Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C84C4BA8438E11F1A038CBAFCE1D38B0.roa
File: C84C4BA8438E11F1A038CBAFCE1D38B0.roa (raw, json)
Hash identifier: GcHZtVrBsP+UNGIeePC9r4djl/LZVVZG9H3Cn5fuM/Q=
Subject key identifier: 9F:6B:DC:D2:5C:DD:AC:EC:C7:FB:3A:C1:FF:F5:11:9C:E4:CE:5C:82
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0728
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C84C4BA8438E11F1A038CBAFCE1D38B0.roa
Signing time: Wed 29 Apr 2026 05:46:35 +0000
ROA not before: Wed 29 Apr 2026 05:46:30 +0000
ROA not after: Tue 27 Apr 2027 05:46:30 +0000
asID: 55154
IP address blocks: 45.221.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832 (0x728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 29 05:46:30 2026 GMT
Not After : Apr 27 05:46:30 2027 GMT
Subject: CN=69f19b3b-8b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:3c:65:63:03:14:0e:9e:e2:2a:47:56:b7:
95:c5:b3:32:e4:f9:8f:2d:51:cb:a3:a0:c4:dd:0a:
b0:6a:95:ac:9b:8d:4e:38:99:1f:8f:89:b9:30:85:
8b:65:8f:17:4d:22:4a:41:ba:c2:86:06:da:b1:69:
0d:f5:fe:84:70:03:ae:a8:05:0b:63:6b:6c:70:5d:
f1:ab:ef:a8:f7:5f:19:e0:19:09:3e:c0:39:c7:ab:
f2:88:2a:9e:c5:2d:d5:89:77:26:12:91:0e:e2:55:
13:91:ec:2a:39:89:ca:bb:4c:b5:a7:64:7d:f6:b5:
b0:9c:a9:f8:e0:db:a2:2d:19:c0:66:0f:80:e8:39:
47:46:ae:d3:c3:ab:c5:54:3d:61:e9:be:7e:b4:1d:
3f:0f:18:ac:db:3a:7f:72:bc:36:75:6e:12:d6:f4:
20:5c:25:11:51:44:35:a1:92:dd:03:09:b1:ab:b2:
d8:21:fa:4e:f3:1d:05:e1:c9:9b:7e:e2:1b:86:ca:
b8:63:57:5e:5b:6f:89:2f:94:97:32:c2:6a:52:f3:
2d:76:90:2d:3d:ab:cb:e1:4e:71:da:73:ee:84:3d:
fc:b4:a7:f4:37:4c:c0:6c:84:54:f2:6a:c8:aa:41:
73:a1:4f:18:78:e0:24:5f:77:d3:50:af:59:73:6a:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:DC:D2:5C:DD:AC:EC:C7:FB:3A:C1:FF:F5:11:9C:E4:CE:5C:82
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C84C4BA8438E11F1A038CBAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:0c:2d:f7:07:1d:84:e2:e5:aa:ca:1b:af:fe:c7:14:05:a2:
df:4a:96:0f:98:f5:c7:4a:cc:ab:58:ae:8a:52:d1:44:4a:0d:
b4:3b:e3:a6:37:3f:bc:b3:4e:17:ed:ea:d4:ec:d1:e3:39:ce:
0f:06:e1:9a:23:93:1b:bb:35:61:98:de:5e:9d:52:e3:8a:03:
c5:8f:81:78:f4:6f:98:02:54:1a:a7:91:4f:c7:4a:bf:ed:0f:
24:5b:fc:79:e6:8d:d8:f6:14:b7:cb:ea:07:ca:95:d6:08:5e:
58:3e:1c:4e:74:4e:c5:4a:56:a1:0a:d1:77:33:55:f6:14:32:
2f:5a:15:bf:22:82:33:8f:78:9a:99:58:4f:17:40:f1:16:72:
a4:4d:2e:bc:de:a8:3d:33:01:5a:15:e5:41:a5:51:78:fa:6b:
f1:50:96:19:ff:32:91:c3:51:0a:d0:ee:4b:17:80:a4:00:54:
85:6d:ff:2b:0e:83:f0:79:d7:01:a5:1d:f7:e1:fc:45:d0:38:
a7:92:f1:4e:7c:af:26:07:d0:9a:d3:61:05:a7:73:1f:93:3e:
27:80:57:bb:af:13:16:96:a1:1c:19:a0:32:18:cc:77:46:67:
82:a9:0d:e0:e6:84:4b:52:fb:01:c6:ca:dc:e4:e5:94:2f:91:
8f:bc:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:38 2026 by rpki-client