Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/9FD8B6BE8A8511F19A30BDA4CE1D38B0.roa
File: 9FD8B6BE8A8511F19A30BDA4CE1D38B0.roa (raw, json)
Hash identifier: 20TTeReP9LBEIc4n+ud2MuZvhWvzCQCXDYXfcGRz4u0=
Subject key identifier: 10:3B:1B:7C:7A:E3:D6:FF:3F:46:C5:F1:19:27:82:D1:FC:90:60:D3
Certificate issuer: /CN=F36CF917AR/serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Certificate serial: 061E
Authority key identifier: C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
Authority info access: rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/9FD8B6BE8A8511F19A30BDA4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:09:54 +0000
ROA not before: Tue 28 Jul 2026 13:09:50 +0000
ROA not after: Mon 28 Jul 2036 13:09:50 +0000
asID: 37294
IP address blocks: 168.253.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566 (0x61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AR, serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Validity
Not Before: Jul 28 13:09:50 2026 GMT
Not After : Jul 28 13:09:50 2036 GMT
Subject: CN=6a68aa22-5fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:25:8b:fa:af:64:02:b3:a5:a8:9d:1d:14:
86:4a:ff:c5:30:66:4b:06:a6:a6:eb:5e:0f:fa:51:
93:10:fc:c8:5a:c3:02:76:16:a7:95:eb:24:36:f9:
d7:ab:0f:23:ab:00:10:71:a1:b1:77:ea:67:d6:9f:
bf:1e:4e:0f:90:48:00:6c:61:be:1c:86:ab:1d:0a:
29:35:9a:bb:47:9e:31:c2:fc:e5:ff:1f:39:c2:70:
a2:35:ce:90:63:60:13:9c:18:56:cf:a1:17:8e:ce:
9d:21:82:6e:73:2e:35:ed:c3:07:4c:27:7f:d3:9c:
c9:29:15:fe:d8:8d:a3:44:af:6a:56:5d:13:2a:19:
fb:06:9e:47:46:5b:88:3a:91:8e:09:f6:fd:ad:99:
42:8a:04:1b:17:44:c5:f8:15:ea:50:ed:23:db:22:
f2:7a:40:56:7e:dd:14:ca:ff:99:c2:c4:25:64:d0:
76:e8:6e:78:de:5e:e1:20:15:b9:59:6a:28:e3:1c:
25:2a:79:ed:ed:40:b2:89:f1:b3:bf:01:20:8e:bf:
d1:08:7b:12:70:0b:ed:0a:d4:4a:60:d0:eb:bd:c7:
6a:16:5f:50:0c:8a:aa:02:b1:5d:72:b4:23:b1:a0:
52:c8:48:9d:2e:58:3b:ee:b7:a9:ee:71:1e:6f:0f:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:1B:7C:7A:E3:D6:FF:3F:46:C5:F1:19:27:82:D1:FC:90:60:D3
X509v3 Authority Key Identifier:
keyid:C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/9FD8B6BE8A8511F19A30BDA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.224.0/19
Signature Algorithm: sha256WithRSAEncryption
74:6a:5b:20:9c:36:0a:00:e6:02:c4:81:c1:99:29:bc:96:d8:
73:ca:08:fc:ad:9c:ca:e0:db:56:b7:ad:23:80:d1:d4:4a:62:
fe:8e:31:fd:2c:94:4f:96:0d:6c:93:24:10:fb:d9:5c:3b:a0:
e0:10:05:b2:9c:fc:73:07:7d:93:37:03:c8:02:96:ae:fa:49:
9f:ba:83:1a:74:80:4e:ff:24:82:4f:17:a1:1f:d3:8e:31:29:
bf:87:1f:30:9b:c5:a7:d6:a7:12:52:46:b7:bd:9c:13:d9:31:
03:23:32:c2:08:2e:8a:2f:44:5b:54:d5:20:74:fb:2d:ee:a7:
37:e3:fc:5e:d0:31:81:72:dd:06:c4:71:37:6b:62:e2:64:ad:
55:d0:69:02:27:83:69:c5:89:fd:2e:a7:7d:a1:cd:08:3e:55:
3c:3b:6a:cb:17:5e:65:01:2a:86:f8:24:11:af:d3:b4:31:0b:
69:1f:01:85:6f:be:22:dc:f9:28:10:cc:a6:7b:0f:5d:5f:22:
02:ec:f9:1f:0b:2e:27:88:1a:11:93:64:bc:f3:7b:34:ea:76:
71:68:3e:5c:b8:7e:1f:87:83:23:27:81:54:f3:2b:72:5d:7f:
53:2a:a9:bd:72:4f:d3:65:8a:51:a0:fa:11:dd:58:ef:2f:d3:
a2:83:4f:89
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0Y5MTdBUjExMC8GA1UEBRMoQzM4NTc0MjFENURCOEI2MTQ0RDA3QzNDNTkzNzFG
NDIwMzE3QTk3NzAeFw0yNjA3MjgxMzA5NTBaFw0zNjA3MjgxMzA5NTBaMBgxFjAU
BgNVBAMTDTZhNjhhYTIyLTVmYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3ACWL+q9kArOlqJ0dFIZK/8UwZksGpqbrXg/6UZMQ/MhawwJ2FqeV6yQ2
+derDyOrABBxobF36mfWn78eTg+QSABsYb4chqsdCik1mrtHnjHC/OX/HznCcKI1
zpBjYBOcGFbPoReOzp0hgm5zLjXtwwdMJ3/TnMkpFf7YjaNEr2pWXRMqGfsGnkdG
W4g6kY4J9v2tmUKKBBsXRMX4FepQ7SPbIvJ6QFZ+3RTK/5nCxCVk0HbobnjeXuEg
FblZaijjHCUqee3tQLKJ8bO/ASCOv9EIexJwC+0K1Epg0Ou9x2oWX1AMiqoCsV1y
tCOxoFLISJ0uWDvut6nucR5vD4PBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUEDsb
fHrj1v8/RsXxGSeC0fyQYNMwHwYDVR0jBBgwFoAUw4V0IdXbi2FE0Hw8WTcfQgMX
qXcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNGOTE3L0Y5QzFFNDEyRTI3NzExRUNCQTI3OEFENkYxMjIyNDY4L3c0VjBJ
ZFhiaTJGRTBIdzhXVGNmUWdNWHFYYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3c0VjBJZFhiaTJGRTBIdzhXVGNmUWdNWHFYYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkNGOTE3L0Y5QzFFNDEyRTI3NzExRUNCQTI3OEFENkYxMjIy
NDY4LzlGRDhCNkJFOEE4NTExRjE5QTMwQkRBNENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWo/eAwDQYJKoZIhvcNAQELBQAD
ggEBAHRqWyCcNgoA5gLEgcGZKbyW2HPKCPytnMrg21a3rSOA0dRKYv6OMf0slE+W
DWyTJBD72Vw7oOAQBbKc/HMHfZM3A8gClq76SZ+6gxp0gE7/JIJPF6Ef044xKb+H
HzCbxafWpxJSRre9nBPZMQMjMsIILoovRFtU1SB0+y3upzfj/F7QMYFy3QbEcTdr
YuJkrVXQaQIng2nFif0up32hzQg+VTw7assXXmUBKob4JBGv07QxC2kfAYVvviLc
+SgQzKZ7D11fIgLs+R8LLieIGhGTZLzzezTqdnFoPly4fh+HgyMngVTzK3Jdf1Mq
qb1yT9NlilGg+hHdWO8v06KDT4k=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:04:07 2026 by rpki-client