Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/D40A53188A9211F1888E83F1CE1D38B0.roa
File: D40A53188A9211F1888E83F1CE1D38B0.roa (raw, json)
Hash identifier: 7JtghGAE7gng9Fkb6j1avA8wH4Ce7zgj/HHbwH7T4RI=
Subject key identifier: 9B:FA:5D:32:F4:26:39:D7:4F:63:02:68:D7:39:DF:CB:87:28:0B:1C
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 0578
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/D40A53188A9211F1888E83F1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:44:26 +0000
ROA not before: Tue 28 Jul 2026 14:44:22 +0000
ROA not after: Fri 01 Mar 2030 14:44:22 +0000
asID: 33763
IP address blocks: 160.242.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 14:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Jul 28 14:44:22 2026 GMT
Not After : Mar 1 14:44:22 2030 GMT
Subject: CN=6a68c049-0b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:97:79:98:52:28:03:8a:3b:fe:f8:77:b2:
50:72:8a:89:1c:86:ac:de:e3:70:06:ea:33:2d:95:
93:13:22:7d:8c:e2:0a:9c:20:4c:f1:72:3e:74:5b:
dd:fc:53:29:50:d8:42:ad:b4:c4:3b:e0:21:e0:c7:
6b:78:32:e8:20:21:e3:26:16:a5:e1:94:fd:df:4a:
f2:75:d4:9d:41:bb:c8:53:56:5f:de:78:c0:32:c9:
c8:8b:8d:c8:4d:38:7d:46:ca:13:66:49:05:51:37:
97:7c:a1:56:2c:ff:e1:ff:3d:fc:51:b3:02:2c:44:
9a:59:77:33:35:ae:f0:7b:a0:db:15:fd:26:f8:b8:
46:e4:ec:dd:75:f0:10:3a:c6:95:11:04:33:e2:65:
13:a5:ac:65:c7:5f:ec:aa:fe:75:63:ca:22:06:8d:
88:d3:d1:16:c0:3d:f8:63:4f:3a:bb:98:02:e7:d1:
9b:08:e2:5f:86:5c:d6:80:32:f9:4a:35:88:b7:4d:
16:60:f7:b6:b6:f8:f7:09:84:d0:f5:ee:81:3e:eb:
ef:16:e4:ba:f6:e1:91:ab:a9:0d:c3:f9:3f:b9:af:
e6:9e:82:e5:d0:2c:e1:2a:1e:21:a3:4c:7f:5f:3f:
6b:38:f3:f1:5f:10:a9:d4:2b:15:94:fc:aa:96:c3:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:5D:32:F4:26:39:D7:4F:63:02:68:D7:39:DF:CB:87:28:0B:1C
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/D40A53188A9211F1888E83F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.80.0/20
Signature Algorithm: sha256WithRSAEncryption
81:cb:47:45:33:d5:e3:63:f5:e1:17:30:61:6d:a1:48:a0:90:
70:8e:3e:f0:63:e0:ed:2d:0d:20:24:ad:a2:b3:a4:5a:1c:5d:
4b:95:58:d0:e0:9e:9e:5f:55:1f:68:c8:66:f3:7a:35:eb:92:
50:4d:d0:27:de:0d:63:3d:7c:bc:d3:f9:84:ec:f6:70:4f:82:
d7:fe:43:e8:fb:4e:48:ce:34:84:c7:00:c5:25:47:80:d8:d7:
18:3d:b5:b4:58:20:cb:2c:5a:1d:f6:21:33:e1:4c:dc:10:6c:
be:c1:33:bc:57:a8:66:f9:68:ed:67:fd:a7:85:f1:9b:b0:03:
24:8c:51:f3:8f:c0:c3:ea:d5:25:75:78:40:d6:a7:df:8b:4c:
3f:a4:4c:b4:eb:d8:ae:78:70:51:1a:3a:4c:38:99:06:2d:bc:
fd:06:13:8e:5e:8c:73:cf:c5:48:50:cd:98:8a:65:96:03:7a:
5f:f1:1a:47:ec:1b:fb:bb:14:1e:73:86:4f:b1:1e:84:7a:1d:
8c:bd:df:69:44:9b:89:a1:95:05:2f:e5:5e:b0:37:e3:85:f6:
4c:47:d7:a4:dd:e0:58:8c:9d:c0:77:dd:31:a5:64:72:69:9b:
da:62:2e:bd:51:12:5b:17:12:a3:bc:9e:c8:9d:76:0c:7c:05:
2d:5b:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:20 2026 by rpki-client