Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/EB9A40F6876D11F18C949AC0CE1D38B0.roa
File: EB9A40F6876D11F18C949AC0CE1D38B0.roa (raw, json)
Hash identifier: bJKsXLMQt8rdTX8UmsGxka3X6/PGAj+R1BOTCf8x4As=
Subject key identifier: E7:C8:E0:A3:D0:9B:DA:31:7C:65:E6:0F:13:09:8D:3F:71:13:F3:68
Certificate issuer: /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial: 0527
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Authority info access: rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/EB9A40F6876D11F18C949AC0CE1D38B0.roa
Signing time: Fri 24 Jul 2026 14:42:40 +0000
ROA not before: Fri 24 Jul 2026 14:42:36 +0000
ROA not after: Thu 24 Jul 2031 14:42:36 +0000
asID: 206283
IP address blocks: 45.222.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Jul 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Validity
Not Before: Jul 24 14:42:36 2026 GMT
Not After : Jul 24 14:42:36 2031 GMT
Subject: CN=6a6379e0-0f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:11:ac:0b:30:2d:84:bd:a4:91:20:23:27:
0f:cb:f4:f7:02:fb:dc:55:59:5b:ff:ed:3b:97:bf:
60:3e:ce:2a:89:51:e6:eb:94:93:f9:5b:49:15:9f:
e4:74:1d:f8:47:b3:d3:f4:ae:a9:ca:3e:4b:42:dd:
76:8c:e6:49:82:5e:3c:58:b6:31:fa:f7:2a:df:bb:
e0:fa:5b:8c:a6:c7:bc:a0:18:b1:45:e7:a8:79:ff:
ba:a4:c9:93:63:25:e8:2d:2c:58:6c:bb:ce:e4:1e:
e3:d1:a1:9f:43:53:f3:72:41:7f:38:23:48:44:08:
e1:b2:50:f8:2c:e3:de:9b:68:01:d6:e4:88:47:db:
c5:92:9e:88:df:d5:e8:a9:f8:9c:6a:82:80:46:50:
8e:0b:c4:51:41:a2:bc:1b:00:d6:82:f9:6d:ad:1e:
0f:d5:64:2b:34:d8:18:00:62:5f:de:3e:f7:f2:a7:
cb:a4:22:b4:b7:6e:5c:40:16:9e:66:ab:a8:11:e9:
31:a0:f7:24:66:a4:0f:46:a7:51:e6:78:6e:a0:cd:
98:e7:2e:ff:03:f6:94:ae:54:47:55:6b:2f:21:7c:
e9:ff:a3:66:45:10:5e:26:c4:73:6b:7a:b9:7f:3f:
22:46:1f:e4:5b:70:a6:92:f9:a9:c6:5c:bd:91:b7:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:E0:A3:D0:9B:DA:31:7C:65:E6:0F:13:09:8D:3F:71:13:F3:68
X509v3 Authority Key Identifier:
keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/EB9A40F6876D11F18C949AC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.222.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5d:55:07:17:36:ed:b3:bd:ed:f3:6a:c0:e1:5e:da:04:3a:
ff:9a:28:a7:2e:af:f1:6b:71:33:53:77:c2:62:e1:22:7d:b9:
6c:36:a8:b4:69:63:d7:2b:31:15:bc:ae:55:ff:aa:ea:1e:79:
53:f9:61:a0:ae:42:78:09:f3:3f:56:73:ea:3e:26:dd:01:cd:
5b:73:83:63:9f:56:5b:bb:7a:f0:7d:a0:91:2d:6f:84:a9:2f:
39:f3:ce:c3:99:85:8f:4e:cb:7c:4b:df:eb:8f:0b:67:ac:0b:
4f:c0:08:ba:c0:f8:a8:45:dd:da:7e:d0:29:09:fa:7a:8b:15:
85:ac:39:b5:e4:46:11:4a:65:d8:41:3b:95:6c:fc:87:0f:10:
61:00:01:94:ba:b3:aa:a7:6f:7b:86:72:0b:55:ee:0a:55:d2:
4c:8e:1c:ed:94:7e:d3:54:6d:c2:62:43:e7:13:b2:24:d5:04:
61:97:51:89:3c:ce:a9:b1:fa:00:7d:8a:47:bc:2e:a6:4b:6f:
35:d8:3b:e4:f8:ff:57:a0:d1:be:d6:d7:5b:0d:02:43:25:a1:
19:e0:bb:55:8f:b6:9c:dc:d8:e5:9a:35:a5:4c:a5:2a:ea:f1:
39:06:41:12:89:9d:37:74:7c:60:ec:5b:78:5b:93:79:1b:33:
84:08:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:05:22 2026 by rpki-client