Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F124952C8A3211F1A58979A1CE1D38B0.roa
File: F124952C8A3211F1A58979A1CE1D38B0.roa (raw, json)
Hash identifier: hJETnTjkbhY7dvnOKtTIOC7VjSbEJ5vwZEKz42QAcYk=
Subject key identifier: 65:62:6E:8B:9F:97:05:96:17:DF:50:D7:F1:6C:B7:EB:01:A4:D8:FC
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 089A
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F124952C8A3211F1A58979A1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:18:03 +0000
ROA not before: Tue 28 Jul 2026 03:17:58 +0000
ROA not after: Sun 31 Jul 2033 03:17:58 +0000
asID: 3741
IP address blocks: 168.209.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 03:17:58 2026 GMT
Not After : Jul 31 03:17:58 2033 GMT
Subject: CN=6a681f6b-b9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:a8:43:27:6a:f4:ec:67:26:37:68:a7:fb:
95:50:3c:fb:af:7b:56:44:1e:bb:f2:54:a7:b1:0a:
c3:3a:fc:46:d6:c2:78:a2:75:3a:69:65:7a:4a:82:
d8:b8:86:10:c3:6a:54:73:c5:78:1d:d2:01:15:bd:
65:17:34:ea:a1:ca:b5:4d:d6:13:cc:07:72:6d:76:
2e:28:05:d7:6d:f5:07:6d:56:e0:c7:7e:b5:33:81:
f4:5d:39:e3:08:29:cb:4d:8c:54:5d:c2:4b:df:62:
a3:fb:c6:26:28:32:4a:8d:f9:fe:ee:a6:4c:35:00:
99:10:ff:75:b9:4e:7b:85:da:c7:c5:87:b0:c1:9e:
a0:02:b9:1d:b0:e4:35:7a:6b:08:7c:22:c0:26:36:
26:78:18:6d:b7:44:7a:20:de:b8:31:1e:10:a6:04:
5b:d2:94:50:bd:7d:df:8f:4a:5f:32:a0:bd:5b:64:
60:7a:f0:0d:80:99:13:10:92:84:66:e9:7b:a1:d7:
9a:a1:6c:b7:6c:bd:45:b6:3e:41:26:69:c6:09:91:
ef:cc:39:1b:85:84:c5:64:dd:a7:26:5c:5e:55:f7:
46:12:de:64:89:62:d0:19:99:1d:91:68:78:82:59:
eb:32:78:3e:3c:32:b8:ac:cc:0d:c0:99:9d:3a:29:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:6E:8B:9F:97:05:96:17:DF:50:D7:F1:6C:B7:EB:01:A4:D8:FC
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F124952C8A3211F1A58979A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:68:13:e1:51:69:5e:d2:fe:72:48:76:80:c3:ac:99:10:39:
a8:3e:5d:c8:43:17:60:9f:f2:f6:c3:62:32:86:b7:cb:fa:fd:
47:d3:7c:68:1d:87:bd:f2:ff:30:86:46:d4:af:90:c6:10:74:
6a:50:aa:c1:6b:62:86:6c:64:28:91:ce:01:60:c4:d5:61:c1:
c7:57:39:b4:68:33:89:b3:09:c0:35:c9:d4:4a:e4:2e:34:d1:
f8:e8:41:8d:00:a0:cc:bc:fe:4e:1b:7a:c9:bf:d1:fa:39:9a:
84:63:8c:3d:97:6c:ac:4f:c9:62:31:2b:6c:9d:31:98:f8:f2:
f6:79:5a:3e:27:35:98:6f:ba:ad:12:8e:fb:34:3c:4c:91:67:
c4:7e:aa:21:3c:42:8f:a6:f4:4b:5d:9f:61:fe:fd:b0:95:eb:
25:a2:54:60:d9:13:55:71:ae:f0:fe:47:4c:c8:a9:5b:e0:fd:
27:0d:e9:0f:4f:07:54:06:bb:b0:1b:51:8a:e9:71:a5:e2:bc:
7c:b0:ce:c2:21:f7:a2:a9:84:89:b8:9b:b2:a2:9e:b7:cc:91:
ac:ab:be:9f:97:80:58:92:59:5c:55:1e:93:32:7a:12:a1:c4:
8f:67:bc:12:38:48:a9:85:a6:1b:45:b8:70:92:d9:01:f6:06:
b9:81:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:55 2026 by rpki-client