Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/C3AB8C528A6611F1A79EE8E7CE1D38B0.roa
File: C3AB8C528A6611F1A79EE8E7CE1D38B0.roa (raw, json)
Hash identifier: 5Q3aTotP8tzCbDAvO7MJbrrOC1kFDcK3iRGQv1v9UEc=
Subject key identifier: CA:22:BF:1E:6D:A3:AB:97:0A:F0:FC:4F:C1:D3:35:C4:A0:01:51:3E
Certificate issuer: /CN=F36E1EE5AR/serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24
Certificate serial: 0534
Authority key identifier: 53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24
Authority info access: rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/C3AB8C528A6611F1A79EE8E7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 09:29:00 +0000
ROA not before: Tue 28 Jul 2026 09:28:54 +0000
ROA not after: Wed 12 Jan 2033 09:28:54 +0000
asID: 327982
IP address blocks: 169.239.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft
rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1EE5AR, serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24
Validity
Not Before: Jul 28 09:28:54 2026 GMT
Not After : Jan 12 09:28:54 2033 GMT
Subject: CN=6a68765c-7a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:7a:f5:c3:4e:24:3b:95:f6:0b:92:55:73:
90:ba:90:ed:82:c6:6a:aa:7f:20:77:e3:bb:21:e2:
0c:07:a8:8d:d2:91:da:8a:27:59:27:2b:4d:66:b9:
91:07:7d:c1:46:70:96:dc:e7:24:cd:2c:24:32:f4:
bb:15:13:6c:2a:80:14:fa:9d:20:4b:86:85:dc:e6:
82:4a:29:12:d1:7b:d7:16:08:be:f4:77:cb:07:27:
50:cb:42:f8:4e:2f:0e:c9:9d:b8:86:73:5c:04:db:
52:88:b4:7c:c1:43:da:0f:01:66:6c:ee:59:6f:30:
67:9e:e9:95:79:a2:ad:34:b6:b9:e8:1f:01:b5:32:
a0:45:71:08:21:e8:7e:fc:3b:3b:93:3c:49:32:c3:
17:45:32:d3:2f:fc:bd:ca:98:44:08:9d:34:58:60:
f6:6b:ed:57:9b:1c:20:c9:3f:22:5d:7b:20:90:2b:
ed:a0:7e:0d:09:90:fb:72:c5:e0:7c:4f:55:b4:b9:
c8:7b:44:45:4a:ce:6b:18:1d:69:21:04:b0:58:91:
c9:51:d2:61:50:f9:25:cf:39:49:bd:b8:1e:2d:34:
74:f2:1b:85:90:22:73:4f:d5:30:e3:b2:da:e8:e9:
f9:3f:f4:21:40:17:49:67:08:f5:9a:03:72:03:0a:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:BF:1E:6D:A3:AB:97:0A:F0:FC:4F:C1:D3:35:C4:A0:01:51:3E
X509v3 Authority Key Identifier:
keyid:53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/C3AB8C528A6611F1A79EE8E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.240.0/22
Signature Algorithm: sha256WithRSAEncryption
69:de:05:02:16:c6:f2:ea:85:a3:8d:97:bf:b0:07:dc:61:c7:
dc:db:d9:ea:5a:8c:5f:c1:9f:78:3e:53:0d:80:2e:20:62:38:
b7:05:ab:0f:83:74:0f:d4:8e:74:da:fc:63:77:e5:2d:99:68:
77:18:c4:c6:7e:f0:ad:69:31:73:11:02:15:0a:84:60:1b:fa:
40:58:8c:e0:98:9c:45:07:e7:75:c5:6b:f7:2e:4c:02:cc:30:
d0:8c:d2:e1:1b:2a:94:08:50:93:83:71:00:01:6e:c6:34:39:
6d:3d:aa:24:90:08:9f:54:cb:a8:6e:75:9f:17:2e:31:2a:78:
90:b2:7a:cb:fd:82:dd:b7:66:ba:16:80:d8:7a:f7:30:3e:8f:
30:cb:14:67:61:71:dd:11:b6:d5:c3:22:29:2f:50:86:e9:d1:
df:6f:a4:6e:62:a2:e1:1f:c6:a2:56:03:53:4d:9c:86:c1:5c:
91:14:fc:b9:3f:96:61:cb:34:da:62:77:80:b4:50:14:45:c9:
98:8e:a5:dc:49:d2:16:2f:aa:13:20:85:c7:89:66:ee:4a:7c:
42:3a:8a:a0:7b:e2:dc:a6:fc:82:b7:7c:2b:70:ac:0d:85:36:
b5:af:58:10:38:f8:26:a9:af:1d:99:31:e1:1f:38:4f:79:7a:
6a:18:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:01 2026 by rpki-client