Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/875A2E2860AB11F1B54351C5CE1D38B0.roa
File: 875A2E2860AB11F1B54351C5CE1D38B0.roa (raw, json)
Hash identifier: ivxFjeduGSxxhWdAOPw6gvRhK1fIbKwK86DvK7nxOdw=
Subject key identifier: B2:AD:45:86:01:8E:28:92:FE:10:CD:71:21:A9:51:22:C8:A5:50:85
Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial: 05D5
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/875A2E2860AB11F1B54351C5CE1D38B0.roa
Signing time: Fri 05 Jun 2026 06:55:25 +0000
ROA not before: Fri 05 Jun 2026 06:55:20 +0000
ROA not after: Wed 31 Dec 2042 06:55:20 +0000
asID: 23889
IP address blocks: 202.123.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Validity
Not Before: Jun 5 06:55:20 2026 GMT
Not After : Dec 31 06:55:20 2042 GMT
Subject: CN=6a2272dd-e423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:ee:f2:5d:d7:8a:3a:c0:6d:b7:69:e3:26:
3c:30:0a:84:f2:ab:5b:e7:0c:fc:75:64:ab:0f:59:
5b:41:17:a0:3a:28:39:0c:53:7c:ef:b5:1a:b0:4b:
d0:e5:0f:dd:5f:63:c0:6f:aa:ae:52:6c:b9:78:9d:
db:92:13:13:4e:96:81:aa:7e:57:bd:bd:64:f8:a6:
ec:f1:0a:9f:e1:5e:5b:ba:db:93:d9:18:33:28:fc:
0e:48:d1:7c:c0:66:4a:e0:ae:73:65:36:ed:d0:1f:
aa:e7:9d:1d:ef:47:4f:ed:29:41:28:b2:cb:72:d7:
60:fb:c4:20:a8:bd:4b:5b:9c:11:85:ba:7b:5d:90:
74:24:1d:16:43:98:b3:18:8b:d8:2b:c5:37:7d:dc:
2a:f6:8f:d4:bc:01:37:83:ec:c6:fe:02:1a:12:b9:
4f:2d:1d:71:89:72:68:17:fb:07:c6:41:34:de:c2:
a5:12:21:d6:2f:4a:fb:d5:67:a2:90:62:1c:bc:39:
ae:f6:15:9a:77:cc:69:ab:dd:41:d5:37:a4:0a:91:
f1:cc:e6:58:36:09:bd:fa:80:eb:f4:0f:b2:91:43:
25:d1:e7:64:c7:84:ef:c2:48:30:21:1a:47:bd:c8:
53:ad:9b:c7:64:6d:67:61:c9:31:5f:1a:59:5f:e5:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:45:86:01:8E:28:92:FE:10:CD:71:21:A9:51:22:C8:A5:50:85
X509v3 Authority Key Identifier:
keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/875A2E2860AB11F1B54351C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.123.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:0a:f7:3b:85:b5:3d:cd:c8:35:82:61:4d:97:cf:ea:7f:50:
b3:78:8a:e8:5b:e6:d7:1e:3f:aa:00:40:a1:01:01:da:d5:8d:
e1:88:1e:2c:c9:89:b2:97:93:b4:bc:4e:5d:e8:ed:44:c5:57:
f1:38:c7:14:ea:62:b4:8d:63:44:c0:e4:87:9b:e7:47:f2:21:
82:79:c3:52:a5:05:99:55:51:35:6b:6f:3e:85:c3:cb:03:4d:
f9:e2:22:8c:d6:93:33:57:c1:a8:61:9a:c6:ba:c6:f8:bf:e6:
e8:21:aa:2f:8b:15:27:0a:aa:f0:26:02:73:b0:b4:6a:e8:ce:
86:5f:d1:58:c5:04:89:be:53:7c:51:8c:af:ef:4a:e8:38:9a:
ea:dd:2b:08:18:8e:6e:de:46:6c:2a:ce:bc:5b:cb:53:eb:48:
e9:42:af:2a:9e:31:e5:38:56:fc:2b:40:c8:6b:cc:f0:d2:56:
f7:7a:35:90:bf:98:92:5b:83:17:f6:95:bc:ec:cb:bf:35:37:
f9:e6:b6:78:07:70:22:6b:82:a8:2e:c0:cb:24:8a:fa:af:af:
fa:5f:ce:ce:76:69:32:4f:5b:8f:d3:6c:05:a2:d5:21:41:29:
d9:5e:1e:ab:82:9d:45:8b:d2:14:8b:18:79:18:3e:b8:5f:b4:
d6:40:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:28:39 2026 by rpki-client