Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/586A0F7C8B6511F1A897B2F7CE1D38B0.roa
File: 586A0F7C8B6511F1A897B2F7CE1D38B0.roa (raw, json)
Hash identifier: BVUJLhBxgIOYty5c953+a5ir6ugYP6krZpKCzuYet6U=
Subject key identifier: 52:D0:9D:04:F7:87:6B:74:8A:71:88:A9:07:DC:28:C1:8D:E8:26:83
Certificate issuer: /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial: 0A21
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Authority info access: rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/586A0F7C8B6511F1A897B2F7CE1D38B0.roa
Signing time: Wed 29 Jul 2026 15:51:22 +0000
ROA not before: Wed 29 Jul 2026 15:51:18 +0000
ROA not after: Wed 14 Jan 2032 15:51:18 +0000
asID: 36924
IP address blocks: 164.160.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Validity
Not Before: Jul 29 15:51:18 2026 GMT
Not After : Jan 14 15:51:18 2032 GMT
Subject: CN=6a6a217a-b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:2b:ba:83:12:b1:0c:9c:0e:86:10:40:c2:
6a:06:ee:57:b5:a6:aa:2f:cd:86:9b:da:8a:fc:2b:
14:e7:ec:73:f6:01:3c:27:7e:70:ed:d7:cd:dc:aa:
26:51:7e:3e:e1:91:7c:17:40:d3:49:8d:26:49:ce:
f4:e2:cd:61:f2:50:25:9c:36:e7:c2:cf:b9:1d:fa:
1a:91:c3:19:01:2b:e0:06:80:f6:8b:1d:fa:99:95:
a2:18:20:ad:54:83:90:2f:92:d6:20:c9:71:3c:94:
35:77:db:f4:28:b8:94:13:b8:be:7a:39:78:bb:dd:
14:7a:38:e9:63:a5:4b:87:5b:e8:55:69:7d:1f:bc:
ed:f9:18:10:b9:b5:64:c8:28:c0:da:23:9e:12:94:
17:24:bf:4a:82:a4:07:b2:5d:96:ab:7e:19:73:8e:
be:46:6f:02:03:df:b2:63:c5:3c:d7:26:23:5e:d7:
de:ec:b3:96:ba:49:b4:48:d2:e2:c0:c1:3f:6e:39:
65:68:ec:92:16:83:0e:9b:9e:77:6e:a5:cb:18:2f:
4d:d1:9b:06:d0:89:09:a5:68:24:7c:00:c2:13:03:
5e:81:85:5a:6c:07:31:69:a0:06:82:04:dc:a0:e9:
f1:4d:98:36:aa:41:a2:76:d0:a7:bd:48:ba:bc:a5:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:9D:04:F7:87:6B:74:8A:71:88:A9:07:DC:28:C1:8D:E8:26:83
X509v3 Authority Key Identifier:
keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/586A0F7C8B6511F1A897B2F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.160.16.0/22
Signature Algorithm: sha256WithRSAEncryption
27:35:8c:8c:62:84:75:6e:e8:ee:7f:58:a4:f2:7d:37:89:11:
ce:f2:d6:9c:a0:ec:2a:b6:fc:34:e3:85:f2:80:9f:17:36:64:
d9:c9:c1:f1:83:c6:50:d4:e4:af:28:4b:02:ff:e6:b4:ad:be:
1d:ec:30:64:fe:25:6e:79:82:25:da:e1:06:2a:71:66:56:aa:
61:40:ec:40:c4:90:88:4b:f3:fe:08:a0:22:59:ff:e4:eb:e8:
02:03:cb:10:72:58:5c:b3:58:b7:62:99:b8:e8:56:ff:4f:c8:
b6:31:83:5e:5d:34:54:33:30:cc:39:1b:8f:0a:37:22:f7:20:
ae:f3:6d:fb:e3:2d:df:e8:66:80:d0:b4:68:7a:8b:50:fc:ad:
70:c8:4d:fe:e3:01:5c:46:01:d8:25:36:fc:d9:07:e0:75:52:
13:8c:2b:2b:38:b6:c4:d4:33:0e:bf:ac:db:9f:ee:98:71:00:
cd:94:f2:b7:bf:26:e3:84:01:b3:63:83:20:f7:36:17:58:8f:
04:b9:e5:45:ee:05:e0:e4:2f:9f:a0:dc:a5:38:3b:64:09:a7:
31:98:ac:16:d2:79:e4:dd:03:23:78:e3:d0:e3:a0:65:e4:c3:
28:51:f4:91:df:3f:57:1e:9c:b9:a4:79:ff:a9:36:1f:8a:4e:
dd:b5:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 10:17:26 2026 by rpki-client