Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/25BF7DCC7B7111F1A3CD0DF9CE1D38B0.roa
File: 25BF7DCC7B7111F1A3CD0DF9CE1D38B0.roa (raw, json)
Hash identifier: HQj0ezVFNm0IyaCMur10comY5AWBNF/4kn1xaLyn1Ak=
Subject key identifier: 3E:B7:58:52:A1:15:15:4E:E8:06:C9:F4:85:D7:FC:CA:88:2A:C1:68
Certificate issuer: /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial: 0789
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Authority info access: rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/25BF7DCC7B7111F1A3CD0DF9CE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:35:32 +0000
ROA not before: Thu 09 Jul 2026 08:35:28 +0000
ROA not after: Thu 31 Jul 2036 08:35:28 +0000
asID: 327750
IP address blocks: 164.160.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAR, serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Validity
Not Before: Jul 9 08:35:28 2026 GMT
Not After : Jul 31 08:35:28 2036 GMT
Subject: CN=6a4f5d54-e328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:66:d7:13:41:73:f9:c0:47:a5:3b:d4:50:
a0:5f:5b:de:96:a7:66:4e:44:b9:5e:f7:ac:8c:ca:
56:4a:0a:89:4c:e5:41:8f:49:7b:98:5d:c8:78:f7:
84:fb:8e:6b:a1:2c:25:9b:cb:28:35:aa:e4:ea:b1:
69:86:ee:0a:6c:ec:30:2c:5d:79:8d:0c:3c:26:9e:
39:64:44:1b:79:f8:57:5f:22:59:8d:79:76:a0:27:
71:90:be:08:7f:73:83:9f:40:48:d8:04:3e:a4:b5:
54:0b:bf:72:65:52:11:9e:88:35:ab:fa:36:cf:05:
1f:3a:0d:a9:d5:04:99:0a:af:0b:21:45:4f:de:fd:
db:7a:c0:c0:d2:c5:b4:6f:0b:85:dc:73:a6:38:b5:
fc:c8:cd:6c:58:f6:be:66:c4:83:df:00:95:6f:bf:
95:81:a5:d0:c2:4d:56:e5:15:cc:54:95:60:48:be:
74:ae:e4:21:a4:89:0d:97:20:f7:0f:c3:b2:89:79:
b5:a1:c2:0c:2f:78:27:bc:3b:8a:f8:e1:d4:f0:53:
20:64:b9:e6:6b:71:30:bb:1c:2a:27:32:cb:47:58:
9a:be:86:42:f0:f6:ee:0a:b2:cf:f4:6b:e1:71:0c:
dd:28:71:59:63:2e:6b:18:00:eb:67:64:28:08:d8:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:58:52:A1:15:15:4E:E8:06:C9:F4:85:D7:FC:CA:88:2A:C1:68
X509v3 Authority Key Identifier:
keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/25BF7DCC7B7111F1A3CD0DF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.160.176.0/21
Signature Algorithm: sha256WithRSAEncryption
38:c0:0f:d4:92:fd:48:61:b1:c7:a7:92:04:95:43:05:89:f3:
31:a6:b9:1f:68:2d:e6:68:f2:b9:2d:35:61:98:84:a7:49:69:
3a:89:eb:eb:a1:15:68:46:33:e7:30:f5:67:cf:f7:62:e7:cc:
64:f8:c4:6e:2d:ef:b8:2e:54:63:9a:50:57:87:b0:85:ec:19:
d8:51:68:dd:da:2f:1d:74:c1:df:c9:b4:43:70:50:99:3b:ad:
41:b6:84:dc:c7:ad:4b:b1:97:4a:8c:7d:ef:18:44:74:ce:81:
ec:a0:55:12:2b:80:42:db:18:40:91:82:83:81:b2:a3:5d:9f:
23:b0:df:4c:2e:41:06:34:cc:0e:e3:8f:82:88:09:8e:6d:b2:
4b:cf:d1:0d:7b:7c:da:70:64:28:ec:cc:5d:c5:8b:62:c2:5b:
4f:10:f0:77:f3:34:61:aa:37:5a:a5:6c:e7:08:d2:62:5d:f0:
dd:db:e3:65:2b:d5:a4:6a:6f:41:54:79:5d:ae:f4:76:85:3f:
98:ee:81:1b:74:61:2b:ec:1e:44:2b:76:65:8c:a5:eb:3c:d5:
ab:df:f2:41:31:b6:2e:27:70:f2:07:cd:b6:10:b9:f5:27:01:
a1:f4:c7:da:77:77:68:5e:34:87:c8:f2:fd:79:01:bb:7a:be:
21:f1:2e:b8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBBQ0ZBUjExMC8GA1UEBRMoNTg4NzcwMEM1RjI0OTBGNTU4NDM4MkY5RTdFNzUy
NkFENjU1NDhCMzAeFw0yNjA3MDkwODM1MjhaFw0zNjA3MzEwODM1MjhaMBgxFjAU
BgNVBAMTDTZhNGY1ZDU0LWUzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR0WbXE0Fz+cBHpTvUUKBfW96Wp2ZORLle96yMylZKColM5UGPSXuYXch4
94T7jmuhLCWbyyg1quTqsWmG7gps7DAsXXmNDDwmnjlkRBt5+FdfIlmNeXagJ3GQ
vgh/c4OfQEjYBD6ktVQLv3JlUhGeiDWr+jbPBR86DanVBJkKrwshRU/e/dt6wMDS
xbRvC4Xcc6Y4tfzIzWxY9r5mxIPfAJVvv5WBpdDCTVblFcxUlWBIvnSu5CGkiQ2X
IPcPw7KJebWhwgwveCe8O4r44dTwUyBkueZrcTC7HConMstHWJq+hkLw9u4Kss/0
a+FxDN0ocVljLmsYAOtnZCgI2FHnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUPrdY
UqEVFU7oBsn0hdf8yogqwWgwHwYDVR0jBBgwFoAUWIdwDF8kkPVYQ4L55+dSatZV
SLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQUNGLzA4QTVGRjgyQzIxNjExRUI4QUE5MzU2RUY4QUVBMjI4L1dJZHdE
Rjhra1BWWVE0TDU1LWRTYXRaVlNMTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1dJZHdERjhra1BWWVE0TDU1LWRTYXRaVlNMTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjIwQUNGLzA4QTVGRjgyQzIxNjExRUI4QUE5MzU2RUY4QUVB
MjI4LzI1QkY3RENDN0I3MTExRjFBM0NEMERGOUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOkoLAwDQYJKoZIhvcNAQELBQAD
ggEBADjAD9SS/UhhscenkgSVQwWJ8zGmuR9oLeZo8rktNWGYhKdJaTqJ6+uhFWhG
M+cw9WfP92LnzGT4xG4t77guVGOaUFeHsIXsGdhRaN3aLx10wd/JtENwUJk7rUG2
hNzHrUuxl0qMfe8YRHTOgeygVRIrgELbGECRgoOBsqNdnyOw30wuQQY0zA7jj4KI
CY5tskvP0Q17fNpwZCjszF3Fi2LCW08Q8HfzNGGqN1qlbOcI0mJd8N3b42Ur1aRq
b0FUeV2u9HaFP5jugRt0YSvsHkQrdmWMpes81avf8kExti4ncPIHzbYQufUnAaH0
x9p3d2heNIfI8v15Abt6viHxLrg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:16 2026 by rpki-client