Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/63C36E3C7FA711F1A3AB6010CF1D38B0.roa
File: 63C36E3C7FA711F1A3AB6010CF1D38B0.roa (raw, json)
Hash identifier: cpxY7MTwcZ4rCm+4PLpIjuOiKLrZezkOZjvhgUKx7fg=
Subject key identifier: 83:14:6C:14:A1:83:D6:86:1D:2F:5F:3D:9A:95:3C:88:D9:6C:96:87
Certificate issuer: /CN=F369B304AR/serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
Certificate serial: BF
Authority key identifier: 6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9
Authority info access: rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/63C36E3C7FA711F1A3AB6010CF1D38B0.roa
Signing time: Tue 14 Jul 2026 17:13:54 +0000
ROA not before: Tue 14 Jul 2026 17:13:48 +0000
ROA not after: Sun 14 Jul 2030 17:13:48 +0000
asID: 328049
IP address blocks: 164.160.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.crl
rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369B304AR, serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
Validity
Not Before: Jul 14 17:13:48 2026 GMT
Not After : Jul 14 17:13:48 2030 GMT
Subject: CN=6a566e52-c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:33:f7:f9:74:90:c7:ed:7b:3b:0f:20:3a:
e1:77:d4:ff:04:37:bf:d2:91:3e:08:f7:0d:39:9d:
ea:94:21:ec:85:5a:e0:e9:f9:6b:fa:ab:9d:2b:49:
d6:6c:9a:58:68:da:ba:a8:2e:08:c0:14:ca:41:7c:
97:9c:cb:89:b5:2b:25:2e:d0:4a:8a:3d:64:99:0b:
d1:66:33:d3:05:76:ef:78:14:a9:ed:3f:fd:e7:14:
f2:6d:d5:c6:87:8d:70:d8:a9:22:50:9c:d8:85:3b:
95:61:d0:52:37:29:01:4d:81:6d:52:50:71:df:22:
0e:43:99:ee:84:ab:be:ad:52:b9:10:7f:ab:ea:43:
ef:22:6b:2c:60:b8:4f:c9:c0:28:e0:22:3b:c0:d7:
ea:50:ab:d0:b5:54:b4:64:e4:1a:1e:08:5d:27:cb:
d8:29:75:b7:4a:20:82:21:a2:66:db:61:2c:0f:43:
c1:22:88:e9:27:70:cb:b2:af:de:01:ad:1d:e3:c0:
eb:3c:08:2f:7a:0b:5c:c0:17:6c:94:21:56:12:cb:
67:39:c3:6b:67:14:05:56:0e:e6:74:ef:08:7e:9c:
30:51:2c:83:c1:b9:2c:9f:d7:66:8d:d3:8d:6b:8d:
e6:8c:69:ca:63:be:2f:05:6e:e2:93:71:e4:a7:3e:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:6C:14:A1:83:D6:86:1D:2F:5F:3D:9A:95:3C:88:D9:6C:96:87
X509v3 Authority Key Identifier:
keyid:6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/63C36E3C7FA711F1A3AB6010CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.160.120.0/22
Signature Algorithm: sha256WithRSAEncryption
24:f4:35:ed:40:45:61:cb:c1:46:03:d9:b6:92:e0:db:a1:4a:
00:f5:8b:91:76:cc:29:f7:41:38:2e:7b:f3:a3:1a:87:75:6e:
4a:7a:62:b8:63:55:59:9d:00:8f:84:d9:a2:ce:0a:90:b1:0a:
1f:61:82:a8:27:4f:6f:f3:82:5f:df:1e:63:c2:00:69:1c:e0:
6c:aa:9a:95:1b:34:db:20:a0:ed:4f:43:eb:f2:cd:cf:8e:91:
94:85:3e:6f:86:b7:1d:fd:e7:b3:b2:97:c4:aa:32:08:4a:79:
52:4e:23:1b:1d:0d:d1:23:d1:1a:d2:2f:93:54:3d:49:11:52:
aa:c3:cc:52:4d:6d:b3:99:aa:d5:b7:86:da:8e:65:a2:57:6d:
f1:09:ad:fe:67:7c:60:72:c2:e1:4c:7d:c1:0a:dd:44:5d:0f:
fc:c1:a6:03:ad:ea:81:72:20:e1:74:9e:b5:f9:40:5e:4f:ae:
4d:83:76:5e:9f:b0:93:2d:36:cc:25:16:9f:15:7d:67:89:c7:
32:96:ba:5b:d3:95:05:07:ef:c4:0c:6e:78:d4:83:e0:5c:26:
68:ef:68:5a:44:99:79:2f:6f:41:84:e6:ac:fa:90:1a:9f:48:
c5:bc:5d:33:10:ec:6a:df:e3:fa:2a:b7:36:6c:c5:e4:3a:2a:
35:1c:00:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:12 2026 by rpki-client