Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/AF286D2C7B7011F18DD180F8CE1D38B0.roa
File: AF286D2C7B7011F18DD180F8CE1D38B0.roa (raw, json)
Hash identifier: t1UaMVD7lHB3+6q7/cetlK1vXbXkKAdnQU2pB0WVI4g=
Subject key identifier: F7:89:21:A7:36:C4:A5:DA:E9:09:F1:E2:FE:5C:8B:C2:F6:F9:D4:1A
Certificate issuer: /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial: 0787
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Authority info access: rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/AF286D2C7B7011F18DD180F8CE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:32:13 +0000
ROA not before: Thu 09 Jul 2026 08:32:09 +0000
ROA not after: Wed 31 Dec 2036 08:32:09 +0000
asID: 327750
IP address blocks: 45.221.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAR, serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Validity
Not Before: Jul 9 08:32:09 2026 GMT
Not After : Dec 31 08:32:09 2036 GMT
Subject: CN=6a4f5c8d-e279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:85:50:ef:71:2e:05:91:ff:77:3a:85:9e:
96:88:73:2b:b3:24:20:24:94:68:01:c1:19:98:38:
b3:a4:3d:5d:02:09:5b:e9:dc:25:a4:dc:c8:61:d1:
08:cd:18:28:19:c2:ed:52:97:b4:eb:12:51:fa:00:
ad:fb:1a:9d:01:ab:16:e4:79:61:7a:ce:ea:c6:9b:
11:86:cf:0a:a9:d2:be:4a:ea:7a:2e:73:31:ca:98:
44:0c:91:8b:1d:1b:ed:14:74:a3:91:66:5a:0e:78:
6d:47:15:0e:fa:21:73:a1:5f:dc:ce:d4:a2:03:de:
34:fe:59:48:3f:22:15:7b:e3:d2:d5:28:8b:00:0a:
d5:a5:a1:90:71:bf:85:92:35:d7:fb:b0:64:ef:99:
08:12:a0:38:ac:14:39:c6:69:4c:95:2e:9a:0f:de:
22:c1:57:1f:4e:42:89:c6:32:ab:6f:fd:58:d0:9f:
bc:84:ca:16:0b:a8:01:55:56:41:7b:c6:e2:01:dd:
7e:0d:f2:a5:5d:c0:15:b5:1c:a5:1e:1f:7c:19:0f:
59:ba:8b:c8:13:19:eb:8c:81:12:5a:e1:8d:04:b3:
0a:7a:0f:07:ce:73:bf:e4:90:39:11:74:1f:9c:38:
85:b3:57:20:5e:bc:d0:3b:a0:65:72:6b:61:4a:f0:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:21:A7:36:C4:A5:DA:E9:09:F1:E2:FE:5C:8B:C2:F6:F9:D4:1A
X509v3 Authority Key Identifier:
keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/AF286D2C7B7011F18DD180F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.216.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:41:d4:59:56:7b:76:a9:63:3e:39:88:8f:59:04:93:3a:70:
b0:98:b8:5c:73:63:75:f3:ce:16:a5:f1:83:3a:7f:ae:3c:02:
2c:e9:ef:63:9a:ab:5d:0d:bc:78:08:0b:8a:32:98:8d:70:b6:
fa:e3:bd:64:65:45:3f:65:a9:df:32:ed:df:48:85:4a:a9:9e:
90:cf:80:28:f6:d7:a2:5b:f2:bc:6f:d1:9d:b2:29:14:60:f1:
14:17:d7:49:40:b4:f4:2b:b9:95:5b:ae:e8:83:40:f6:55:80:
ac:27:51:86:67:c3:17:b7:43:32:b4:b2:e2:b7:2e:3c:17:64:
f4:7d:5f:65:61:4b:28:47:43:ca:8d:17:41:43:93:2e:96:39:
84:88:3d:88:eb:94:b9:f2:67:b6:6a:c7:9d:c6:b5:46:59:b0:
3d:69:57:91:ff:4f:3b:2b:c7:4f:90:73:89:c2:da:e4:ce:00:
53:5f:10:6a:24:4f:1e:b7:d8:ac:c1:1a:41:5b:75:05:3a:a3:
3e:44:e3:11:7f:2e:b5:c8:6b:ac:73:1e:56:31:c2:36:17:2b:
0b:b5:d9:a7:1d:6a:a1:73:34:3c:76:ca:c9:95:9a:82:bb:76:
03:40:25:ee:74:2a:95:f1:60:8d:21:4c:b2:5a:92:e9:9f:57:
f6:09:6a:4c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBBQ0ZBUjExMC8GA1UEBRMoNTg4NzcwMEM1RjI0OTBGNTU4NDM4MkY5RTdFNzUy
NkFENjU1NDhCMzAeFw0yNjA3MDkwODMyMDlaFw0zNjEyMzEwODMyMDlaMBgxFjAU
BgNVBAMTDTZhNGY1YzhkLWUyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIqIVQ73EuBZH/dzqFnpaIcyuzJCAklGgBwRmYOLOkPV0CCVvp3CWk3Mhh
0QjNGCgZwu1Sl7TrElH6AK37Gp0BqxbkeWF6zurGmxGGzwqp0r5K6nouczHKmEQM
kYsdG+0UdKORZloOeG1HFQ76IXOhX9zO1KID3jT+WUg/IhV749LVKIsACtWloZBx
v4WSNdf7sGTvmQgSoDisFDnGaUyVLpoP3iLBVx9OQonGMqtv/VjQn7yEyhYLqAFV
VkF7xuIB3X4N8qVdwBW1HKUeH3wZD1m6i8gTGeuMgRJa4Y0Eswp6DwfOc7/kkDkR
dB+cOIWzVyBevNA7oGVya2FK8KrDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU94kh
pzbEpdrpCfHi/lyLwvb51BowHwYDVR0jBBgwFoAUWIdwDF8kkPVYQ4L55+dSatZV
SLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQUNGLzA4QTVGRjgyQzIxNjExRUI4QUE5MzU2RUY4QUVBMjI4L1dJZHdE
Rjhra1BWWVE0TDU1LWRTYXRaVlNMTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1dJZHdERjhra1BWWVE0TDU1LWRTYXRaVlNMTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjIwQUNGLzA4QTVGRjgyQzIxNjExRUI4QUE5MzU2RUY4QUVB
MjI4L0FGMjg2RDJDN0I3MDExRjE4REQxODBGOENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMt3dgwDQYJKoZIhvcNAQELBQAD
ggEBAMBB1FlWe3apYz45iI9ZBJM6cLCYuFxzY3Xzzhal8YM6f648Aizp72Oaq10N
vHgIC4oymI1wtvrjvWRlRT9lqd8y7d9IhUqpnpDPgCj216Jb8rxv0Z2yKRRg8RQX
10lAtPQruZVbruiDQPZVgKwnUYZnwxe3QzK0suK3LjwXZPR9X2VhSyhHQ8qNF0FD
ky6WOYSIPYjrlLnyZ7Zqx53GtUZZsD1pV5H/Tzsrx0+Qc4nC2uTOAFNfEGokTx63
2KzBGkFbdQU6oz5E4xF/LrXIa6xzHlYxwjYXKwu12acdaqFzNDx2ysmVmoK7dgNA
Je50KpXxYI0hTLJakumfV/YJakw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:48 2026 by rpki-client