Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F686AFB6875B11F199EE42D5CE1D38B0.roa
File: F686AFB6875B11F199EE42D5CE1D38B0.roa (raw, json)
Hash identifier: GZMNV2OYqv3JwxOdqfI7vQcvOtsSdk2TBvIMh2GaSLM=
Subject key identifier: 1B:ED:CD:81:99:92:B2:65:3D:0F:2D:02:B3:92:AF:5C:5A:F3:81:66
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 0885
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F686AFB6875B11F199EE42D5CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:34:08 +0000
ROA not before: Fri 24 Jul 2026 12:34:03 +0000
ROA not after: Wed 31 Dec 2036 12:34:03 +0000
asID: 20011
IP address blocks: 152.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 24 12:34:03 2026 GMT
Not After : Dec 31 12:34:03 2036 GMT
Subject: CN=6a635bbf-5e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:aa:75:16:ba:d3:20:e0:87:65:3f:31:59:
4b:53:18:c5:45:83:1f:9b:33:0b:95:87:ce:da:3e:
f7:b8:7d:1b:12:f8:43:6b:1b:ae:fa:f3:43:e5:c8:
bf:55:c3:91:3c:52:f0:12:7a:ad:68:f1:82:47:c0:
47:79:41:fc:59:b5:c8:ea:cc:80:56:c5:f3:34:78:
87:f8:d1:b0:ea:ae:fe:67:d5:cd:34:44:e6:ce:db:
a7:a3:34:1b:f9:95:d2:96:ab:70:13:19:28:33:90:
5e:94:57:5a:0a:f1:31:56:63:8b:2d:ec:da:35:0f:
5c:99:58:00:49:f7:89:63:96:ae:00:fb:ec:8a:27:
0a:9e:26:a7:57:d4:78:71:b8:1f:30:61:60:aa:fe:
00:96:75:17:5e:f2:42:b0:c9:27:57:36:7d:3f:e1:
e6:78:fd:bf:8d:3e:4f:ce:d2:f9:f8:ae:78:a1:28:
08:cb:ba:92:b5:e3:2e:57:f3:49:2f:bc:f4:5a:ea:
9e:56:02:80:40:1c:88:f2:71:16:e0:1e:7f:1d:ec:
d4:de:a2:15:87:e1:2f:0a:0f:4e:d1:9d:e8:73:8b:
ef:ac:8c:77:b5:dc:7e:a3:44:db:6b:f0:3e:65:48:
8a:50:aa:51:c0:c4:78:ed:3f:cc:62:97:44:1f:e8:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:CD:81:99:92:B2:65:3D:0F:2D:02:B3:92:AF:5C:5A:F3:81:66
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F686AFB6875B11F199EE42D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:0a:4f:23:d5:af:c7:74:13:21:c1:08:5d:53:a0:da:30:8a:
11:d5:2c:e3:c0:27:70:83:49:d5:64:13:48:6e:06:80:6a:86:
cf:5d:82:c3:58:5b:c5:8d:4a:d6:fc:68:2c:68:c6:d5:e0:2e:
1d:75:af:df:b9:76:89:29:8b:d6:93:97:16:5f:7c:1b:11:e9:
80:23:2b:a3:7a:2e:4e:97:f4:ca:2f:35:52:87:9a:2d:18:6c:
9f:78:18:c6:cc:8d:23:14:c5:3a:14:8d:7f:0b:b6:79:b6:c6:
4b:a6:2a:37:a9:33:50:b6:02:94:25:33:15:80:fe:6b:a1:d1:
99:77:4b:74:cc:32:69:4f:56:e9:5a:f8:05:fb:35:da:f1:40:
d7:a2:00:31:62:fc:49:e7:42:13:4a:ee:67:29:94:cf:a9:bb:
04:3b:2a:18:bb:04:2c:c9:7a:b4:1a:84:6f:24:3d:c9:50:27:
e0:05:4f:eb:8b:38:8c:08:b7:96:02:d3:5a:f3:10:67:2b:53:
68:56:05:a7:f4:9f:a6:51:df:24:22:b8:26:a1:bb:6c:6a:33:
5b:e2:3c:09:97:c2:87:3d:4f:48:af:1f:82:7f:c2:0c:15:43:
1b:d7:b0:67:ac:2a:6a:79:c9:07:89:a2:bb:30:c4:5a:7a:81:
51:a1:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:30 2026 by rpki-client