Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B2D4AA085D411F1A22DE2F7CE1D38B0.roa
File: 3B2D4AA085D411F1A22DE2F7CE1D38B0.roa (raw, json)
Hash identifier: hrz09sviZ+/h3thmUrsov6kzYmaTHaCNZJQpB+y2WHg=
Subject key identifier: 65:23:90:4A:CA:04:FB:14:D4:2A:CC:56:FD:29:AE:79:35:3D:05:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C761
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B2D4AA085D411F1A22DE2F7CE1D38B0.roa
Signing time: Wed 22 Jul 2026 13:50:00 +0000
ROA not before: Wed 22 Jul 2026 13:49:56 +0000
ROA not after: Sun 23 Aug 2026 13:49:56 +0000
asID: 13335
IP address blocks: 156.247.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116577 (0x1c761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:49:56 2026 GMT
Not After : Aug 23 13:49:56 2026 GMT
Subject: CN=6a60ca88-b619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:ca:6b:23:56:04:4a:0b:d9:fc:b4:63:20:
9b:d1:85:53:e7:27:ad:97:50:d2:e4:6b:e5:4d:f1:
62:28:13:56:e8:e0:1d:0d:6a:79:0b:42:28:22:e5:
1a:58:e8:b3:d4:35:6d:74:e8:c0:c6:ef:1f:ff:fb:
1e:e8:c0:88:a6:a9:07:7e:f1:3d:dc:dc:d3:e3:72:
88:d7:42:77:3f:75:cc:21:85:70:ca:d0:ce:8d:99:
2b:87:ed:2c:e7:48:78:7c:8e:24:02:a8:3e:a8:d1:
a8:78:21:f7:09:53:6a:08:cd:9b:9e:99:08:9a:31:
67:07:e4:c7:30:f5:3d:44:ee:f9:26:3a:c7:6e:bc:
fe:a9:80:5c:0f:53:85:23:0d:84:68:20:5a:fa:5e:
75:79:f3:00:b9:8d:26:b3:04:e9:a0:67:d6:a4:49:
f1:28:0a:c7:f9:7d:f8:d8:23:52:1b:7b:7a:70:07:
27:a3:97:5d:30:7c:06:90:34:bf:90:46:1c:09:af:
02:86:b4:33:99:e4:ba:13:60:d3:b6:f2:05:6e:33:
1a:5d:0c:8a:31:21:f5:5a:26:62:4a:46:c7:00:c6:
70:38:08:6f:82:c2:b3:af:60:a8:97:3c:d6:cb:8f:
b2:45:73:07:73:37:9c:b6:61:2c:3c:eb:9e:d5:05:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:23:90:4A:CA:04:FB:14:D4:2A:CC:56:FD:29:AE:79:35:3D:05:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B2D4AA085D411F1A22DE2F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.36.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d2:38:cb:5d:68:90:16:13:80:de:07:fd:2c:63:5a:5b:c0:
23:b3:23:43:c0:00:ed:22:c5:b0:59:a8:47:54:a8:8b:d5:9c:
b9:88:ff:df:71:05:b1:e5:4a:f6:ca:a2:21:e1:d7:be:34:45:
f5:35:4c:1f:22:f4:10:14:ff:ad:68:01:35:8d:cb:40:92:1f:
6a:68:3e:90:ae:ad:78:84:db:77:5f:dc:c7:11:6c:d8:2d:77:
25:c0:39:61:f1:a3:23:0e:82:b0:3b:0d:53:2c:40:e2:9d:ff:
ec:aa:3d:3c:1a:58:ef:08:ca:4e:3f:cb:fe:c1:b1:a4:90:4d:
69:1c:db:33:29:eb:ac:68:b6:ca:a0:7e:21:28:d3:54:90:a1:
4e:bb:48:a8:8f:15:aa:19:26:0d:93:02:c6:d9:c6:77:ac:59:
eb:a6:32:63:2d:ac:f4:a1:f8:a2:02:dd:d4:88:a8:85:a6:9b:
a9:ae:f8:2d:97:d9:5a:60:c5:e5:50:3c:de:1f:70:ad:a2:3e:
d2:7b:95:ac:0f:3b:c9:0b:dc:b9:46:b8:b6:bc:4c:2c:60:7e:
e2:b4:6f:b9:0a:2c:5f:55:b7:e3:a1:2d:43:1c:dc:f5:af:46:
c2:52:4d:ae:66:ef:3c:22:31:a6:aa:b2:82:71:89:5a:d7:24:
e9:12:33:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcdhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTM0OTU2WhcNMjYwODIzMTM0OTU2WjAYMRYw
FAYDVQQDEw02YTYwY2E4OC1iNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4PjKayNWBEoL2fy0YyCb0YVT5yetl1DS5GvlTfFiKBNW6OAdDWp5C0Io
IuUaWOiz1DVtdOjAxu8f//se6MCIpqkHfvE93NzT43KI10J3P3XMIYVwytDOjZkr
h+0s50h4fI4kAqg+qNGoeCH3CVNqCM2bnpkImjFnB+THMPU9RO75JjrHbrz+qYBc
D1OFIw2EaCBa+l51efMAuY0mswTpoGfWpEnxKArH+X342CNSG3t6cAcno5ddMHwG
kDS/kEYcCa8ChrQzmeS6E2DTtvIFbjMaXQyKMSH1WiZiSkbHAMZwOAhvgsKzr2Co
lzzWy4+yRXMHczectmEsPOue1QUISQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGUj
kErKBPsU1CrMVv0prnk1PQWMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjJENEFBMDg1RDQxMUYxQTIyREUyRjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPckMA0GCSqGSIb3DQEBCwUA
A4IBAQB30jjLXWiQFhOA3gf9LGNaW8AjsyNDwADtIsWwWahHVKiL1Zy5iP/fcQWx
5Ur2yqIh4de+NEX1NUwfIvQQFP+taAE1jctAkh9qaD6Qrq14hNt3X9zHEWzYLXcl
wDlh8aMjDoKwOw1TLEDinf/sqj08GljvCMpOP8v+wbGkkE1pHNszKeusaLbKoH4h
KNNUkKFOu0iojxWqGSYNkwLG2cZ3rFnrpjJjLaz0ofiiAt3UiKiFppuprvgtl9la
YMXlUDzeH3Ctoj7Se5WsDzvJC9y5Rri2vEwsYH7itG+5CixfVbfjoS1DHNz1r0bC
Uk2uZu88IjGmqrKCcYla1yTpEjPf
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:53 2026 by rpki-client