Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/8568E0228A7D11F1B05FC1F0CE1D38B0.roa
File: 8568E0228A7D11F1B05FC1F0CE1D38B0.roa (raw, json)
Hash identifier: m+DW1WbSqUnYVurlM4DfNSJoRuEkj2+yIMkYYUFHOpQ=
Subject key identifier: 6D:69:DB:0F:87:A7:C2:04:8F:19:31:26:F2:2C:BD:FE:7A:1F:65:0B
Certificate issuer: /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial: 051B
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Authority info access: rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/8568E0228A7D11F1B05FC1F0CE1D38B0.roa
Signing time: Tue 28 Jul 2026 12:11:54 +0000
ROA not before: Tue 28 Jul 2026 12:11:50 +0000
ROA not after: Tue 14 Nov 2028 12:11:50 +0000
asID: 37148
IP address blocks: 129.205.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Validity
Not Before: Jul 28 12:11:50 2026 GMT
Not After : Nov 14 12:11:50 2028 GMT
Subject: CN=6a689c8a-fbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:b6:82:8a:bc:58:73:15:34:a2:79:0e:30:
cd:56:71:72:6b:8f:63:6d:0e:2b:0a:26:9e:1f:fd:
f0:7b:e0:9d:d3:e4:9f:9a:92:8a:32:0d:86:8f:57:
a6:a9:a1:0b:17:b6:2e:d0:be:40:b4:a0:ee:13:54:
b3:c1:f4:34:2b:1d:2d:b8:5c:b7:58:39:13:03:b1:
77:23:f7:73:95:aa:68:b1:4a:a0:01:09:bd:23:84:
0f:c5:67:e1:54:f0:9e:d2:33:96:59:f1:b6:ed:1e:
94:fd:b1:37:80:00:97:ba:c2:bb:87:3a:69:4d:fa:
23:a7:6b:b7:d3:75:3b:5d:c1:c4:76:eb:37:fc:98:
6b:8b:32:b0:e6:ac:ca:1d:04:eb:4c:43:c4:6d:e8:
63:51:0d:43:09:5e:29:47:62:25:9b:76:cb:0d:53:
f0:2e:d9:a0:4f:7b:ab:3e:11:44:8c:92:02:65:e4:
e9:10:f6:ca:d6:e9:28:5f:1a:22:65:0d:bf:35:61:
cc:6e:fb:c1:e7:e0:37:a0:24:c7:c1:60:fd:23:bb:
51:56:c4:f8:a3:fe:90:89:ce:66:2b:50:dd:66:82:
64:4d:31:65:78:bb:83:82:c3:d8:ce:b2:bc:10:ec:
5c:73:d2:89:2c:b8:5c:1f:3b:f4:98:b0:f0:c0:8d:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:DB:0F:87:A7:C2:04:8F:19:31:26:F2:2C:BD:FE:7A:1F:65:0B
X509v3 Authority Key Identifier:
keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/8568E0228A7D11F1B05FC1F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.205.96.0/19
Signature Algorithm: sha256WithRSAEncryption
64:1a:1f:bf:e2:7d:46:50:07:57:f7:75:0d:6b:9d:4e:0c:cf:
56:46:17:70:5a:b1:20:38:ff:bb:ba:83:a7:87:8b:fe:fb:f6:
a2:1c:35:87:3a:6e:3d:a5:81:42:b6:79:de:13:ef:59:f0:59:
76:21:54:d0:11:61:e0:03:8e:6c:fc:fa:b6:46:33:66:86:3d:
6f:bd:45:ff:0d:4a:c0:33:4b:c4:57:57:f3:d2:14:58:02:76:
b9:29:96:91:c0:04:77:a1:4a:16:95:ea:b3:8a:72:63:50:51:
5e:0a:cf:30:de:4b:b9:66:dd:6a:ce:bf:5a:5a:2f:ca:5a:fe:
3e:63:37:4c:11:7c:7e:2b:85:3e:c6:89:24:fe:22:ab:cf:8a:
21:1f:4b:99:2d:76:8e:26:f8:f1:3a:ec:41:75:90:54:3a:20:
9a:f0:83:46:95:28:4a:f1:0b:0b:34:b9:1a:94:97:ed:1b:a3:
ce:25:76:fd:94:80:49:4d:8a:29:62:67:36:8f:71:25:af:98:
96:53:ac:58:a4:d5:f5:a0:f3:86:9c:be:69:51:18:8d:a7:90:
07:48:c8:17:a2:26:2d:a6:2c:65:58:1b:bd:ec:a0:cd:f5:94:
79:88:a2:b3:7f:34:b9:c8:94:8d:34:40:68:e9:7c:16:38:dc:
fb:82:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:14 2026 by rpki-client