Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C219CF3E121611F1A34C56C2DAE4EC9C.roa
File: C219CF3E121611F1A34C56C2DAE4EC9C.roa (raw, json)
Hash identifier: 96Cw0Oj9dfAyMFuYRI6FeBmjSApGGsGuiStRgVYrl5w=
Subject key identifier: 79:D1:E2:EF:98:7F:18:DF:49:87:2E:51:05:9F:CD:41:19:26:76:0E
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 06D4
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C219CF3E121611F1A34C56C2DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 06:53:58 +0000
ROA not before: Wed 25 Feb 2026 06:53:54 +0000
ROA not after: Thu 25 Feb 2027 06:53:54 +0000
asID: 401838
IP address blocks: 45.221.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 01:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Feb 25 06:53:54 2026 GMT
Not After : Feb 25 06:53:54 2027 GMT
Subject: CN=699e9c86-39a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:ef:4f:ba:95:ab:ad:b5:c7:50:a8:d8:25:
4e:f1:a2:9e:f6:fe:e2:59:61:8f:95:01:92:46:98:
ce:fa:57:be:92:97:95:39:b5:92:d7:7d:f0:c8:bd:
a3:ad:56:27:0e:c1:f8:3d:ca:be:d3:84:b3:dc:12:
68:ed:da:73:83:f1:18:2e:aa:5e:2a:4b:68:f1:99:
5d:0c:b1:73:a2:2f:dc:5f:d3:40:3e:97:d3:66:d4:
41:38:73:af:68:f5:a2:ac:8f:77:0c:43:ad:9f:e4:
a8:31:dd:94:19:3b:98:b1:f9:65:af:29:4e:73:19:
dd:31:78:99:5a:73:49:e4:c2:ad:dd:bf:5a:44:18:
73:b2:9a:d7:8e:51:b6:b7:46:29:db:0f:f5:3b:2a:
a5:1e:9a:e9:23:5d:70:ef:3f:b6:c0:c6:bb:f7:17:
c8:1b:c1:d0:34:04:c6:9f:f5:7f:54:85:42:00:ff:
d3:7b:b9:fe:4e:34:73:0d:b5:81:4a:9f:1a:85:3a:
62:17:bd:7e:5e:b7:2a:84:72:f1:ea:7a:ae:7a:f5:
35:d2:d8:4c:52:8f:45:cd:e2:f7:21:b6:5f:96:38:
85:82:ae:5f:ff:21:7d:e8:12:a4:56:07:69:74:3f:
91:11:74:6b:37:c5:c1:da:40:4d:19:96:98:27:bc:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:E2:EF:98:7F:18:DF:49:87:2E:51:05:9F:CD:41:19:26:76:0E
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C219CF3E121611F1A34C56C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.69.0/24
Signature Algorithm: sha256WithRSAEncryption
92:92:ec:cc:f1:53:f5:a9:8c:5d:52:dc:31:12:6e:36:16:46:
2e:9c:64:5d:4b:09:6e:60:78:5d:4d:a3:f3:9d:0e:4e:69:d9:
08:1f:56:77:3c:ac:f2:4b:fa:14:fe:82:ff:d9:51:45:0e:7c:
bb:ce:84:7f:e8:c4:e3:9e:5e:bc:fe:fb:fc:8c:af:87:f9:c9:
76:8f:d7:61:b0:ff:b1:15:73:18:8a:05:49:77:04:a1:95:d8:
83:b9:a5:5f:aa:2d:b7:f7:a6:d2:66:87:b4:7e:95:5b:20:9a:
77:bd:30:13:b8:e8:17:76:66:8c:9e:89:96:31:45:aa:1e:5e:
e5:0c:e5:66:4f:65:4c:2d:2b:2c:b4:67:1a:db:11:fc:c2:2d:
3a:81:d3:96:3d:4c:f7:ce:13:d9:cd:af:cf:56:92:c5:3d:4b:
44:3e:64:bf:b9:d8:c7:32:75:9c:12:19:2d:4d:a4:4c:59:4f:
00:c6:b4:6a:27:25:05:bc:f2:7f:4b:4e:3d:98:23:ff:12:2e:
4e:8c:48:c4:5b:2c:67:2f:f5:8c:e1:fe:3c:c7:77:ae:32:77:
a6:19:f6:9a:49:76:ad:57:68:cd:18:4f:ad:3e:a2:de:be:a7:
fb:da:cf:66:9a:b1:2c:29:34:d7:38:f2:91:96:07:c3:cd:c4:
2a:d0:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:19 2026 by rpki-client