Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/69D4BF20542211F18B8991FBCE1D38B0.roa
File: 69D4BF20542211F18B8991FBCE1D38B0.roa (raw, json)
Hash identifier: RThaspT2b05D/K5de679dVtjTYTOLWrWtuD8gKJuCMo=
Subject key identifier: 9B:7F:28:4F:0F:83:8E:0A:F5:30:2F:92:D6:EF:81:99:CA:57:C6:0C
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0740
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/69D4BF20542211F18B8991FBCE1D38B0.roa
Signing time: Wed 20 May 2026 08:03:41 +0000
ROA not before: Wed 20 May 2026 08:03:36 +0000
ROA not after: Thu 20 May 2027 08:03:36 +0000
asID: 206127
IP address blocks: 45.221.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: May 20 08:03:36 2026 GMT
Not After : May 20 08:03:36 2027 GMT
Subject: CN=6a0d6add-8287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:5b:24:c3:b8:2c:84:ed:ce:4e:1f:e1:17:
dc:0c:4a:2a:5b:cf:bd:1b:93:23:e8:17:57:25:57:
fc:ab:10:b4:74:26:c9:a4:27:68:d9:d9:f5:61:14:
d2:74:fa:c6:63:c1:2d:24:5f:27:0b:4a:99:26:f4:
6f:6a:84:05:e9:5d:68:30:de:ba:d4:10:fc:7f:bd:
c4:ce:b7:a6:65:5a:1b:03:33:1a:69:81:20:9e:8b:
c8:fe:ba:22:38:61:48:55:3f:7a:89:07:d9:a7:f9:
9f:d9:db:fb:92:04:a9:81:46:2d:50:93:c9:50:1d:
63:08:88:60:bd:25:f6:fc:79:fc:26:93:10:9e:28:
51:81:59:f9:74:f5:fd:02:2d:be:f2:47:e7:c9:3a:
9c:78:51:ab:81:cd:74:e9:d0:61:5b:11:8c:b4:c1:
91:02:01:06:eb:65:76:40:73:a3:25:ac:6c:f1:83:
cc:19:59:fa:ba:ed:3c:2c:c5:0d:02:cf:d0:25:25:
1f:d8:22:38:fa:9d:00:06:c1:2d:4c:77:ba:41:dd:
62:c7:e2:d9:63:54:28:bf:ae:75:ee:cc:b6:0e:9b:
97:b3:8f:5a:75:53:71:1d:fc:b8:98:70:66:de:94:
65:95:e6:92:d8:73:a2:aa:b1:1c:49:1a:8e:6d:47:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:28:4F:0F:83:8E:0A:F5:30:2F:92:D6:EF:81:99:CA:57:C6:0C
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/69D4BF20542211F18B8991FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:18:c1:61:99:c6:64:de:0a:cb:79:53:97:f3:60:a7:4d:62:
18:ec:b2:62:7b:c9:be:96:b8:80:97:c2:f0:36:7b:e4:00:24:
7f:28:a5:bf:19:77:c9:5c:5d:5b:90:f1:05:8c:c0:72:10:f5:
a8:1b:37:0f:8f:c8:a3:37:0e:d9:98:27:7b:c6:3a:06:76:ba:
60:89:89:48:ce:a9:61:bb:49:ef:e2:d4:ca:3f:7b:24:db:10:
e4:e9:17:c3:96:f0:33:4e:b7:ea:95:11:80:46:92:14:18:d6:
7b:c9:aa:a4:3a:63:6d:85:2a:6f:66:40:42:dd:59:fc:86:81:
6f:01:e0:30:4f:16:f0:ef:8c:a9:2a:77:91:d6:2a:47:3a:a0:
aa:a6:e4:26:9c:65:2e:c3:a8:d7:aa:2e:e7:f8:65:47:36:7b:
9e:f7:65:58:97:c0:6d:e7:c2:23:8e:fe:9b:12:1b:5a:4a:aa:
99:8f:c4:69:ca:55:c3:42:b3:88:8e:7c:d2:f9:92:cf:81:be:
bc:1c:ed:3f:78:ad:92:fc:bc:51:a9:0b:cd:84:ec:3f:84:0f:
2c:9f:4a:03:f3:44:3a:c7:74:5b:41:d5:2d:60:0e:d8:14:d4:
fd:63:a7:9d:1f:a4:7f:9c:ed:88:9c:13:e6:1f:8b:95:46:84:
4e:5c:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:47 2026 by rpki-client