Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/5002074A8A8911F18559EDB9CE1D38B0.roa
File: 5002074A8A8911F18559EDB9CE1D38B0.roa (raw, json)
Hash identifier: Z5PYBIpWyue4OBGgmLl5UAhP6vxGTSwaWTgoVmQM8bw=
Subject key identifier: C7:DA:48:BE:D7:60:5D:87:E3:B5:CB:F5:A1:88:FD:FA:5A:40:0E:DD
Certificate issuer: /CN=F36CF917AR/serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Certificate serial: 0620
Authority key identifier: C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
Authority info access: rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/5002074A8A8911F18559EDB9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:36:19 +0000
ROA not before: Tue 28 Jul 2026 13:36:14 +0000
ROA not after: Mon 28 Jul 2036 13:36:14 +0000
asID: 36913
IP address blocks: 168.253.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AR, serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Validity
Not Before: Jul 28 13:36:14 2026 GMT
Not After : Jul 28 13:36:14 2036 GMT
Subject: CN=6a68b052-8441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:b2:8e:bf:64:93:73:6b:33:fe:93:87:5f:
de:54:04:d7:3a:79:6c:30:09:6a:d4:bb:71:32:25:
a7:01:34:ab:0f:cc:60:b3:d6:bf:53:1b:bb:38:2c:
7f:80:47:23:c7:ad:a1:8b:4a:76:eb:94:bb:63:d0:
9d:05:a4:49:2c:5e:e1:90:0b:da:d2:bb:06:90:c0:
50:98:59:a7:e8:03:0c:9b:01:b6:86:ae:4f:7e:ff:
5f:e1:f2:ec:eb:ff:0f:f8:a9:57:d3:fb:25:2f:ff:
27:19:1b:f9:fb:6a:be:3f:f5:39:f3:6a:21:b7:b2:
13:f3:78:03:2e:e9:5e:c1:40:6f:33:7a:4a:10:84:
69:d9:ed:e6:c5:60:12:c0:24:56:08:50:fb:80:9f:
ce:c6:ca:bd:58:99:7a:ce:25:7c:65:18:ca:2c:bd:
5c:2d:31:3c:d2:b4:67:d4:69:e4:27:ba:1d:87:d1:
66:6c:a7:51:b7:6b:32:69:f6:23:87:ba:8e:bb:41:
dd:a3:9f:ab:66:ec:26:cc:95:a0:97:cc:66:dd:e4:
9c:20:62:82:e1:66:04:a9:a3:de:1d:5c:91:66:a1:
4f:05:c6:e9:73:22:43:37:9c:c9:0a:ec:44:28:bb:
03:4f:4b:93:74:3f:c3:3c:11:40:80:89:61:bf:2e:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:48:BE:D7:60:5D:87:E3:B5:CB:F5:A1:88:FD:FA:5A:40:0E:DD
X509v3 Authority Key Identifier:
keyid:C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/5002074A8A8911F18559EDB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.224.0/19
Signature Algorithm: sha256WithRSAEncryption
70:69:f2:ae:6c:69:85:ec:05:6c:eb:8d:aa:ef:8b:66:84:18:
78:75:15:8e:5f:49:4e:1e:43:09:cc:d6:c7:52:6b:cd:3a:44:
24:3a:15:5c:f3:31:f5:65:6f:15:6e:4a:4f:f9:f5:59:c9:af:
1d:22:6b:07:37:85:b1:6b:03:62:56:1b:5a:65:65:8f:b0:c8:
c7:bd:03:d2:f0:60:fd:59:ec:31:13:db:f3:3b:16:d5:de:ae:
6c:e8:3c:4a:ef:94:50:e2:ed:1c:fc:d3:c0:4b:07:94:aa:96:
f3:93:9b:53:e6:98:c6:29:6b:d0:4a:88:43:bd:af:e8:51:4d:
2c:6b:82:1e:b7:e1:89:65:6d:1a:bf:69:65:86:dc:a5:6c:9c:
60:e2:c2:09:9b:e3:d7:9c:53:00:d4:57:4c:a0:dd:3c:aa:13:
5e:dd:f6:6f:61:2b:94:21:88:a1:de:ae:07:0f:9e:8f:fd:12:
57:9d:ed:24:b2:88:2a:fc:96:2e:09:1d:b8:5d:77:b4:5e:08:
68:e7:4b:8d:cf:fe:67:4f:78:6b:ff:85:d5:2e:44:1b:7a:f8:
fc:5e:9e:16:b4:22:ca:16:5b:80:a4:90:5b:17:29:32:68:f5:
51:27:62:f0:7b:38:38:83:1e:47:34:6d:f8:dc:00:e2:63:aa:
34:7f:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:25 2026 by rpki-client