Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/2BF911C47C3111F1B56C500DCF1D38B0.roa
File: 2BF911C47C3111F1B56C500DCF1D38B0.roa (raw, json)
Hash identifier: opGWqfZjzu2YmLnNTjfxQmjr4TL4DAvyx0NFJ1joiUM=
Subject key identifier: F7:F8:F6:66:8D:D5:57:AF:F0:10:3F:E7:40:14:CC:98:AC:C8:40:46
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 0875
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/2BF911C47C3111F1B56C500DCF1D38B0.roa
Signing time: Fri 10 Jul 2026 07:30:06 +0000
ROA not before: Fri 10 Jul 2026 07:30:01 +0000
ROA not after: Tue 30 Apr 2030 07:30:01 +0000
asID: 16800
IP address blocks: 168.142.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165 (0x875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 10 07:30:01 2026 GMT
Not After : Apr 30 07:30:01 2030 GMT
Subject: CN=6a509f7e-994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:de:01:e5:d3:0a:b9:be:df:66:4c:45:cc:
56:f2:90:9e:62:7f:2f:02:22:a8:ba:0b:a9:fe:89:
63:60:c8:18:01:4b:29:89:90:0c:a1:4e:e1:18:ca:
6a:a0:5b:84:f2:e8:41:a8:83:0b:b9:8e:39:ed:48:
57:96:25:4a:47:16:5f:af:17:eb:8a:62:a7:57:ad:
5a:3b:6d:1e:17:f3:da:fb:e9:03:6e:17:8c:a8:24:
63:70:a2:57:f6:1b:ee:e3:27:78:61:28:2c:a4:60:
ea:e4:f3:0c:0a:5c:69:d5:6c:d7:21:9f:d7:26:d0:
20:30:97:82:a3:7d:14:ab:ed:95:54:8e:11:88:9e:
91:b1:23:39:6e:07:d9:ad:20:fe:01:c4:45:65:8e:
5d:0d:f8:f4:e3:66:bc:c0:3f:23:f9:2b:b3:85:d8:
c4:3b:60:42:8a:ee:ab:69:84:86:1a:41:8a:fd:33:
e9:2f:da:da:05:03:07:fa:0a:47:03:24:68:10:bd:
a3:a4:1d:ff:91:1c:28:a5:70:81:46:fb:b4:b2:09:
69:f5:0e:b9:b0:ed:ae:5f:62:21:c3:2d:d6:e7:a7:
f3:ac:f4:ce:f7:71:a8:0a:f8:bc:df:53:60:3f:53:
16:01:e8:4f:8a:3b:aa:aa:01:d7:07:e8:37:31:ca:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:F6:66:8D:D5:57:AF:F0:10:3F:E7:40:14:CC:98:AC:C8:40:46
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/2BF911C47C3111F1B56C500DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.142.131.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:47:0f:4c:59:52:7f:16:a4:3b:7c:68:be:a2:4c:0f:5d:70:
80:56:56:22:e9:84:53:b7:cf:7c:8d:e6:eb:6f:2d:04:b0:28:
85:a2:25:33:8d:64:c4:61:9b:e3:88:bb:2f:20:60:e8:bc:9c:
7e:44:b3:18:bc:96:9e:d1:9b:bf:d0:75:23:20:25:1c:c3:d4:
df:b5:e4:8e:d9:9d:f0:d6:91:83:0e:89:ea:05:bc:46:01:1d:
0a:9a:24:bc:9c:c9:0f:c1:10:e7:ba:9a:67:c8:11:33:d7:5a:
48:e7:c2:3f:d0:25:9e:9b:ba:e5:e8:65:75:28:93:e7:23:d0:
fd:f1:95:4c:6a:cd:d2:8f:00:d8:3b:77:36:0a:06:96:1d:9b:
90:34:2b:80:b1:89:75:c5:1e:d9:31:dd:cc:6f:75:9f:13:3d:
dd:7a:e5:da:c9:8f:a8:a1:75:eb:12:a9:01:d7:7b:0b:38:ff:
93:ab:92:8d:ab:30:80:fb:fd:43:10:98:fa:1e:a7:df:cb:8f:
81:30:a5:bd:08:cf:0b:3d:64:cd:b7:54:4c:bb:b7:34:69:a9:
57:a6:25:79:44:f6:19:25:1f:5c:9e:43:4b:ac:bb:23:21:34:
46:3b:34:fa:ef:61:cf:5a:d4:14:d5:2f:bd:b6:c1:7e:7b:38:
70:d0:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:06:12 2026 by rpki-client