Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/0B137878847E11F1928E0FC8CE1D38B0.roa
File: 0B137878847E11F1928E0FC8CE1D38B0.roa (raw, json)
Hash identifier: qfqFQsOXT0JK/QxiaE+cs9hsoJFXY0fQqzicfQ5U3lA=
Subject key identifier: F4:51:A4:4C:B5:8B:A8:06:E1:1E:E0:2B:78:9A:17:C2:98:10:32:DC
Certificate issuer: /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial: 0B89
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Authority info access: rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/0B137878847E11F1928E0FC8CE1D38B0.roa
Signing time: Mon 20 Jul 2026 21:00:31 +0000
ROA not before: Mon 20 Jul 2026 21:00:14 +0000
ROA not after: Thu 19 Jul 2035 21:00:14 +0000
asID: 37721
IP address blocks: 165.16.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Validity
Not Before: Jul 20 21:00:14 2026 GMT
Not After : Jul 19 21:00:14 2035 GMT
Subject: CN=6a5e8c6f-e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:7b:57:cf:dc:1e:97:a1:ca:10:9f:e7:a0:
c4:51:26:28:7f:1b:1d:d8:6b:aa:48:1d:0c:40:36:
1f:fe:f0:ab:a6:c3:aa:b2:55:42:e7:b8:6c:9c:f4:
4c:78:3f:64:41:8c:f4:55:85:5a:35:30:8c:5c:9f:
e4:fb:47:7b:c4:7d:51:70:af:db:0d:6e:a0:85:e4:
f3:53:0e:5d:65:cc:81:09:19:3d:8e:dd:58:96:84:
be:ba:f5:4c:a1:4c:d7:8c:b8:8d:b2:06:58:28:3e:
91:bd:65:a9:65:61:ee:cd:5e:69:b5:16:c1:7b:26:
7f:73:86:c1:2e:d7:d9:12:c1:40:eb:a6:97:0f:b6:
b4:bd:1f:f2:63:47:86:0e:68:ba:b5:49:4c:6f:13:
67:98:bb:4e:af:23:71:c3:a9:71:a8:8f:fb:5b:e0:
41:eb:a0:08:1d:da:cc:04:7c:e1:10:4a:f8:68:b3:
8d:90:16:75:d6:42:d9:62:0e:42:f0:28:3d:11:bd:
b5:56:8e:2d:7f:dd:2f:14:98:5b:11:8b:0c:6f:5d:
3a:8b:d1:fc:ef:71:e9:c9:4a:69:3d:d2:d1:dd:cb:
6c:6b:ff:0b:df:21:98:68:b5:b1:04:b8:94:be:ac:
e3:97:34:60:e1:7c:4f:a3:95:a8:f8:73:06:2f:9c:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:51:A4:4C:B5:8B:A8:06:E1:1E:E0:2B:78:9A:17:C2:98:10:32:DC
X509v3 Authority Key Identifier:
keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/0B137878847E11F1928E0FC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.208.0/20
Signature Algorithm: sha256WithRSAEncryption
54:c4:9b:df:7a:66:7d:53:59:54:cf:8a:ae:43:a1:96:3d:3b:
ce:a1:86:75:22:75:72:6e:1d:8b:5d:f8:14:41:58:c6:05:d6:
b4:42:69:24:39:7e:bd:91:b2:e1:14:9c:b9:b2:5d:a0:fe:74:
3e:bb:4f:bc:f7:d4:f3:2a:d5:d4:ea:1a:22:54:b6:20:1c:77:
70:94:99:1f:39:3f:13:ac:a7:b7:d2:03:04:53:9c:d7:4b:54:
e9:6b:ec:a6:af:45:4e:16:86:cb:72:04:b9:89:d6:9a:f2:ca:
2f:22:25:89:51:da:8e:65:58:4e:ec:45:ba:aa:0d:ba:15:a8:
35:9f:9f:a1:6e:ed:da:8b:a3:dd:ff:2d:67:a3:cf:bb:c5:7e:
c3:02:7a:f7:aa:b8:5b:0f:82:c0:42:61:6e:ad:ca:97:d2:08:
f2:3d:e4:b7:c3:82:90:04:0f:18:97:cd:a6:20:8a:3a:19:b0:
82:d6:e5:bc:b1:e6:e1:8d:1f:32:14:f8:c7:c8:9f:66:59:df:
36:2a:4b:4b:05:be:11:4b:3f:59:5e:0e:74:14:b2:8f:90:a4:
54:12:22:30:fd:97:77:c2:e9:c2:32:9e:51:42:42:eb:3a:c0:
36:d1:90:ee:d7:c8:57:0a:25:92:fd:cf:0b:c4:5e:54:ae:d2:
a2:e3:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:32 2026 by rpki-client