)
Hash identifier: rIungNY5EVspbMIGcy76MQ1oYEJ0edvK146736oLfvE=
Subject key identifier: 54:A0:43:40:E4:D2:83:57:B4:8E:A1:CB:95:0B:07:88:C9:BC:F5:44
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 0576
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/86664F868A9211F19A6099EFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:42:15 +0000
ROA not before: Tue 28 Jul 2026 14:42:11 +0000
ROA not after: Fri 01 Mar 2030 14:42:11 +0000
asID: 33763
IP address blocks: 160.242.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1398 (0x576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Jul 28 14:42:11 2026 GMT
Not After : Mar 1 14:42:11 2030 GMT
Subject: CN=6a68bfc7-6866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:37:17:2e:65:a0:b3:7f:32:96:ba:ae:e5:
17:23:73:b9:35:31:81:30:2d:05:b3:47:91:a7:08:
aa:a8:24:fb:35:07:ce:cd:36:b0:cb:cc:62:0d:e4:
17:8c:f1:70:4b:bb:e1:e0:54:68:50:a4:d4:fb:25:
73:73:6b:d5:ed:6f:da:13:52:e7:44:98:24:61:6d:
55:8d:95:c3:78:09:52:69:1e:c0:bb:5b:bb:a2:97:
f9:fa:97:b5:a3:c6:49:d7:09:b9:00:ef:9b:e0:81:
9f:20:43:a5:df:3f:7b:ea:61:8e:b5:c9:f2:99:d9:
5c:03:5a:fd:ee:4f:5e:cd:57:79:11:ec:19:b2:d1:
0d:3b:69:eb:35:60:7f:6c:20:e3:85:93:5b:e0:89:
8f:f5:31:35:95:33:0e:f5:c6:ce:f5:43:04:f7:07:
69:23:77:a4:a9:26:16:37:b2:29:30:82:f0:d3:42:
9a:61:df:f8:c9:f0:07:e0:1d:36:01:f0:8d:b3:60:
e9:9f:b5:04:1a:37:d4:80:c8:ca:c9:31:da:9b:45:
0d:ab:0e:8c:87:15:12:c5:e5:5f:4d:9d:42:cc:e7:
66:d0:98:bc:c1:8f:b3:8f:23:2d:1b:45:e9:50:cd:
4e:49:bc:c3:32:70:6c:2f:40:48:58:0d:c8:fc:bc:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A0:43:40:E4:D2:83:57:B4:8E:A1:CB:95:0B:07:88:C9:BC:F5:44
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/86664F868A9211F19A6099EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:02:af:32:e5:c9:62:17:40:1b:b7:a7:b2:3c:4f:e8:c1:5e:
8e:fe:57:25:20:ef:6f:33:61:77:44:3e:44:2e:32:46:16:46:
98:36:55:dd:39:0e:4e:5d:db:95:3e:59:88:e0:8a:0f:91:f1:
31:b4:14:70:5e:19:22:5e:32:00:47:11:63:07:f5:00:29:36:
4c:0d:92:a8:a9:db:5b:40:c0:72:de:f9:90:84:e4:f1:54:3a:
5d:58:0b:44:20:c1:ee:47:0e:db:12:00:35:0c:86:26:51:45:
4d:98:4d:11:9c:07:a8:f7:9e:28:3c:3e:72:9c:7a:4b:c9:67:
14:e2:28:49:06:a9:3c:cb:b3:fc:f1:d5:05:39:02:5d:20:91:
07:ca:16:8c:d7:db:3c:ac:74:f8:f5:00:7f:9c:61:99:4e:8a:
a6:7c:2d:0c:49:db:a2:ac:cc:ec:f0:01:4a:b9:21:16:3f:83:
cd:24:03:ff:cd:5a:89:a4:11:f3:cb:b2:a1:a2:f1:e7:85:f4:
08:fd:29:32:75:35:5d:0e:cd:67:e0:c5:69:1b:f6:0f:cd:90:
3c:bf:f8:cb:41:cc:a3:f1:77:18:f8:e7:c7:e9:8c:f4:61:a6:
9e:55:0d:d3:77:18:f7:84:b0:ad:86:5a:16:42:5c:9c:4c:11:
5b:d2:51:26
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBUjExMC8GA1UEBRMoRDlDMEIyMzNBQ0IwNjM1NDM1NzREM0Y1RjMyN0JF
QjhCMkI5OTExODAeFw0yNjA3MjgxNDQyMTFaFw0zMDAzMDExNDQyMTFaMBgxFjAU
BgNVBAMTDTZhNjhiZmM3LTY4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiKjcXLmWgs38ylrqu5Rcjc7k1MYEwLQWzR5GnCKqoJPs1B87NNrDLzGIN
5BeM8XBLu+HgVGhQpNT7JXNza9Xtb9oTUudEmCRhbVWNlcN4CVJpHsC7W7uil/n6
l7WjxknXCbkA75vggZ8gQ6XfP3vqYY61yfKZ2VwDWv3uT17NV3kR7Bmy0Q07aes1
YH9sIOOFk1vgiY/1MTWVMw71xs71QwT3B2kjd6SpJhY3sikwgvDTQpph3/jJ8Afg
HTYB8I2zYOmftQQaN9SAyMrJMdqbRQ2rDoyHFRLF5V9NnULM52bQmLzBj7OPIy0b
RelQzU5JvMMycGwvQEhYDcj8vBjZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVKBD
QOTSg1e0jqHLlQsHiMm89UQwHwYDVR0jBBgwFoAU2cCyM6ywY1Q1dNP18ye+uLK5
kRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzVBNDExRjlFQjhFRjExRURBNUIwOUREQUYxMjIyNDY4LzJjQ3lN
Nnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzJjQ3lNNnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjg4NkIzLzVBNDExRjlFQjhFRjExRURBNUIwOUREQUYxMjIy
NDY4Lzg2NjY0Rjg2OEE5MjExRjE5QTYwOTlFRkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASg8kAwDQYJKoZIhvcNAQELBQAD
ggEBAHsCrzLlyWIXQBu3p7I8T+jBXo7+VyUg728zYXdEPkQuMkYWRpg2Vd05Dk5d
25U+WYjgig+R8TG0FHBeGSJeMgBHEWMH9QApNkwNkqip21tAwHLe+ZCE5PFUOl1Y
C0Qgwe5HDtsSADUMhiZRRU2YTRGcB6j3nig8PnKcekvJZxTiKEkGqTzLs/zx1QU5
Al0gkQfKFozX2zysdPj1AH+cYZlOiqZ8LQxJ26KszOzwAUq5IRY/g80kA//NWomk
EfPLsqGi8eeF9Aj9KTJ1NV0OzWfgxWkb9g/NkDy/+MtBzKPxdxj458fpjPRhpp5V
DdN3GPeEsK2GWhZCXJxMEVvSUSY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:43 2026 by rpki-client