Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/8651F3548EFE11F18C8872F2CE1D38B0.roa
File: 8651F3548EFE11F18C8872F2CE1D38B0.roa (raw, json)
Hash identifier: s2JmDXus50oLEEaUALD5HleYNY+S5t45bCkpw9Qi/PU=
Subject key identifier: 29:8D:6E:AB:AB:0E:D1:83:E7:64:19:77:3C:04:F5:A1:61:FA:FE:17
Certificate issuer: /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial: 0538
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Authority info access: rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/8651F3548EFE11F18C8872F2CE1D38B0.roa
Signing time: Mon 03 Aug 2026 05:45:25 +0000
ROA not before: Mon 03 Aug 2026 05:45:21 +0000
ROA not after: Mon 28 Feb 2033 05:45:21 +0000
asID: 37532
IP address blocks: 155.0.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Validity
Not Before: Aug 3 05:45:21 2026 GMT
Not After : Feb 28 05:45:21 2033 GMT
Subject: CN=6a702af5-117f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:8e:96:8a:3a:7e:b4:b7:13:db:fe:46:88:
b7:87:e6:53:14:8d:8c:9d:e7:56:75:df:bc:38:2e:
71:63:d1:db:8a:fc:cb:32:93:2b:07:12:74:d2:18:
95:a3:b8:ed:3b:33:11:77:2f:fb:14:48:ac:df:bb:
ad:f8:9e:05:ad:f5:8c:41:a9:db:7c:2d:b0:ce:f0:
26:b8:36:5c:b0:45:4e:5b:ab:4f:4e:bc:08:fd:b9:
c4:4b:ec:59:4e:ee:cd:3c:9f:7d:0d:2a:c9:ed:3f:
a4:92:9b:a7:26:62:0e:c8:fd:c0:22:22:37:e1:9d:
4b:16:50:44:a6:e7:b1:1b:2a:a1:25:69:7e:70:ba:
85:bf:07:67:1f:ea:c1:d3:90:90:d4:65:b6:00:6a:
76:0a:ef:30:98:d1:f4:22:eb:35:72:95:e1:cb:46:
35:95:07:53:0c:bb:47:58:c8:a6:76:ac:19:1b:a0:
67:56:30:84:92:16:ff:ab:43:57:b8:2c:62:59:7f:
70:08:b1:62:e2:f5:07:6c:a0:91:c0:da:58:d2:6d:
2b:09:3d:ee:df:06:f6:c1:89:62:b5:5d:27:7c:89:
c0:5b:d2:4c:24:b5:be:6d:a0:58:4a:3a:b2:e4:3e:
2c:a0:e9:6e:9c:d2:97:3f:e0:0b:e5:65:5f:50:45:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:6E:AB:AB:0E:D1:83:E7:64:19:77:3C:04:F5:A1:61:FA:FE:17
X509v3 Authority Key Identifier:
keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/8651F3548EFE11F18C8872F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:fc:47:83:82:df:85:ab:3e:7d:2b:56:85:51:11:02:b1:8f:
4e:fb:9c:14:1d:83:7a:84:ff:b3:f5:02:3d:1f:d6:f3:9f:45:
a2:db:0b:5e:56:b0:7e:27:88:ad:59:46:8f:60:7a:6f:9b:3b:
82:b3:8d:47:06:0b:17:2a:cc:71:f2:57:f6:68:bf:85:d0:a4:
19:83:34:79:e6:95:9a:08:f9:ee:b7:21:d3:52:6a:7b:35:92:
50:9b:65:3e:8a:e0:70:6a:bf:f5:b7:12:2c:42:a6:34:7b:24:
b0:df:7a:d5:24:bc:7f:1c:47:2d:d5:fd:cf:6b:9b:2c:f0:61:
ad:50:f8:07:41:80:cc:4d:ea:06:f2:04:d2:9f:7c:e7:8c:ec:
45:b3:44:e5:40:25:51:cc:3e:26:79:1f:fb:ed:c1:03:4d:3d:
80:51:76:aa:79:a9:0f:05:4a:70:8e:55:f8:f4:ab:46:45:b1:
0f:5b:bb:e2:99:33:ea:aa:74:8d:7d:bf:5c:b2:4b:48:a8:27:
11:40:d5:d0:07:59:d1:92:d4:c3:32:81:c1:25:40:5f:b7:10:
07:33:e0:7c:b3:e9:2e:1d:fe:cd:c9:64:3e:97:ad:88:01:05:
e4:a1:c9:af:65:2f:a6:e8:19:7a:5a:9f:55:dd:41:6f:b3:84:
8c:1c:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:07:25 2026 by rpki-client