Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/9C9DC7168B7311F1872835CCCE1D38B0.roa
File: 9C9DC7168B7311F1872835CCCE1D38B0.roa (raw, json)
Hash identifier: XxAqojkDc3dXUYiEKlePdg+So/9chzsgp0ShtssHsoE=
Subject key identifier: ED:F9:1D:4C:01:A4:A8:03:46:AA:62:95:F1:4B:AC:E0:92:20:26:60
Certificate issuer: /CN=F363EA80AR/serialNumber=A3AAA0A9BA55CC7DD5F3C9DE77E99D75674094E2
Certificate serial: 04D6
Authority key identifier: A3:AA:A0:A9:BA:55:CC:7D:D5:F3:C9:DE:77:E9:9D:75:67:40:94:E2
Authority info access: rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/9C9DC7168B7311F1872835CCCE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:33:29 +0000
ROA not before: Wed 29 Jul 2026 17:33:24 +0000
ROA not after: Tue 16 May 2028 17:33:24 +0000
asID: 19711
IP address blocks: 69.63.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.mft
rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AR, serialNumber=A3AAA0A9BA55CC7DD5F3C9DE77E99D75674094E2
Validity
Not Before: Jul 29 17:33:24 2026 GMT
Not After : May 16 17:33:24 2028 GMT
Subject: CN=6a6a3969-4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:7a:87:c0:e0:fe:b4:59:e6:e4:4d:71:fa:
f8:49:c6:4b:85:f3:65:67:de:39:bb:34:2f:ea:3f:
5d:6a:1a:93:a2:c6:f9:b9:b6:cd:2f:6f:70:c9:ee:
a4:61:d9:09:ea:0c:6f:5c:49:b7:47:68:1b:77:61:
c2:0a:d9:15:30:aa:33:80:ee:f8:de:64:eb:ac:11:
a5:ce:fc:ad:f8:b8:10:d7:76:19:56:1c:87:15:6a:
40:77:98:43:4f:32:50:a8:8f:fc:30:e7:8a:6b:2d:
a9:bc:b9:3a:07:23:06:5a:58:2e:c8:73:27:5d:b7:
71:90:a3:8a:98:bd:2b:b4:4c:cf:15:8a:9f:11:23:
29:83:d5:de:b7:78:22:d3:a3:77:b9:e8:bd:74:9a:
91:9c:ca:e1:61:30:15:f7:ad:6a:e7:e6:16:1d:dd:
4c:ec:aa:4a:e7:df:f9:77:11:36:95:0a:f4:b1:24:
32:3f:c8:e1:9e:bd:95:97:a2:02:e6:b2:64:07:f8:
4d:65:98:ae:ed:80:da:ff:4f:3a:1e:c2:25:95:c5:
df:bb:a1:6c:49:a9:84:42:4d:32:62:30:19:40:dd:
8c:57:95:c4:1b:c9:45:c7:c5:b6:01:bc:37:5a:af:
3a:c7:54:48:28:16:bb:45:f2:95:6f:bf:e2:75:58:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:1D:4C:01:A4:A8:03:46:AA:62:95:F1:4B:AC:E0:92:20:26:60
X509v3 Authority Key Identifier:
keyid:A3:AA:A0:A9:BA:55:CC:7D:D5:F3:C9:DE:77:E9:9D:75:67:40:94:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/9C9DC7168B7311F1872835CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.63.64.0/20
Signature Algorithm: sha256WithRSAEncryption
27:88:03:e4:2e:bc:9f:3a:72:d5:14:b6:74:be:cf:e4:55:ff:
dc:9e:5b:13:38:3e:b2:3b:75:f2:82:68:01:4c:e8:f7:cf:70:
74:ff:cd:e0:02:33:5d:79:d8:c6:1b:d0:d4:88:99:ad:6f:31:
df:b5:bc:bf:17:d1:ea:26:e9:65:e5:36:17:4d:f4:dc:9e:38:
ef:4a:30:0f:9d:10:e4:78:74:f5:cb:36:7e:e7:d8:9e:b0:21:
7d:fb:f4:51:f4:b8:ce:dd:f7:61:69:c2:67:b5:d6:7d:eb:c7:
4a:cf:96:b2:67:2c:53:0b:f4:f0:7f:53:22:fe:5b:be:80:66:
af:21:dc:2c:38:6e:92:a8:ea:19:56:46:ca:e2:24:15:24:7c:
13:cd:23:ac:e3:81:55:a0:3a:91:02:4a:62:82:99:bc:0a:08:
80:94:25:7b:f1:50:a6:84:70:f5:e9:78:2e:49:cc:6b:e2:94:
cf:39:0f:1b:ea:23:95:c3:06:92:a7:26:30:88:37:b3:17:34:
73:55:14:91:55:13:f5:89:29:31:63:0d:eb:1c:f8:b3:57:fa:
14:69:c3:a4:69:3b:84:93:71:c4:df:e0:8e:89:b4:58:5a:77:
2f:b5:26:9f:70:b5:bb:93:03:7e:9e:e3:2e:f2:ef:05:97:50:
3b:8f:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:29:00 2026 by rpki-client