Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa
File: 7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa (raw, json)
Hash identifier: jQGUKe3rg4/PLd3kSJUPsEAaJxqYjO4wUsN/Bu7W0uA=
Subject key identifier: B9:C0:A0:E2:86:44:67:E2:58:C9:17:B8:CB:31:F4:6D:1D:39:D4:6B
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 047D
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 12:03:26 +0000
ROA not before: Mon 16 Feb 2026 12:03:20 +0000
ROA not after: Tue 31 Dec 2030 12:03:20 +0000
asID: 15964
IP address blocks: 165.211.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Feb 16 12:03:20 2026 GMT
Not After : Dec 31 12:03:20 2030 GMT
Subject: CN=6993078e-3010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:49:c8:cd:68:67:f3:3f:50:0b:7f:f0:2b:
f5:38:3d:df:2b:8a:b2:b2:6c:67:f8:78:12:99:38:
a2:b6:49:9b:1f:39:1f:5e:53:7f:6d:7a:bf:9c:f4:
af:bf:0c:48:9e:d3:9f:be:90:d8:19:b3:ad:fd:95:
fb:11:09:fe:f7:4a:9b:09:8e:dc:09:3a:31:67:de:
7a:50:4a:ee:d2:04:4b:27:93:d6:01:ca:32:0a:f7:
78:2d:c0:ac:52:89:ad:09:00:02:25:5f:3a:61:ed:
9f:2e:53:0d:5f:35:64:c7:ba:d2:98:42:13:bf:e0:
dc:e7:55:23:1d:3a:8d:50:66:7c:38:b6:3b:8c:6b:
f9:fb:54:31:d1:02:c9:fe:2b:fe:63:7e:99:48:81:
c4:c5:fe:9a:8d:5f:49:4f:0f:68:ea:9a:f7:ba:81:
3b:80:55:6c:e4:ee:71:9b:bc:09:dc:ac:42:51:bc:
27:81:50:db:78:69:61:98:7c:96:97:3a:c1:53:33:
67:b6:ae:3a:d8:3e:64:2c:8a:d6:c2:bf:78:15:40:
a3:51:bc:ad:74:ad:d1:fb:4d:27:7e:87:a2:98:ac:
c6:69:65:ae:fa:77:f2:78:c6:20:67:0f:0d:6c:7e:
fd:53:98:7d:65:64:dd:17:e0:42:7b:f3:2b:59:69:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:A0:E2:86:44:67:E2:58:C9:17:B8:CB:31:F4:6D:1D:39:D4:6B
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.211.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0d:8d:0c:5e:01:76:48:14:b4:59:28:c2:5a:93:96:a6:ca:
41:15:fa:08:90:f4:9e:cd:a7:a1:52:64:72:ed:5f:d0:e0:8e:
fa:f9:a9:36:9f:92:4c:54:cf:62:d3:53:01:9e:7c:be:29:fc:
6b:17:56:a7:a8:a4:e7:da:6f:b5:85:44:3d:4b:68:f2:9a:d5:
20:43:8e:7a:94:ed:16:40:e8:2a:76:6f:55:2a:a1:41:97:fe:
66:ea:ec:d0:88:b8:90:72:bb:22:1b:f4:bd:4f:a8:5e:55:ee:
6f:41:6f:83:99:5f:bf:be:de:f2:90:c2:f0:4c:a6:40:08:65:
a8:05:65:b7:5f:79:80:74:4c:26:b9:24:08:0d:c4:46:ca:f4:
d8:c2:69:fd:30:8c:ea:06:a1:35:a7:d7:71:7c:f6:df:e2:36:
f3:26:27:31:b2:73:ab:24:f2:37:5a:c6:d0:0a:0a:2d:c9:80:
6c:5a:3c:cb:fb:54:90:06:54:b7:49:34:d7:48:4c:f6:93:9d:
90:38:af:22:45:c5:a7:0f:4c:ae:3c:14:72:f1:a6:d4:97:11:
06:66:a8:eb:d2:94:b2:18:59:7e:9c:4f:7c:27:be:8a:a3:36:
e4:a9:2a:1d:ee:d0:4a:9f:9f:a5:26:99:f0:cd:84:97:b6:cf:
8f:9f:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:36:37 2026 by rpki-client