Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/002215BE68C711F180D0CEFBCE1D38B0.roa
File: 002215BE68C711F180D0CEFBCE1D38B0.roa (raw, json)
Hash identifier: v5F6X6ITuLHIHFcWFhURETKbMJ28InX1tSbdWhh89yc=
Subject key identifier: 38:6A:F9:70:96:6A:83:AC:24:97:E0:22:22:ED:49:95:D8:EF:5F:CB
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 04FB
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/002215BE68C711F180D0CEFBCE1D38B0.roa
Signing time: Mon 15 Jun 2026 14:32:14 +0000
ROA not before: Mon 15 Jun 2026 14:32:09 +0000
ROA not after: Tue 31 Dec 2030 14:32:09 +0000
asID: 15964
IP address blocks: 165.211.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Jun 15 14:32:09 2026 GMT
Not After : Dec 31 14:32:09 2030 GMT
Subject: CN=6a300cee-ab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:d0:4c:04:32:ed:5a:8d:32:45:04:1b:e8:
bd:58:44:ae:ee:1a:df:f5:66:7e:75:76:48:d4:95:
a8:d2:d6:29:79:fe:43:24:67:48:c1:50:a8:13:7e:
c5:bc:79:34:cf:f1:b5:2e:5f:c1:80:41:5e:24:3d:
f2:13:97:3a:98:1f:aa:63:45:e7:5e:4d:3e:f8:be:
32:ed:21:5a:79:d9:ad:9b:0b:35:6e:0b:d0:e6:c1:
8a:5c:87:3d:5f:e5:70:ac:4a:b1:1c:f5:eb:c8:fe:
44:18:45:3d:9d:ab:e9:ba:2d:34:be:c2:64:f0:90:
ba:a1:e6:95:30:24:9d:35:cd:1b:00:61:e2:a1:bd:
ed:70:97:f1:7c:bd:54:70:42:ba:3d:c3:2b:26:2f:
3d:21:44:1a:b7:9c:9c:76:a1:bb:2b:4e:e2:52:e1:
b4:b6:ed:11:5d:3e:75:c6:31:84:85:68:3e:ee:fc:
23:13:67:c6:dc:2d:c7:b9:58:91:36:b6:51:b6:16:
3a:2d:04:01:06:95:f7:2e:8c:aa:7a:4f:ab:09:ab:
b7:40:8f:f2:b4:9e:50:59:18:44:a4:ba:dc:48:1d:
bd:3d:92:33:95:52:1b:9d:1d:85:a7:a2:d9:74:5d:
17:fc:ef:48:8c:be:c1:44:1f:b0:51:e4:35:e7:76:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6A:F9:70:96:6A:83:AC:24:97:E0:22:22:ED:49:95:D8:EF:5F:CB
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/002215BE68C711F180D0CEFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.211.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:72:3a:72:b5:53:0e:9d:b2:a4:fe:26:03:1a:f1:ac:fd:09:
0a:2b:a8:60:01:2f:33:05:1d:a3:9d:3f:0f:5c:0c:fb:6a:a9:
68:60:f0:33:15:af:f4:fb:a4:78:8b:63:27:53:33:ab:15:4f:
70:90:2a:72:95:da:d8:f3:1e:fb:00:b4:46:e8:4e:b5:fb:df:
7f:1d:c3:38:61:84:90:a3:3e:ce:b1:ec:9a:a0:a4:e0:11:04:
20:87:de:c2:94:b8:8f:99:ec:b1:3c:01:f3:42:8c:13:3a:2a:
65:76:96:98:c7:27:27:55:b9:70:81:7a:d6:8a:de:cc:09:c0:
a5:8e:16:31:df:05:b1:9e:40:47:74:b5:e8:e7:62:bc:1a:6d:
06:d6:0e:8e:2c:18:8c:3d:55:2f:24:66:88:c0:41:5f:b9:f4:
84:01:c7:79:d2:f1:f4:9e:21:d6:b3:0a:18:97:97:cc:5d:d1:
ce:d7:d1:8f:f5:87:c2:4b:f0:b5:9c:28:bf:b9:6f:b9:c1:a1:
c1:41:dd:aa:d0:59:91:d0:f3:a8:64:50:42:5e:a1:4f:6c:2f:
bd:5f:8e:85:2c:2f:df:17:d8:a9:9c:76:5c:58:b3:7b:b4:95:
50:fc:dd:ab:c9:a8:62:64:72:f5:c6:53:15:6c:16:f4:39:0a:
00:a0:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:27 2026 by rpki-client