Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/B5920B428A3311F1BD1B65A6CE1D38B0.roa
File: B5920B428A3311F1BD1B65A6CE1D38B0.roa (raw, json)
Hash identifier: us7Da5REqF3CmHDXTnuZes6SLlHCA0F5bCyQ6RESrCE=
Subject key identifier: C8:28:1E:16:59:1A:56:59:2A:81:F8:29:36:52:C5:8B:B4:04:7E:DF
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 089E
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/B5920B428A3311F1BD1B65A6CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:23:32 +0000
ROA not before: Tue 28 Jul 2026 03:23:28 +0000
ROA not after: Sun 31 Jul 2033 03:23:28 +0000
asID: 20011
IP address blocks: 168.210.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 03:23:28 2026 GMT
Not After : Jul 31 03:23:28 2033 GMT
Subject: CN=6a6820b4-1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:ca:7b:03:0e:d5:76:0d:6a:a9:a7:54:fe:
9f:5c:c7:3d:80:27:45:ac:bd:7d:65:fb:f0:66:27:
9c:c5:47:c4:88:eb:20:8b:74:5b:a6:2c:19:ef:47:
f7:4e:5f:00:45:9d:45:9f:cc:03:1d:3d:27:84:73:
98:e5:92:62:04:d3:d1:a5:00:b6:16:98:49:ed:3d:
2b:80:c2:88:89:13:52:a9:93:d9:67:4a:e4:bb:76:
20:fb:ac:75:71:90:61:5f:67:e9:06:82:4d:cc:8a:
50:c3:85:49:0c:d4:54:24:67:89:af:7f:37:55:df:
a7:a6:ba:7a:ee:23:7e:be:2b:ba:be:f8:6c:6f:e2:
65:19:5e:62:5d:bf:8d:b2:5c:da:af:6c:b9:38:fa:
a3:57:16:04:d6:7b:db:d2:e2:8e:1a:61:24:6b:02:
12:85:b0:00:ef:02:09:30:c2:93:19:1a:2b:d7:23:
5e:27:e8:8f:34:2a:fb:d3:99:75:60:12:77:64:8a:
e0:c1:1c:d2:6c:dc:25:03:bc:a4:00:8f:57:ef:1a:
33:a0:27:0e:a2:4e:d8:9d:36:5c:90:7f:7c:65:43:
29:ed:4d:42:17:51:3e:6e:b3:f3:72:ae:8c:c4:92:
87:77:0b:36:41:11:f8:37:da:a2:3a:cf:40:0c:0a:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:1E:16:59:1A:56:59:2A:81:F8:29:36:52:C5:8B:B4:04:7E:DF
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/B5920B428A3311F1BD1B65A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:ff:c8:95:32:a7:31:b2:89:c5:e2:f4:fa:dd:ac:24:08:1e:
d8:e7:32:88:6c:47:c8:15:13:94:8e:3a:a2:dc:9f:5a:8a:53:
44:23:24:ba:eb:78:fd:9f:be:e4:a2:ad:64:8e:58:65:b6:c9:
af:2a:64:28:a1:88:62:6f:0a:bf:6f:50:2f:7f:0c:a0:e6:b3:
48:dc:4f:96:ef:5c:26:5c:fa:b4:db:31:87:b3:5d:a3:5c:ed:
bf:ec:3d:84:05:3e:e6:8a:bf:5d:7d:59:2d:09:8c:05:ec:59:
25:41:09:81:30:2a:05:bd:12:31:10:82:47:46:4f:d0:b1:e9:
36:96:e3:2a:a1:f2:33:02:21:5b:17:54:26:31:62:ba:0d:27:
9d:0b:dd:18:17:9d:8d:8d:5d:18:db:23:a7:b1:f2:2a:4b:0b:
4a:c7:c9:b7:98:d2:95:c4:19:a1:01:a3:6d:2c:0a:8f:9c:67:
e9:34:f8:45:26:d9:eb:74:4d:85:97:d6:30:72:2a:09:ae:ef:
9f:62:5c:38:13:84:90:7a:89:85:a3:ee:2f:e6:13:3e:33:fb:
0a:48:35:ca:b3:b8:74:fe:e5:45:fe:eb:49:d5:6e:ca:15:e8:
32:ae:e1:fa:68:ae:69:30:12:7c:8b:08:97:4b:b6:f0:ec:df:
09:14:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:17 2026 by rpki-client