Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/8C2651F4195511F1A35B4FC0DAE4EC9C.roa
File: 8C2651F4195511F1A35B4FC0DAE4EC9C.roa (raw, json)
Hash identifier: pGpRj6/PqXx9Td2hUx4ugVnycXhSWNsX+vCSVgOR8bM=
Subject key identifier: 80:32:71:DC:7E:20:B8:90:55:08:F3:18:CC:93:97:64:13:B9:81:A2
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 0488
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/8C2651F4195511F1A35B4FC0DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 12:11:04 +0000
ROA not before: Fri 06 Mar 2026 12:11:00 +0000
ROA not after: Thu 06 Mar 2036 12:11:00 +0000
asID: 327697
IP address blocks: 139.26.160.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Mar 6 12:11:00 2026 GMT
Not After : Mar 6 12:11:00 2036 GMT
Subject: CN=69aac458-415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:ff:d3:42:59:40:54:00:5f:2f:dc:f8:96:
18:48:37:25:47:db:0c:9b:85:fd:de:b0:d2:2f:23:
3a:a2:27:94:29:5a:03:97:cb:e5:81:be:a6:0a:cf:
cf:af:cb:e8:6c:d7:17:3d:02:58:60:62:d9:20:17:
25:45:f5:c1:14:a4:29:22:ee:4c:29:a2:d3:09:45:
13:89:68:7d:f7:04:a3:a1:42:a2:44:5f:03:c7:9e:
b0:59:88:5c:a3:c1:76:c4:1d:aa:0d:da:f9:1d:6a:
6e:2e:ad:02:95:17:3c:67:9b:4c:93:b7:c5:4e:d7:
98:b1:40:0a:85:4e:97:05:27:a6:94:21:ad:88:1b:
3e:bd:11:ac:c3:7d:44:22:53:fb:0b:91:3c:45:af:
32:eb:b2:9c:05:79:44:99:10:9f:3a:ce:db:db:3a:
d7:fc:04:b3:fc:51:c4:cb:22:9e:e3:fa:99:a7:f7:
0e:32:6f:6c:1c:e2:c4:5a:86:97:99:74:68:8e:31:
ea:4f:ca:0d:a9:de:4a:a1:81:6a:25:17:c4:bc:06:
07:42:80:ce:1a:83:3a:1f:86:b6:28:28:bc:38:ac:
be:99:05:57:74:0c:f8:23:18:d3:05:af:fb:eb:4b:
32:e9:2d:2f:89:87:33:13:67:fb:c5:d7:a8:44:eb:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:71:DC:7E:20:B8:90:55:08:F3:18:CC:93:97:64:13:B9:81:A2
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/8C2651F4195511F1A35B4FC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.160.0/20
Signature Algorithm: sha256WithRSAEncryption
80:59:46:9f:5e:ce:8d:10:e1:1a:4c:1b:21:f3:28:e3:96:66:
45:2e:21:31:aa:48:88:a1:87:b7:85:af:33:3b:e8:0c:d8:0b:
f4:af:35:44:92:b0:76:17:f5:2a:6b:7e:65:4a:b4:a3:5b:27:
28:da:51:62:fc:4c:6b:40:47:fc:6b:3f:08:be:75:d9:55:01:
4d:0c:5f:00:44:8b:b4:7a:c5:8e:9d:7f:3d:75:99:46:e4:01:
50:1e:4e:2a:a9:a2:06:8c:7b:14:bc:cd:a1:88:b5:0a:79:68:
30:e3:ea:ff:13:0b:28:21:8e:9c:5d:6e:37:ef:a2:32:1f:79:
0c:2e:d4:5c:f1:ee:e5:8c:50:37:ad:23:b5:d7:94:15:d8:20:
96:53:2d:24:8b:5b:57:2d:6d:58:9f:6b:e5:a9:cb:1b:0c:f2:
a4:18:01:0e:c1:a3:31:e3:4e:9b:74:8a:9a:e3:f1:8b:ac:b7:
13:e0:23:45:3f:bd:b4:5b:53:75:d6:72:c7:6d:70:18:6c:9d:
56:a4:24:92:c6:c3:2e:a4:5a:b3:f8:05:fd:47:ba:e1:69:83:
67:4e:c7:bc:7c:f9:31:f3:16:d0:eb:38:2b:f4:ff:31:c6:ed:
28:65:24:a2:79:b3:23:ef:10:c9:9e:14:df:cb:35:87:4f:00:
12:0f:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:45 2026 by rpki-client