Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/667B3C368A3311F1BDBA13A6CE1D38B0.roa
File: 667B3C368A3311F1BDBA13A6CE1D38B0.roa (raw, json)
Hash identifier: myJvSItIkO9IivipUhoXB/6c8s2Kg2sKR7kiJ9xOWQQ=
Subject key identifier: 7B:C4:A1:70:28:07:F3:1D:6E:6F:A5:05:4D:6A:A2:C4:F6:21:41:C8
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 089C
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/667B3C368A3311F1BDBA13A6CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:21:20 +0000
ROA not before: Tue 28 Jul 2026 03:21:15 +0000
ROA not after: Sun 31 Jul 2033 03:21:15 +0000
asID: 20011
IP address blocks: 168.210.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 03:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 03:21:15 2026 GMT
Not After : Jul 31 03:21:15 2033 GMT
Subject: CN=6a68202f-c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:3e:17:2e:4f:18:a6:07:db:fd:0e:0d:df:
1e:e3:be:90:39:9e:15:69:af:b0:78:87:5c:69:4e:
5e:e3:04:bd:57:89:22:7e:15:e2:e4:1d:56:f2:b0:
8a:39:a1:20:8d:64:10:16:34:ec:14:55:a5:09:97:
5e:7e:6e:af:41:97:49:de:1e:96:4c:3e:af:95:48:
7e:f8:41:38:36:53:95:49:65:ff:54:37:70:38:67:
ae:0c:1e:a7:cb:7f:4a:6a:9f:5d:10:72:ea:33:34:
be:86:32:c9:ba:87:c7:f3:1e:5b:b3:61:ac:14:53:
98:41:71:3b:31:bc:21:18:13:02:8d:b6:da:15:76:
14:dd:6a:db:47:6c:f6:46:dc:c3:92:a1:f5:d7:5d:
de:97:8f:8d:c3:39:62:03:ba:09:e8:51:cb:2a:4b:
23:7f:e1:34:6c:21:f9:64:53:fe:56:92:3d:bb:10:
30:ec:e0:2b:60:33:79:48:dd:14:8a:71:14:21:3a:
07:64:60:45:d9:dc:6f:8f:c3:e7:87:cc:59:38:06:
f9:70:9f:f4:db:4d:8f:7b:89:0c:cf:57:9c:0a:c4:
29:d6:ed:9b:66:d7:f1:9c:e9:53:68:2a:fa:b9:01:
27:3f:93:81:4f:9d:d3:3c:eb:bc:06:d9:fa:60:ad:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:A1:70:28:07:F3:1D:6E:6F:A5:05:4D:6A:A2:C4:F6:21:41:C8
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/667B3C368A3311F1BDBA13A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:8c:37:16:7e:ca:ba:09:17:23:95:de:0a:cb:ef:04:d6:ba:
ed:e7:94:b0:72:a2:0d:7b:43:e8:f8:90:bd:3c:6c:ab:e5:91:
51:c7:00:df:d8:c1:09:df:91:1a:48:63:39:0c:92:46:29:8b:
8b:ab:3a:3e:10:d2:97:a0:8a:91:64:fe:f7:23:e4:80:b0:ae:
a8:ad:b0:fa:41:f1:e1:09:96:1a:73:a3:52:87:a3:dc:21:1b:
9c:04:35:6d:4e:df:d8:05:ea:e2:24:8d:7e:61:e6:e4:fe:e7:
9b:10:b0:5c:f5:74:12:63:9b:6d:94:a1:6b:cd:82:bb:f4:44:
15:ae:e8:02:4f:6f:75:1b:97:9d:2c:21:23:f9:9f:53:36:a2:
4a:9e:98:bf:ad:09:a6:75:26:05:5e:57:ed:3d:e4:cc:48:9f:
dc:83:11:55:6d:c0:70:8a:ba:eb:c7:ae:41:57:53:02:7c:3f:
67:d6:3e:12:a6:71:47:00:bd:11:12:97:fd:7f:ad:82:fb:55:
86:5a:8a:54:50:b3:e7:76:3f:ed:b6:96:bf:31:1a:c7:c5:6f:
f7:89:8a:49:6d:1d:df:6a:b8:fe:57:9c:d5:31:9d:12:a3:a0:
49:4e:ee:8b:51:9d:e5:8c:cf:49:cf:26:f0:e8:3a:41:33:7a:
5c:ae:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:49:08 2026 by rpki-client