Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/E3CC02928BFA11F19DE0CB0ECF1D38B0.roa
File: E3CC02928BFA11F19DE0CB0ECF1D38B0.roa (raw, json)
Hash identifier: /5dwb27y0IdwkPjkO4KiyDkBMyA4REL5xPm0ATHtFLQ=
Subject key identifier: 7B:89:26:D7:27:F7:56:C3:B4:E2:A0:AC:87:E2:E6:0C:DF:AE:5A:15
Certificate issuer: /CN=F363C3E1AR/serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
Certificate serial: 0A81
Authority key identifier: FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Authority info access: rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/E3CC02928BFA11F19DE0CB0ECF1D38B0.roa
Signing time: Thu 30 Jul 2026 09:41:51 +0000
ROA not before: Thu 30 Jul 2026 09:41:47 +0000
ROA not after: Fri 31 Mar 2028 09:41:47 +0000
asID: 327892
IP address blocks: 45.221.12.0/22 maxlen: 24
169.255.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2689 (0xa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C3E1AR, serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
Validity
Not Before: Jul 30 09:41:47 2026 GMT
Not After : Mar 31 09:41:47 2028 GMT
Subject: CN=6a6b1c5f-f318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:63:5d:ce:06:90:0e:89:59:4a:fe:3d:d7:
b4:66:2d:70:ad:4e:3a:b8:69:3c:81:e4:1f:18:19:
35:42:19:66:19:f2:48:d7:af:71:29:1f:05:8d:31:
69:e4:05:b9:e8:18:30:82:a3:27:17:4b:56:9d:c1:
9b:36:39:dd:f6:85:a3:3f:fe:a3:25:d9:77:c0:8a:
4c:d3:b5:83:84:f8:ab:b1:14:75:53:44:0a:bf:f1:
46:2b:8e:61:14:0f:f4:03:ea:ee:90:27:24:51:75:
8d:cc:d2:0a:fe:d6:06:76:13:f6:3b:0d:e0:97:9d:
e4:eb:00:34:d8:f5:50:85:df:a6:98:b6:29:7f:f6:
c0:04:89:2b:0f:f3:f9:1d:7c:4e:ac:c7:82:4c:42:
02:53:4d:ac:a1:ec:63:81:52:00:d8:6e:53:9c:4d:
7b:c5:14:5a:c9:ae:52:8d:ef:2c:55:13:e8:51:cd:
4d:41:5b:be:3a:5f:b1:1e:e3:26:9e:f5:b4:9a:ab:
45:cd:58:9e:da:34:70:96:7c:e1:e3:3b:81:9d:f8:
86:77:e8:2b:5a:21:25:92:e0:eb:2f:94:95:6d:f8:
bd:ed:6e:f4:1d:f1:f0:ab:d7:7b:c0:b8:b9:96:c5:
50:cb:f2:e1:fd:23:7b:9c:30:e5:f7:4d:57:eb:2d:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:26:D7:27:F7:56:C3:B4:E2:A0:AC:87:E2:E6:0C:DF:AE:5A:15
X509v3 Authority Key Identifier:
keyid:FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/E3CC02928BFA11F19DE0CB0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.12.0/22
169.255.216.0/22
Signature Algorithm: sha256WithRSAEncryption
23:44:36:d4:c4:91:92:78:a2:da:8f:ed:82:7e:67:b3:a3:a1:
aa:13:ba:0a:ea:a2:c1:40:f1:7a:ca:ea:67:9b:23:c4:de:fb:
6a:3c:29:63:58:d3:e0:03:3b:16:cc:9c:70:75:f7:65:e5:87:
76:96:ef:da:81:59:53:48:18:7c:aa:ac:f5:48:e3:ea:84:ba:
c6:91:af:bf:51:19:6a:6f:0e:5d:72:64:cf:68:d3:b8:9c:6d:
5a:3c:05:69:cc:7f:9e:86:e6:d4:72:6a:c7:da:dd:00:8d:22:
46:09:63:bf:2b:66:f2:cd:29:bb:c2:d1:29:07:e5:38:33:48:
86:24:53:7c:2d:03:22:fb:d9:b9:6e:08:a9:10:a9:b3:c4:1b:
39:be:92:1d:10:ee:3c:f7:e2:c1:1d:bb:98:b3:a5:0a:8d:2d:
27:9f:60:03:d9:38:04:f5:db:0c:4d:eb:8e:de:d5:54:f9:62:
a4:be:d1:f3:18:80:90:5d:43:c0:12:d7:9e:c2:fe:6f:40:e7:
a6:82:73:4a:15:95:60:bb:af:99:ad:06:c5:31:63:fc:82:6c:
31:99:85:cc:6a:5e:d4:c4:47:17:4c:76:92:71:0f:58:5a:ee:
01:66:bd:ed:da:99:aa:be:37:e7:14:59:8d:f7:bd:7c:2c:a5:
94:ae:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:12:12 2026 by rpki-client