Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/2C82DE8284E611F19FB81CD2CE1D38B0.roa
File: 2C82DE8284E611F19FB81CD2CE1D38B0.roa (raw, json)
Hash identifier: b3bTfsHITdYZ9ni2iIT1pWPRt5idzYLvZ2tzcXpea+8=
Subject key identifier: 49:0D:20:13:A8:6D:A5:7B:3F:44:B6:7A:F1:01:D6:37:6E:79:EA:03
Certificate issuer: /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial: 069D
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/2C82DE8284E611F19FB81CD2CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:25:55 +0000
ROA not before: Tue 21 Jul 2026 09:25:51 +0000
ROA not after: Thu 31 Jul 2036 09:25:51 +0000
asID: 37611
IP address blocks: 156.155.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Validity
Not Before: Jul 21 09:25:51 2026 GMT
Not After : Jul 31 09:25:51 2036 GMT
Subject: CN=6a5f3b23-4615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:dc:ea:0c:b5:e7:df:1e:37:7e:6d:7d:d3:
a4:a4:d6:51:35:64:dc:a8:bd:67:30:b2:bf:e3:cf:
c6:dc:62:4a:d2:25:04:4a:c1:2d:0e:6e:07:ab:da:
54:70:f5:01:42:d6:84:d1:ec:22:a3:4c:dd:b4:4f:
ef:2f:92:67:00:22:8b:bf:0c:45:e2:8e:db:cf:9a:
74:63:c5:0b:15:49:db:14:5d:d7:42:b3:7a:a3:33:
f4:ac:9b:b8:09:e6:15:d3:8b:2b:a2:1e:9d:53:38:
75:ae:e1:5a:6e:fd:3b:42:6d:d9:b7:50:a3:b5:97:
19:bf:f3:82:f4:fd:ec:b1:b0:8b:7c:39:f8:dd:04:
9b:86:0b:19:4a:ca:a5:89:4c:88:64:c8:ee:01:0f:
d1:44:83:ee:5c:c0:87:24:d6:0d:92:db:13:07:b3:
9d:24:9f:d9:95:58:68:2b:9c:77:da:e1:6f:72:81:
70:5f:aa:88:a4:78:79:07:b9:13:48:14:d3:9f:c5:
3b:f2:9f:91:19:48:6a:f8:a3:e1:35:ca:c5:1c:c3:
ba:3b:f5:11:31:1d:e6:4f:54:8b:d2:c2:f9:4a:33:
34:b5:78:51:16:fa:0d:17:9b:51:89:d8:00:3c:99:
d6:62:eb:71:64:25:c0:33:b8:f5:50:ec:58:76:4d:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:20:13:A8:6D:A5:7B:3F:44:B6:7A:F1:01:D6:37:6E:79:EA:03
X509v3 Authority Key Identifier:
keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/2C82DE8284E611F19FB81CD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:a2:ed:51:92:e8:39:bd:eb:7b:5f:5d:d0:45:ba:cc:a1:ea:
a8:19:d6:87:4c:ef:66:31:9d:14:46:5d:d3:b0:a3:05:4e:be:
36:a1:2e:27:01:42:5d:f4:a5:d2:14:12:83:e3:5f:11:76:3d:
5c:b2:bb:4a:e8:91:56:9a:1d:ec:5d:d9:c2:c8:ac:d2:2e:54:
21:7b:1f:28:33:57:bd:29:84:68:f8:c5:96:3c:aa:4d:72:67:
c7:0b:aa:05:95:4b:61:ac:df:f7:ee:5f:6d:a0:7f:5f:33:32:
58:41:c0:eb:f6:f5:fa:2e:8a:a4:a6:45:b5:6f:12:37:ab:df:
60:4e:1c:36:04:e9:55:17:e3:ee:c6:e9:be:9a:33:88:1d:c0:
e2:ed:6f:f5:ad:fe:ce:6d:bb:c3:f6:94:0c:ae:77:f5:4f:f7:
66:bf:7a:1d:dd:0b:98:0a:97:ec:6e:74:c1:57:14:a3:06:8d:
42:9d:a5:62:9b:fb:02:c4:89:a6:c1:5e:dc:2d:31:c4:0e:67:
3f:71:25:7c:fe:ca:88:9f:70:99:0b:a1:02:b8:d3:dd:1a:96:
d0:61:6f:8f:bd:fe:f4:b0:bc:0c:42:73:c0:23:a7:31:cf:c7:
16:96:cd:38:50:d9:3c:ab:2b:b5:07:6e:c1:7d:6c:58:16:f4:
92:ef:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:06 2026 by rpki-client