Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/37F5CA1C8DA711F188D9EDC3CE1D38B0.roa
File: 37F5CA1C8DA711F188D9EDC3CE1D38B0.roa (raw, json)
Hash identifier: IbzZRWq+YoJAGJ1pBYTPRd+rnICSSevxY6WfqJWQ2hg=
Subject key identifier: 47:77:B5:83:81:2F:0B:7C:39:9E:C3:F0:B0:DC:46:F1:5B:7C:C4:2B
Certificate issuer: /CN=F36BA80DAR/serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
Certificate serial: 096A
Authority key identifier: EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F
Authority info access: rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/37F5CA1C8DA711F188D9EDC3CE1D38B0.roa
Signing time: Sat 01 Aug 2026 12:47:57 +0000
ROA not before: Sat 01 Aug 2026 12:47:53 +0000
ROA not after: Fri 01 Aug 2036 12:47:53 +0000
asID: 327926
IP address blocks: 169.255.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410 (0x96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAR, serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
Validity
Not Before: Aug 1 12:47:53 2026 GMT
Not After : Aug 1 12:47:53 2036 GMT
Subject: CN=6a6deafc-21f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:e1:51:54:d6:36:4d:76:2a:76:64:89:46:
fe:83:e8:4d:91:a7:a5:9c:cb:6c:87:10:23:c3:ad:
a2:bc:2a:5c:39:bb:33:a2:78:97:b4:f0:e7:ba:10:
93:1d:78:6b:aa:0a:45:08:9e:60:52:ba:72:a4:31:
f3:6d:51:a2:fb:f5:60:d7:1e:22:54:b5:ac:ef:cf:
bf:78:f3:e5:ef:d7:f0:1f:8f:4e:55:94:21:6f:b0:
88:32:18:16:1e:cf:82:d0:fe:04:77:67:dd:f2:51:
9d:9a:50:20:7b:24:51:9b:18:62:f9:7a:ca:c2:39:
17:95:d7:0b:07:b1:7e:1b:bb:74:89:c8:e2:2f:47:
65:fb:de:35:81:de:11:f6:95:b6:ad:f3:17:a7:ff:
f0:ca:10:c8:5f:b8:b4:87:86:63:54:5d:e2:fc:ce:
b2:10:7e:42:9f:e9:6e:62:aa:e3:38:52:41:fe:32:
29:1d:9e:31:5b:6e:ef:2d:35:0b:38:41:ac:9c:bf:
27:e6:1b:85:0d:41:41:9b:17:bc:64:59:44:aa:d5:
a9:50:c0:60:1b:e4:92:35:e6:f1:37:57:ca:ee:c6:
73:b2:07:d5:87:3b:da:55:a8:cb:40:a6:c5:39:66:
fd:62:46:bf:d7:17:89:90:ff:25:5d:7e:42:71:26:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:B5:83:81:2F:0B:7C:39:9E:C3:F0:B0:DC:46:F1:5B:7C:C4:2B
X509v3 Authority Key Identifier:
keyid:EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/37F5CA1C8DA711F188D9EDC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.28.0/22
Signature Algorithm: sha256WithRSAEncryption
44:4c:6a:38:84:b7:1f:d4:39:16:36:bd:10:8b:84:65:7a:2c:
80:09:33:e7:bd:df:ab:db:73:0b:34:5c:95:59:d4:d4:89:4e:
f1:7d:a1:5d:88:cd:52:df:98:1d:0a:64:78:53:74:d2:34:c9:
08:00:be:ea:d8:48:b5:65:46:9a:a8:ad:7c:68:8e:ee:81:6f:
1b:85:02:62:15:1e:02:33:b9:19:26:34:5a:84:64:0d:77:62:
5d:6e:cb:b6:dd:64:46:77:15:27:44:48:c4:f3:3b:49:d3:37:
ed:32:08:ba:54:7f:a6:41:56:d2:97:2d:1f:d1:0d:85:2a:35:
a9:20:41:fe:f5:fa:89:00:de:6d:30:2c:4f:b7:c2:2f:ce:bc:
b0:12:4a:a2:17:a4:d3:73:70:d3:e2:79:67:c6:51:b9:29:9a:
da:f8:13:fb:8d:f6:cd:c5:c2:38:e8:11:6a:a9:58:92:0d:0b:
05:e8:31:f1:0f:e3:9a:40:69:1d:09:c4:24:66:5b:64:d0:c8:
a4:d4:45:1f:e3:fd:67:92:3f:d7:f1:e7:52:d4:d8:fc:8c:b5:
7f:d8:28:36:d1:52:08:1e:c6:6e:1a:f9:36:0b:d1:7e:73:fa:
94:4a:1b:1c:da:e7:2e:9d:30:f2:6d:bd:de:97:70:2a:1e:07:
b6:84:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:11:45 2026 by rpki-client