Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8E396366853711F1AC5031B9CE1D38B0.roa
File: 8E396366853711F1AC5031B9CE1D38B0.roa (raw, json)
Hash identifier: mjsQPiONewudN6wo2Vtub5YrbgEO4thxMpZ7FK17+78=
Subject key identifier: 15:92:F1:3F:AB:B8:A2:21:A3:98:C3:56:CC:3A:76:24:B8:1A:AD:C4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 1129
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8E396366853711F1AC5031B9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 19:08:28 +0000
ROA not before: Tue 21 Jul 2026 19:08:24 +0000
ROA not after: Sun 21 Jul 2030 19:08:24 +0000
asID: 133499
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4393 (0x1129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 21 19:08:24 2026 GMT
Not After : Jul 21 19:08:24 2030 GMT
Subject: CN=6a5fc3ac-4092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:cb:6c:c8:b7:cb:fe:9e:c8:ac:d5:ee:fe:
30:40:32:b2:ab:3b:b4:bf:6f:eb:b6:be:05:09:38:
cd:d0:ce:58:ed:11:3c:c8:f2:7c:dc:70:22:b0:8c:
50:99:9a:9c:4b:d6:56:5b:dd:3f:ce:b1:26:5b:03:
bc:b0:ef:1f:17:2a:c6:96:45:96:61:ac:6c:eb:44:
0e:49:b3:26:55:49:e5:72:4c:2f:b3:3a:b5:c9:f0:
0d:45:64:8c:05:d5:3c:b6:2a:97:e8:52:21:2b:ee:
f6:f0:eb:e1:81:69:97:43:32:be:60:1a:57:3f:0c:
6e:02:ca:26:d0:25:4a:51:99:cd:41:0d:e2:8e:10:
99:da:50:80:ab:45:e2:5f:48:fb:c3:2c:70:96:20:
17:c0:0a:86:03:f6:2a:5a:fc:85:6b:f6:c5:08:d1:
67:53:7d:a2:06:c8:61:b9:33:2b:5a:9a:d3:88:26:
fa:cf:79:31:4e:ff:c3:6a:bb:cd:93:89:16:eb:59:
28:70:4e:22:d1:5a:d2:37:5e:3f:55:ee:02:31:1d:
ee:8d:b4:12:00:4b:30:28:ab:70:51:f1:62:b1:6d:
01:1b:03:0c:57:49:f4:45:f4:6c:52:79:22:a6:ca:
37:50:27:e6:69:ef:75:87:8c:21:5a:5b:9a:6c:f9:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:F1:3F:AB:B8:A2:21:A3:98:C3:56:CC:3A:76:24:B8:1A:AD:C4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8E396366853711F1AC5031B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:82:da:bf:c0:87:24:6a:86:6f:23:7a:fa:8f:0d:0b:b9:a2:
e5:45:9e:a9:b0:fa:07:fe:08:2f:fc:89:73:5f:ab:dc:9b:ef:
e4:52:8e:42:32:67:2c:16:63:80:19:a7:c1:0f:e0:d0:c3:6b:
72:69:12:78:46:30:87:74:3e:ee:a4:23:c6:ce:a7:30:f5:b2:
46:d0:f6:e6:a2:eb:8d:2a:2e:7c:56:6c:9b:b6:6f:39:47:ef:
72:90:59:8e:40:16:0d:8c:b1:a8:1b:8b:21:06:cf:67:c8:ef:
32:13:54:86:00:78:9b:64:e1:b1:5f:5c:2f:04:03:94:d0:51:
a1:b0:cd:06:57:38:b7:92:e2:ae:c9:8c:c2:f4:09:76:e1:c2:
aa:ca:0d:34:33:04:09:a0:94:09:b3:b8:1b:35:4c:30:85:2b:
5b:0f:fb:fd:ad:39:60:b6:ef:b2:ce:16:38:50:6e:e7:48:45:
ec:20:39:25:64:a0:e9:d9:44:64:7e:76:8d:65:c3:81:77:dd:
28:42:d3:cc:e9:e2:4e:98:d7:71:58:ab:e3:94:a9:c2:84:75:
65:3c:93:82:18:52:f3:e6:6f:63:eb:4b:85:ba:f4:c1:e8:45:
94:4b:90:31:26:8e:2c:00:78:ce:d0:8b:5f:a2:29:6a:e6:1e:
b7:83:cc:30
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICESkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNjA3MjExOTA4MjRaFw0zMDA3MjExOTA4MjRaMBgxFjAU
BgNVBAMTDTZhNWZjM2FjLTQwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN/8tsyLfL/p7IrNXu/jBAMrKrO7S/b+u2vgUJOM3QzljtETzI8nzccCKw
jFCZmpxL1lZb3T/OsSZbA7yw7x8XKsaWRZZhrGzrRA5JsyZVSeVyTC+zOrXJ8A1F
ZIwF1Ty2KpfoUiEr7vbw6+GBaZdDMr5gGlc/DG4CyibQJUpRmc1BDeKOEJnaUICr
ReJfSPvDLHCWIBfACoYD9ipa/IVr9sUI0WdTfaIGyGG5MytamtOIJvrPeTFO/8Nq
u82TiRbrWShwTiLRWtI3Xj9V7gIxHe6NtBIASzAoq3BR8WKxbQEbAwxXSfRF9GxS
eSKmyjdQJ+Zp73WHjCFaW5ps+RGRAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUFZLx
P6u4oiGjmMNWzDp2JLgarcQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzhFMzk2MzY2ODUzNzExRjFBQzUwMzFCOUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwChezANBgkqhkiG9w0BAQsFAAOC
AQEApYLav8CHJGqGbyN6+o8NC7mi5UWeqbD6B/4IL/yJc1+r3Jvv5FKOQjJnLBZj
gBmnwQ/g0MNrcmkSeEYwh3Q+7qQjxs6nMPWyRtD25qLrjSoufFZsm7ZvOUfvcpBZ
jkAWDYyxqBuLIQbPZ8jvMhNUhgB4m2ThsV9cLwQDlNBRobDNBlc4t5LirsmMwvQJ
duHCqsoNNDMECaCUCbO4GzVMMIUrWw/7/a05YLbvss4WOFBu50hF7CA5JWSg6dlE
ZH52jWXDgXfdKELTzOniTpjXcVir45SpwoR1ZTyTghhS8+ZvY+tLhbr0wehFlEuQ
MSaOLAB4ztCLX6IpauYet4PMMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:29 2026 by rpki-client