Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/F67B1080078511F1A61271C3DAE4EC9C.roa
File: F67B1080078511F1A61271C3DAE4EC9C.roa (raw, json)
Hash identifier: DZEJ0kUrfFd+Ajbj7HFMNY2JqNwV+R+8KRQFU30o23s=
Subject key identifier: 32:3F:C1:B0:3C:50:4E:FC:BC:5D:AA:31:E7:84:D6:FF:C2:E4:93:BE
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 0476
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/F67B1080078511F1A61271C3DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 20:12:18 +0000
ROA not before: Wed 11 Feb 2026 20:12:12 +0000
ROA not after: Tue 31 Dec 2030 20:12:12 +0000
asID: 15964
IP address blocks: 165.210.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Feb 11 20:12:12 2026 GMT
Not After : Dec 31 20:12:12 2030 GMT
Subject: CN=698ce2a1-83be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:1e:81:12:5a:a6:5f:8e:7a:e4:e4:1a:13:
c7:0c:ef:89:8d:91:01:10:47:47:2e:1d:5c:26:ba:
cb:61:77:23:94:f6:82:15:1a:4a:17:c0:2a:e1:a4:
20:e7:72:ba:e5:04:e4:3a:b3:ce:9c:1c:3a:cc:23:
e9:ca:37:94:ea:9a:08:80:4d:ea:99:69:bf:a1:5d:
0c:df:24:d6:2b:f0:17:8c:4a:2e:9e:c3:1a:35:2c:
8d:47:62:2c:5a:21:6e:28:5f:44:ca:41:6a:ea:ba:
11:67:3d:bb:25:e8:c1:24:2a:b1:3d:11:85:17:ce:
49:99:7b:8f:d9:1c:18:94:5d:33:81:fa:1d:20:db:
fc:36:61:46:42:dd:3b:32:5d:12:31:26:33:9e:15:
67:0e:57:f9:89:82:16:10:d0:a1:85:3d:03:0a:f0:
26:66:7b:61:64:1f:02:ca:b9:63:5d:cc:ff:1a:50:
00:b3:64:af:74:78:85:29:e8:3a:17:79:a2:e2:66:
5d:c6:06:f1:f2:16:2f:da:ba:bd:ef:ad:c4:d3:4f:
68:35:bb:4f:bf:40:1d:c7:82:32:9f:0e:d5:84:f6:
e9:19:c7:c2:e5:43:99:00:a3:78:d2:26:4c:4a:9d:
f0:bf:71:e6:a1:66:7c:4d:ab:ab:0f:e9:b1:21:7b:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:C1:B0:3C:50:4E:FC:BC:5D:AA:31:E7:84:D6:FF:C2:E4:93:BE
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/F67B1080078511F1A61271C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.210.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2e:b3:bb:61:f7:4d:2d:91:17:3b:b3:5e:36:1e:31:84:79:
f4:12:f0:c4:0c:5d:03:fa:2c:37:c8:5b:ba:8a:c8:34:62:06:
a2:3f:8e:83:b9:cb:a5:03:14:c7:f7:fc:8f:29:4c:83:52:a2:
32:6a:6e:c7:6d:86:2a:81:c5:f7:0d:f1:ae:da:2b:a1:cc:8a:
8c:1e:6f:fc:bb:d1:e9:bd:73:e6:1d:73:f6:dc:0c:52:c3:8e:
f2:be:d3:0b:ac:b0:74:72:fb:fc:a0:86:78:f7:59:a5:fc:db:
ef:ef:f7:78:68:ac:c1:dc:10:eb:50:bf:3d:d9:79:e9:34:9b:
79:14:04:bc:7e:60:87:66:d2:cc:73:f8:c0:f5:47:94:16:23:
43:b9:f3:64:0c:3f:52:eb:c8:be:66:6b:5c:93:82:1c:cb:33:
a1:73:a3:2e:50:93:b8:37:d3:94:c5:47:62:57:01:e9:32:b5:
92:86:b9:06:52:15:af:74:2c:a2:a9:ed:4b:cd:5a:51:7b:d3:
7a:1d:54:86:2c:ee:bf:b2:50:29:ec:5b:c0:ab:ff:9e:3c:8c:
17:b5:f0:fb:2c:94:fb:ac:c3:79:6e:3d:78:57:ae:9a:be:ac:
16:fe:d2:34:d9:ac:16:14:22:60:30:04:fd:52:7e:14:7d:f1:
ef:70:b8:b0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNBUjExMC8GA1UEBRMoMDcyOEM5Qjg0NTVDNjU5NzdGQTMwOTg3REU0OTQx
REYwMThDNjUxQzAeFw0yNjAyMTEyMDEyMTJaFw0zMDEyMzEyMDEyMTJaMBgxFjAU
BgNVBAMTDTY5OGNlMmExLTgzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMtx6BElqmX4565OQaE8cM74mNkQEQR0cuHVwmusthdyOU9oIVGkoXwCrh
pCDncrrlBOQ6s86cHDrMI+nKN5TqmgiATeqZab+hXQzfJNYr8BeMSi6ewxo1LI1H
YixaIW4oX0TKQWrquhFnPbsl6MEkKrE9EYUXzkmZe4/ZHBiUXTOB+h0g2/w2YUZC
3TsyXRIxJjOeFWcOV/mJghYQ0KGFPQMK8CZme2FkHwLKuWNdzP8aUACzZK90eIUp
6DoXeaLiZl3GBvHyFi/aur3vrcTTT2g1u0+/QB3HgjKfDtWE9ukZx8LlQ5kAo3jS
JkxKnfC/ceahZnxNq6sP6bEhe6whAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUMj/B
sDxQTvy8Xaox54TW/8Lkk74wHwYDVR0jBBgwFoAUByjJuEVcZZd/owmH3klB3wGM
ZRwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzREOTJFQzI2QzI0NzExRURCRjkzMjNBMEYxMjIyNDY4L0J5akp1
RVZjWlpkX293bUgza2xCM3dHTVpSdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0J5akp1RVZjWlpkX293bUgza2xCM3dHTVpSdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjk1OTFDLzREOTJFQzI2QzI0NzExRURCRjkzMjNBMEYxMjIy
NDY4L0Y2N0IxMDgwMDc4NTExRjFBNjEyNzFDM0RBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACl0hAwDQYJKoZIhvcNAQELBQAD
ggEBAJ8us7th900tkRc7s142HjGEefQS8MQMXQP6LDfIW7qKyDRiBqI/joO5y6UD
FMf3/I8pTINSojJqbsdthiqBxfcN8a7aK6HMioweb/y70em9c+Ydc/bcDFLDjvK+
0wussHRy+/yghnj3WaX82+/v93horMHcEOtQvz3Zeek0m3kUBLx+YIdm0sxz+MD1
R5QWI0O582QMP1LryL5ma1yTghzLM6Fzoy5Qk7g305TFR2JXAekytZKGuQZSFa90
LKKp7UvNWlF703odVIYs7r+yUCnsW8Cr/548jBe18PsslPusw3luPXhXrpq+rBb+
0jTZrBYUImAwBP1SfhR98e9wuLA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:52 2026 by rpki-client