Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/A1E8E2BC8D7811F192E316AFCE1D38B0.roa
File: A1E8E2BC8D7811F192E316AFCE1D38B0.roa (raw, json)
Hash identifier: WsTZrPAbVIhxZFJcqy2xGIkPnUOKiwFeIR40Ps0PfT8=
Subject key identifier: 9C:18:FB:D6:B7:5D:20:C2:12:9C:08:CD:58:B1:D5:0E:D9:45:CD:60
Certificate issuer: /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial: 05B5
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Authority info access: rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/A1E8E2BC8D7811F192E316AFCE1D38B0.roa
Signing time: Sat 01 Aug 2026 07:14:28 +0000
ROA not before: Sat 01 Aug 2026 07:14:24 +0000
ROA not after: Wed 14 Jan 2032 07:14:24 +0000
asID: 327950
IP address blocks: 165.90.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4943AR, serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Validity
Not Before: Aug 1 07:14:24 2026 GMT
Not After : Jan 14 07:14:24 2032 GMT
Subject: CN=6a6d9cd4-61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:46:97:09:db:02:68:56:65:5f:12:37:52:
73:06:69:27:3c:07:d6:c2:a7:61:de:32:e6:0e:f4:
cd:80:ca:72:71:7e:2a:67:f1:e5:83:5f:df:b2:8a:
43:c8:4e:7c:e6:e6:a0:ab:3f:a3:02:b4:ad:fb:2c:
0e:e0:d0:7b:a3:ed:99:4d:d6:85:81:5f:5f:88:d0:
01:c2:e0:b2:55:b1:e9:b7:89:96:0f:27:0a:83:a6:
e0:21:0a:bf:ae:0f:e6:47:9a:5f:21:36:cd:ae:b4:
62:f8:ec:e7:f6:23:20:87:b7:d7:ab:00:ba:ef:d8:
2f:f4:2d:ea:92:4f:ab:e9:cf:35:c3:44:39:ee:2e:
0a:99:25:e2:c6:dd:ad:86:6d:39:9a:d5:cc:e4:f6:
f0:63:c4:63:d4:44:18:32:1e:44:38:57:23:0d:bd:
1b:0c:a6:4f:cc:99:f6:62:23:25:21:f5:be:ab:15:
94:28:e7:55:f0:7d:f6:7f:17:46:b8:f1:33:b5:17:
d7:15:b9:4b:91:1f:ad:6b:03:18:ae:63:c3:70:ac:
6d:2a:20:eb:8f:4c:ff:6e:f5:f0:1f:57:f4:da:ff:
f3:8a:b0:b2:00:8c:b2:e7:0c:90:58:c2:95:b1:b3:
61:d1:a3:eb:df:91:12:72:15:32:76:e4:7a:95:6a:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:FB:D6:B7:5D:20:C2:12:9C:08:CD:58:B1:D5:0E:D9:45:CD:60
X509v3 Authority Key Identifier:
keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/A1E8E2BC8D7811F192E316AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.90.192.0/20
Signature Algorithm: sha256WithRSAEncryption
13:bc:26:9a:d2:49:b4:e9:da:ea:aa:2f:2a:b4:6e:4a:15:4f:
5e:35:32:d3:c0:2a:98:11:f9:06:71:4c:32:87:80:43:1f:11:
77:7d:ec:84:89:58:45:d6:9d:70:bc:7d:c8:a9:95:12:82:7a:
56:86:ca:58:00:2b:df:ab:56:1b:9d:86:70:db:ca:10:76:d9:
d8:a2:42:de:0b:ae:96:d2:0d:f4:3d:4e:3f:72:47:d1:a6:24:
7c:8f:c0:39:c9:7d:73:4e:86:30:a5:19:d1:ff:c8:6c:63:0d:
dc:28:b7:1e:c4:6f:a8:4d:b1:b0:b6:4c:e1:87:50:c3:7d:4c:
f2:e5:74:d3:fa:19:56:0a:47:ea:c9:3c:10:c1:d0:44:37:22:
16:92:65:eb:e2:1d:ea:0c:a5:60:cd:0b:2d:dd:4e:4e:2a:49:
f9:a8:86:e9:db:6d:5b:34:06:ce:a0:f2:c0:e4:b4:76:36:7b:
84:4f:f7:8a:38:91:39:f3:f1:c8:25:0b:78:a9:4e:96:d5:69:
88:24:70:67:89:a4:27:71:43:6c:ff:a1:a0:48:8a:93:91:82:
e2:10:19:3c:2c:4a:86:b5:16:38:c9:72:b0:39:74:49:82:9e:
21:a3:df:aa:bd:f3:f7:db:03:2b:db:1a:00:25:d2:35:cc:fe:
31:d1:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:26:57 2026 by rpki-client