Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/80B35B167DBC11F186B53FF6CE1D38B0.roa
File: 80B35B167DBC11F186B53FF6CE1D38B0.roa (raw, json)
Hash identifier: mp9WTiiEl564d5f5b3Mt3Uat+rXqCkk3Pof9oq0Krno=
Subject key identifier: 91:5B:D8:FC:57:5B:ED:59:59:CA:59:F3:49:22:91:BF:50:E0:4C:11
Certificate issuer: /CN=F36C89CDAR/serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
Certificate serial: 05
Authority key identifier: 09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04
Authority info access: rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/80B35B167DBC11F186B53FF6CE1D38B0.roa
Signing time: Sun 12 Jul 2026 06:40:00 +0000
ROA not before: Sun 12 Jul 2026 06:39:55 +0000
ROA not after: Wed 31 Dec 2036 06:39:55 +0000
asID: 328067
IP address blocks: 164.160.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C89CDAR, serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
Validity
Not Before: Jul 12 06:39:55 2026 GMT
Not After : Dec 31 06:39:55 2036 GMT
Subject: CN=6a5336bf-82a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:99:8e:11:a8:2c:39:d9:3e:f3:dd:4b:cf:
c9:2b:bf:73:f6:36:c5:59:ec:1f:7d:8f:eb:59:63:
c4:a4:1a:51:c3:bd:79:c8:01:19:f6:26:35:70:92:
fd:18:aa:cd:cb:ed:2f:32:4d:3f:8f:b7:e4:88:c6:
0a:74:8a:93:2a:f8:f8:25:3b:68:df:56:13:3c:45:
80:9f:aa:23:7e:96:f7:ac:a8:6f:81:21:f3:a1:28:
a5:a4:0f:17:1e:5c:27:d1:9b:8c:b3:2c:a6:6d:04:
48:a3:ab:0a:6c:8b:06:ac:a5:de:80:5c:bc:e5:c9:
b4:67:43:8a:c9:2d:73:5e:e2:4b:17:37:d7:fa:30:
b9:05:1c:c3:0f:6e:3a:43:b8:58:f3:a1:fd:b6:ca:
19:9d:ac:72:72:bc:67:77:f7:7f:89:74:fc:97:97:
80:4a:39:a7:c8:e7:82:77:6e:83:15:f7:32:cc:90:
5e:19:2b:3b:19:70:9b:05:da:a0:32:65:13:15:f0:
79:fa:45:03:c3:0c:09:b8:a6:20:92:51:c0:5e:06:
c9:38:b1:4c:92:d4:c4:dd:6b:9f:d3:4a:8e:d6:97:
fb:70:00:3b:9b:a4:cc:57:f0:9f:d7:f8:99:e6:7f:
41:c6:de:ba:2d:3e:48:f7:85:a4:7a:8f:43:cd:98:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:D8:FC:57:5B:ED:59:59:CA:59:F3:49:22:91:BF:50:E0:4C:11
X509v3 Authority Key Identifier:
keyid:09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/80B35B167DBC11F186B53FF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.160.104.0/22
Signature Algorithm: sha256WithRSAEncryption
72:5c:35:01:e9:2a:a2:9c:5a:14:75:cc:07:e2:51:bd:46:3d:
b1:d7:ea:5f:68:ca:02:04:b8:36:13:63:cc:8d:39:05:14:af:
41:ec:c2:f5:98:a7:02:5b:d7:cf:50:e3:8c:91:c0:30:83:92:
de:f9:54:16:ba:aa:00:ee:46:97:8c:dc:b8:38:43:02:ba:34:
98:ce:60:e4:72:ec:49:d6:bc:77:30:25:32:bf:63:4f:52:3c:
36:66:cd:fd:47:49:af:71:54:12:a3:c3:52:15:88:14:9d:c2:
9c:d5:29:e4:19:e9:d8:f4:da:e0:b0:80:c9:f9:68:fd:82:6d:
da:f7:4c:d5:3e:18:48:5a:79:8a:3d:5f:b8:75:2f:6d:d1:0f:
d6:d5:25:a6:9d:85:e7:e7:f2:0a:7a:18:78:04:0b:46:05:88:
62:48:14:53:c1:ec:5c:5e:60:f4:ab:1d:89:9b:43:c6:2e:f7:
0f:6d:2a:ac:76:33:16:ba:47:f6:3f:68:55:58:28:b2:52:0e:
28:49:02:fb:18:8c:db:98:66:72:52:23:d3:a5:71:a5:f9:fa:
5a:1e:00:81:8c:fb:1d:47:90:45:52:77:79:86:a8:70:de:15:
b7:5e:bf:20:1d:6b:6b:31:22:8b:70:ac:5c:67:59:4f:6e:4a:
dc:72:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:34 2026 by rpki-client