Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/B7F1EC52846D11F1B4DC25E7CE1D38B0.roa
File: B7F1EC52846D11F1B4DC25E7CE1D38B0.roa (raw, json)
Hash identifier: pUoFImh8Ep/RuhTM4liWeLDhNF5TjcefT41B9dSq2Yo=
Subject key identifier: CF:C8:8C:C2:25:10:74:F8:E2:0F:CC:48:48:4B:5C:2D:01:8D:D9:9D
Certificate issuer: /CN=F363CC24AR/serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
Certificate serial: 0564
Authority key identifier: A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
Authority info access: rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/B7F1EC52846D11F1B4DC25E7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 19:03:40 +0000
ROA not before: Mon 20 Jul 2026 19:03:36 +0000
ROA not after: Sun 01 Jul 2046 19:03:36 +0000
asID: 328029
IP address blocks: 164.160.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC24AR, serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
Validity
Not Before: Jul 20 19:03:36 2026 GMT
Not After : Jul 1 19:03:36 2046 GMT
Subject: CN=6a5e710c-2881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:7f:08:1a:3f:0f:2b:f3:42:86:c8:85:04:
41:a2:37:1c:b1:27:65:44:e8:cc:57:fc:5d:cc:ea:
ad:3a:4e:da:49:a3:6c:37:d8:14:69:d3:5e:f1:99:
6c:7b:aa:58:6a:f3:09:42:13:fa:79:ba:cc:2d:e0:
a0:fb:cc:58:b6:0f:92:a5:5d:98:22:36:59:c9:e1:
93:cf:46:d7:e4:42:cd:b3:b9:b6:4b:92:fb:9d:08:
1d:db:da:34:e4:72:dc:d3:87:87:82:91:f9:f0:3a:
b2:ed:3c:df:94:74:13:cb:f3:48:8f:3c:46:9b:39:
a0:70:25:db:01:06:ea:52:31:f2:cf:42:82:23:b7:
25:3a:10:bf:29:ef:6c:37:ce:ec:54:42:fa:52:26:
ce:de:83:b4:28:cc:2e:67:5e:29:71:35:4b:27:f1:
b2:01:7f:46:8f:8b:93:4f:dc:fc:c7:b0:03:78:b3:
76:4f:d0:65:26:77:b9:76:f3:5c:26:bc:12:43:ce:
16:74:73:96:20:70:c5:8d:ed:b6:d7:bf:ca:a7:26:
53:f8:ba:d6:0f:6e:c7:bb:a0:1d:42:04:02:23:08:
90:ad:8b:15:c0:c4:85:f8:35:e5:ee:69:0f:5d:46:
77:b8:6d:87:a4:5f:a0:8c:78:15:de:9c:30:ca:59:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:8C:C2:25:10:74:F8:E2:0F:CC:48:48:4B:5C:2D:01:8D:D9:9D
X509v3 Authority Key Identifier:
keyid:A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/B7F1EC52846D11F1B4DC25E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.160.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:61:87:0a:46:fe:f0:d6:27:33:cd:a2:28:11:03:5a:81:1e:
f1:c9:b6:c7:8f:37:dd:12:fa:94:7d:7f:a4:97:9d:86:b3:9c:
71:3b:9f:23:5a:ea:2c:15:7b:80:f1:0f:48:d9:08:33:c8:cb:
dd:ff:50:e6:f3:fe:5c:01:2d:ab:0c:c1:e2:f8:94:ca:dc:64:
5a:4d:35:93:41:18:9c:84:3f:51:f0:20:09:79:c2:b9:de:1c:
95:12:e0:70:e3:ad:65:ac:d9:49:53:a7:6a:d0:f9:03:9b:b0:
ae:a9:50:10:d3:69:51:83:e8:69:44:f6:5f:96:65:7f:ae:18:
e2:dc:f8:ee:e6:6e:55:ba:66:96:e9:b7:13:ff:7b:fe:b3:a9:
a8:27:36:c2:23:f4:66:bd:61:93:37:cb:34:bb:9f:f1:97:55:
e0:fd:a1:95:40:a6:89:3a:6e:87:53:6b:9c:15:df:48:01:d3:
3d:c0:55:fa:72:b2:6f:37:35:3e:db:c8:b9:f1:d0:d5:b2:86:
6c:b7:4c:bf:b4:b3:57:5a:7f:19:98:73:23:9c:46:bf:d1:fd:
46:7f:bc:75:ab:32:79:f3:8e:98:3e:74:96:2b:61:c6:e1:84:
64:c1:e2:2c:6c:38:c4:e1:15:6a:a0:d6:71:7d:47:9f:77:82:
20:75:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:58 2026 by rpki-client