Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/B2494468898011F1AED1DDEBCE1D38B0.roa
File: B2494468898011F1AED1DDEBCE1D38B0.roa (raw, json)
Hash identifier: 0remQ5twERRNcgswmijVsLoQGf5G125XCsN1nKp/ScI=
Subject key identifier: 01:A1:15:40:89:26:11:69:7D:31:CE:2A:AF:1F:0D:83:82:F9:AE:82
Certificate issuer: /CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Certificate serial: 069A
Authority key identifier: 17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Authority info access: rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/B2494468898011F1AED1DDEBCE1D38B0.roa
Signing time: Mon 27 Jul 2026 06:02:07 +0000
ROA not before: Mon 27 Jul 2026 06:02:03 +0000
ROA not after: Mon 06 Jun 2033 06:02:03 +0000
asID: 327789
IP address blocks: 169.255.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC460AR, serialNumber=17CB1843BCA4722435288056070A067156077FF8
Validity
Not Before: Jul 27 06:02:03 2026 GMT
Not After : Jun 6 06:02:03 2033 GMT
Subject: CN=6a66f45f-cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:02:17:f7:6c:cf:1d:d3:35:3d:ac:cf:f4:
6a:32:da:69:c3:9d:f1:cd:8b:34:c4:1b:44:6e:38:
98:3d:2a:34:9e:14:ef:45:52:77:43:4d:fe:21:52:
92:db:af:66:4d:72:93:f9:d6:8a:84:78:51:c0:88:
7e:ec:58:03:eb:2e:3e:f1:29:b1:ad:fc:e7:2d:d1:
23:c7:5d:1f:16:0e:a0:07:c8:50:7c:37:62:81:98:
10:90:63:e8:76:c2:99:22:86:8c:95:8a:e5:34:8a:
4a:29:fb:0b:9f:d1:77:a7:fb:5e:d3:e5:0e:2a:e7:
5c:d4:bd:f6:6f:9e:4e:63:01:35:ab:ea:00:ac:f5:
7c:22:18:2d:ac:8c:27:66:98:a7:bf:e5:69:22:74:
13:1d:bb:67:fd:3c:2d:07:31:c6:71:d5:e5:d5:31:
e1:de:8d:43:9e:b1:63:9a:1a:b4:97:3d:cc:e4:5d:
9e:89:d5:cf:1f:ad:59:ce:1d:cf:fd:0c:4c:35:60:
e1:c7:f4:13:02:34:51:37:f0:10:8e:e1:dd:28:8d:
ab:c1:e1:6b:1f:1c:0f:8f:dc:3f:b8:28:0f:61:51:
f3:ab:8d:2e:37:c1:61:15:e3:1c:69:7a:14:ea:01:
4a:89:c3:42:a7:bf:12:91:b5:96:2c:23:88:4f:55:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A1:15:40:89:26:11:69:7D:31:CE:2A:AF:1F:0D:83:82:F9:AE:82
X509v3 Authority Key Identifier:
keyid:17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/B2494468898011F1AED1DDEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3f:84:d7:9c:8a:16:40:a6:19:b7:09:e2:7a:b3:ef:f8:ea:
c9:f2:04:1e:c8:04:25:11:a8:ad:a5:7e:58:b2:ac:f0:54:11:
c0:df:38:1c:8e:90:96:68:e5:24:0d:e5:e9:89:a6:41:5c:08:
a1:55:69:f4:58:11:dd:02:42:ff:59:05:e6:9c:f3:d9:97:3e:
d7:0b:22:3e:08:35:89:2d:92:ae:26:4a:54:52:e0:51:4e:26:
92:0e:f6:e5:36:08:ec:49:a8:c9:ba:04:16:08:0b:40:6e:07:
a7:a1:b7:b3:99:45:da:69:b8:bf:9c:f8:4d:ee:de:ff:fa:ed:
84:71:b8:a6:7b:16:43:ae:df:40:55:7a:ba:40:82:51:b6:50:
ab:64:0d:80:ff:99:a3:f3:61:9d:76:21:81:b9:d2:89:71:77:
7d:3b:cf:63:7b:80:cc:fb:58:7d:9c:b7:f0:83:3e:98:fd:9e:
13:3d:d1:88:2a:b5:40:48:84:3f:6b:ef:24:c8:eb:09:d3:8b:
e8:e2:17:13:d0:95:8c:2c:a1:31:d8:30:7e:30:5d:d1:df:58:
70:f8:f9:57:75:51:c1:48:53:7a:67:b6:a4:f6:7c:ac:61:13:
2d:9a:b1:16:a6:de:48:e8:01:a5:5a:7f:5c:e5:47:6c:72:a0:
37:88:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:00:28 2026 by rpki-client