Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/658663044E9D11F1B9523EEDCE1D38B0.roa
File: 658663044E9D11F1B9523EEDCE1D38B0.roa (raw, json)
Hash identifier: N/DWLujuKv3pb5Dgqai2QU5o1RyKed2CARH+avVSMT8=
Subject key identifier: AF:74:78:41:5A:12:A7:3C:C6:B9:2F:3F:FB:B7:AD:9E:63:87:E7:9B
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 04D8
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/658663044E9D11F1B9523EEDCE1D38B0.roa
Signing time: Wed 13 May 2026 07:28:55 +0000
ROA not before: Wed 13 May 2026 07:28:50 +0000
ROA not after: Tue 31 Dec 2030 07:28:50 +0000
asID: 15964
IP address blocks: 165.211.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: May 13 07:28:50 2026 GMT
Not After : Dec 31 07:28:50 2030 GMT
Subject: CN=6a042837-d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:e5:d7:55:3c:13:e2:01:0d:86:49:1d:77:
2f:16:f5:cf:0b:fb:6b:75:97:1d:60:41:38:72:62:
12:7b:91:ab:ca:49:a4:89:10:cc:5d:26:e7:d3:82:
f9:61:ed:a3:1a:22:07:ca:29:2e:71:ab:d6:97:88:
cf:d6:81:93:41:ba:ea:2e:35:f3:b5:7e:c8:8f:75:
d3:8c:39:4b:7e:9e:cb:ad:65:68:d1:2c:60:d7:f2:
68:d6:f3:7f:b9:c7:5e:1f:76:b9:67:e9:9b:7e:75:
65:f1:45:a6:a5:e5:02:fa:7c:0e:dd:95:9b:69:f4:
d6:a0:59:2e:26:2c:d3:d0:81:75:8d:a5:3e:fd:17:
9c:98:29:4a:9e:96:fd:00:ff:95:45:cb:17:cb:81:
97:55:70:ef:98:61:da:46:dd:0c:e7:0b:d7:86:b2:
27:de:fb:d9:07:ef:ff:77:ab:9d:ff:b2:b5:37:38:
11:ed:e4:dd:99:ae:23:6f:19:98:06:38:04:6e:26:
b4:f4:3d:de:ec:8f:54:15:70:f0:95:9c:dd:48:b0:
56:1c:32:08:bb:1c:3c:88:af:d2:18:95:e2:ba:5c:
19:e6:10:0c:63:6e:38:59:73:d9:e4:a4:70:c3:2d:
d2:a7:0b:72:e0:92:9d:bf:04:24:99:55:f6:3c:38:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:78:41:5A:12:A7:3C:C6:B9:2F:3F:FB:B7:AD:9E:63:87:E7:9B
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/658663044E9D11F1B9523EEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.211.33.0/24
Signature Algorithm: sha256WithRSAEncryption
36:85:2c:d4:83:72:28:22:37:e6:a7:ab:3c:5d:75:4f:cc:95:
c0:fa:21:1b:5a:a2:6e:93:fd:5c:71:58:57:17:45:b8:eb:59:
d3:9d:e9:1b:f8:64:2f:ff:45:81:66:47:54:dc:5f:e6:8b:a7:
84:80:75:98:fd:d5:cf:a9:df:92:e8:be:ec:66:9a:5e:76:30:
db:a3:9b:35:a7:cd:5f:4c:fe:b5:94:cc:7e:da:94:43:95:6a:
98:13:99:67:e0:73:40:bd:2f:ba:e1:c0:be:46:b5:4b:a4:17:
c6:60:5d:3b:95:25:d6:ec:d8:b6:64:21:da:26:bf:14:92:84:
d3:50:38:cc:62:af:ec:44:b6:87:e1:d7:41:05:94:56:91:fd:
85:25:38:dd:49:83:97:3c:2e:2f:78:cc:ac:2b:85:35:b8:19:
62:8c:6e:31:d0:58:b7:c2:3c:c1:29:8a:a6:38:1d:82:a2:a3:
36:26:eb:5a:2c:b9:a6:32:86:63:fe:ae:54:be:34:64:f4:52:
16:d3:e6:36:95:e9:48:cc:82:d8:ec:75:03:6d:d6:9b:67:9e:
3b:05:ac:47:ca:31:15:b9:66:cb:7d:4a:16:24:c5:e9:13:fc:
b6:a5:63:18:c8:38:de:30:dc:65:2d:c4:8d:f7:61:57:63:21:
e7:83:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:14:58 2026 by rpki-client