Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/7FAE258E8C0811F1954847E1CE1D38B0.roa
File: 7FAE258E8C0811F1954847E1CE1D38B0.roa (raw, json)
Hash identifier: gYLuwqv/Jon5ookF4+rJrsGD0ySTLCd3p+wokkaSSpA=
Subject key identifier: D5:28:B5:C8:E7:36:55:88:BA:20:CC:EE:41:C7:B0:1B:B0:EA:97:F9
Certificate issuer: /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial: 0EDB
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Authority info access: rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/7FAE258E8C0811F1954847E1CE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:19:16 +0000
ROA not before: Thu 30 Jul 2026 11:19:12 +0000
ROA not after: Thu 11 Nov 2027 11:19:12 +0000
asID: 7020
IP address blocks: 165.233.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3803 (0xedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Validity
Not Before: Jul 30 11:19:12 2026 GMT
Not After : Nov 11 11:19:12 2027 GMT
Subject: CN=6a6b3334-826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:9f:8b:11:ff:da:f6:6b:5c:48:bc:d2:0a:
78:97:3b:39:c1:d3:87:d1:0e:ca:12:7b:3e:07:3c:
d7:b9:48:40:af:ec:14:2d:62:10:7c:3e:30:1e:89:
cd:60:56:84:15:71:9a:23:15:ba:aa:bb:5f:70:d6:
19:2c:24:4a:d3:10:d7:9c:d7:af:fb:59:67:83:e2:
40:3f:ac:24:33:fe:0b:2b:a8:7b:3a:34:66:80:f1:
da:0c:14:ec:a6:a8:55:97:08:35:19:65:93:c1:a9:
db:2b:ed:b4:dc:cb:63:e3:dd:cd:21:e6:88:86:7b:
23:4c:4c:3a:ae:04:2c:37:1d:08:a3:9d:f7:d4:02:
ae:7e:93:4a:a6:10:80:27:c9:36:59:c0:64:ab:1b:
99:c8:28:0b:0f:bc:58:cb:05:a2:d3:3c:2b:fe:3f:
39:94:ef:92:30:54:88:41:1f:68:39:66:46:4a:1e:
1e:c0:28:4f:e4:9a:8c:be:be:3f:f3:d7:15:f6:1d:
65:de:8c:c5:a9:0a:86:b7:74:cc:17:48:1e:70:9d:
5f:b1:71:2b:d9:db:22:d4:51:67:3e:43:e2:9b:81:
81:2c:be:0f:92:7a:d8:3c:ba:a9:10:fc:01:44:66:
b0:4e:36:41:64:d6:74:d5:26:dd:b0:67:eb:67:b3:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:B5:C8:E7:36:55:88:BA:20:CC:EE:41:C7:B0:1B:B0:EA:97:F9
X509v3 Authority Key Identifier:
keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/7FAE258E8C0811F1954847E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:42:68:66:9c:a8:3a:e5:6f:fe:15:ba:cb:b1:b7:4d:94:9a:
e2:02:11:85:65:14:14:e5:53:e9:d4:28:e1:d8:6d:56:25:e1:
f1:85:d6:a1:0c:35:be:0c:47:c1:b3:a4:0e:38:53:80:f0:a9:
43:72:5c:e4:94:f4:06:c2:25:d9:8f:fc:d5:10:4a:7f:3d:7d:
ce:17:3c:0b:8d:38:89:48:16:d9:80:f7:80:80:9c:2a:42:3c:
9f:25:e6:93:d5:90:bd:e4:87:03:02:32:eb:d9:71:ee:2e:bd:
8d:2f:b3:ec:36:0d:7f:46:a9:71:49:a2:b2:4f:13:42:db:45:
61:ba:0b:ec:00:bc:fb:cd:98:e8:c7:70:cc:1e:fe:25:2b:d9:
30:79:06:38:14:6e:eb:ad:10:35:f3:33:0e:d1:4d:5a:90:12:
ec:86:ae:8c:d2:55:bb:78:02:b9:2f:1e:9a:51:ff:01:69:d8:
f8:9b:dc:a4:44:1e:2a:5e:ee:c9:8f:4e:88:fd:e3:56:e6:38:
0d:1a:9d:e9:af:7b:d7:86:d2:bb:33:8d:4c:93:44:9c:5e:85:
9f:87:f0:2a:ab:8f:91:1d:b4:9e:ec:83:4d:34:6b:fc:d3:19:
4c:3d:e4:32:d2:e0:79:17:6c:1c:bf:02:78:be:2f:1c:51:69:
b0:ac:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:12:12 2026 by rpki-client