Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/B307C7908CF411F1A260CE00CF1D38B0.roa
File: B307C7908CF411F1A260CE00CF1D38B0.roa (raw, json)
Hash identifier: 7+7iCNVIWT6E40tpferJJaH5xHzZfV/GotmSnRGdanQ=
Subject key identifier: 4B:F8:EB:9A:DB:4F:7B:5F:85:A3:C1:BC:48:40:10:BD:EA:3D:D3:2C
Certificate issuer: /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial: 053B
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Authority info access: rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/B307C7908CF411F1A260CE00CF1D38B0.roa
Signing time: Fri 31 Jul 2026 15:30:03 +0000
ROA not before: Fri 31 Jul 2026 15:29:59 +0000
ROA not after: Sun 09 Jan 2033 15:29:59 +0000
asID: 328216
IP address blocks: 156.0.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Validity
Not Before: Jul 31 15:29:59 2026 GMT
Not After : Jan 9 15:29:59 2033 GMT
Subject: CN=6a6cbf7b-9611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:9b:49:ab:ee:5b:90:37:5b:53:95:bc:f1:
6c:ba:11:23:8f:de:ad:a7:e3:d4:d8:b4:32:f6:4a:
be:12:f3:c0:e0:b7:b4:18:4e:4a:16:ca:03:25:b0:
62:de:09:9e:2d:a4:d3:01:2d:88:8d:21:73:73:c4:
f2:a2:36:8e:bb:e0:ad:b2:5d:93:bd:34:2c:a8:00:
15:f5:83:0f:48:2a:6c:71:a7:50:a2:ce:18:48:5e:
40:eb:c4:b7:b0:75:4c:2a:f6:a1:b8:93:5b:bd:55:
f0:69:3a:cb:1e:9f:cc:ea:c8:75:b4:f6:a0:6e:4d:
38:6f:66:77:14:0c:bd:a7:85:29:62:59:16:04:33:
93:a6:63:ce:05:22:b0:c2:b0:64:06:37:e9:e4:25:
84:d8:81:ac:e6:53:dd:df:58:0a:44:c2:35:66:dd:
96:c0:e5:9a:4e:69:0a:26:2d:aa:63:62:c0:5f:25:
6d:ed:01:5e:89:ae:62:fc:5c:40:3c:52:91:93:e1:
3b:bb:c1:29:ff:0a:c4:31:2b:5f:70:26:19:b4:c8:
73:b7:9b:83:55:9b:c6:79:ed:a8:0f:4a:97:2d:ba:
74:63:08:a5:36:1c:77:1d:b0:61:90:8d:42:0e:5d:
91:94:77:ae:13:7c:b6:97:a5:cb:16:2d:5d:10:f1:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:EB:9A:DB:4F:7B:5F:85:A3:C1:BC:48:40:10:BD:EA:3D:D3:2C
X509v3 Authority Key Identifier:
keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/B307C7908CF411F1A260CE00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.192.0/22
Signature Algorithm: sha256WithRSAEncryption
43:2a:17:30:63:e7:3c:bc:cc:6e:fd:cc:7f:11:07:ff:ae:4a:
6f:5c:50:80:1f:27:d3:1a:80:5a:07:9d:6c:05:1e:18:2d:d0:
08:06:45:ce:15:eb:81:dc:fb:2d:b5:da:83:1f:12:50:55:96:
a9:27:06:22:aa:79:fb:d9:19:a4:b5:80:21:a2:52:06:a0:d5:
55:c5:7d:d7:fa:a0:10:f7:46:d7:81:7f:5d:d5:a6:3d:5f:fa:
69:f9:72:0d:ec:a7:60:e2:4a:75:fc:41:26:50:8f:77:30:45:
b0:0e:a6:82:d8:af:cb:af:0f:ee:69:d1:a1:0b:32:af:4e:8d:
f3:a8:53:3f:e2:f7:13:23:79:59:a4:2c:7a:46:98:12:18:ca:
a0:5a:6a:11:4a:c1:13:44:83:5e:97:57:48:b4:22:7c:63:03:
c8:a9:d5:4c:d7:72:3c:4e:1f:b3:3c:4e:42:37:14:e4:a3:32:
7d:ba:d2:0d:f3:7f:06:ee:4e:b9:82:fa:c5:0a:76:38:98:1d:
b3:21:11:b9:31:6e:f7:e0:f8:43:20:a8:87:f5:d9:d8:ef:df:
97:28:58:ec:64:25:c5:10:5a:ca:c1:93:83:68:c1:ac:2d:15:
70:37:8f:6e:d4:43:eb:00:40:a6:2e:fd:27:e8:2a:03:06:8a:
56:cd:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:11:42 2026 by rpki-client