Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/3EB5EBD85F2C11F1937F70A8CE1D38B0.roa
File: 3EB5EBD85F2C11F1937F70A8CE1D38B0.roa (raw, json)
Hash identifier: DnXDQ8RvUP35TDhIZyMT4JxBRezG9MBgT7uMLwmeuuk=
Subject key identifier: 9D:98:23:5F:C3:EE:35:26:D2:B8:15:C4:18:34:C9:50:58:6B:54:F0
Certificate issuer: /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial: 04AB
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/3EB5EBD85F2C11F1937F70A8CE1D38B0.roa
Signing time: Wed 03 Jun 2026 09:11:46 +0000
ROA not before: Sun 28 Jun 2026 09:11:42 +0000
ROA not after: Sun 24 Jun 2029 09:11:42 +0000
asID: 17400
IP address blocks: 196.29.192.0/20 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362CE41AF, serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Validity
Not Before: Jun 28 09:11:42 2026 GMT
Not After : Jun 24 09:11:42 2029 GMT
Subject: CN=6a1fefd2-1bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:03:c1:10:aa:f1:b7:d7:1c:0d:84:6e:81:
5a:0f:ba:6e:d3:db:98:9a:82:c0:a9:a9:9b:bf:0a:
f9:8d:72:7d:81:8a:d1:9c:c0:59:d4:31:fd:90:bd:
6e:57:a5:8a:89:f4:35:70:16:5b:fe:f6:0f:c5:be:
3a:5d:29:df:0b:6f:54:05:e3:e6:32:24:98:58:95:
47:97:2d:81:52:07:f3:ff:a6:d1:74:7c:7b:66:ab:
e2:d7:68:5a:fb:31:06:0d:4e:d6:e7:5c:e1:6d:44:
68:21:b7:79:fa:36:d3:3a:fd:af:6a:df:00:a9:7d:
9c:a9:52:c3:57:29:2d:cb:6e:74:73:f2:e8:ea:2f:
c6:5f:e3:26:64:06:5e:21:a8:94:97:f7:a1:a9:0c:
42:c6:0d:d6:07:15:1f:8a:4e:fd:d6:2e:da:1f:25:
de:49:77:36:9d:11:2a:1c:da:26:ae:a7:ac:24:60:
7e:f0:96:bc:6e:1f:0d:0a:24:86:b8:61:38:fc:4f:
4c:44:87:50:48:fd:c1:64:91:52:3b:d4:0f:41:80:
4e:b1:77:5d:45:13:45:b1:ed:ef:e4:01:e7:46:11:
a0:7a:84:e4:bd:84:4b:5c:9f:bf:f9:0c:5c:00:21:
b4:b5:59:fa:6c:24:e4:76:ec:ac:99:46:f9:fa:73:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:23:5F:C3:EE:35:26:D2:B8:15:C4:18:34:C9:50:58:6B:54:F0
X509v3 Authority Key Identifier:
keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/3EB5EBD85F2C11F1937F70A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.29.192.0/20
Signature Algorithm: sha256WithRSAEncryption
51:c3:4d:f9:9d:e7:7d:85:2f:40:22:e5:82:48:d5:fe:36:8f:
f6:df:5a:db:db:83:5d:5c:0b:6d:59:bd:37:2d:87:44:46:43:
c1:13:fa:15:3c:90:19:5d:73:07:b7:8d:0a:ad:08:c8:7e:12:
b1:96:df:a0:54:73:d9:4e:c5:c2:ec:a5:2c:26:bf:23:fc:f5:
44:5f:0f:c3:12:e6:8c:a8:55:b5:87:ba:8e:bc:05:0c:7a:37:
8c:36:34:d7:ce:5b:1f:01:99:92:dc:04:90:2f:88:29:0e:52:
92:95:14:5c:87:cf:74:72:37:c5:7d:9e:85:8d:e3:ee:e0:b1:
c0:6f:94:ac:74:30:c3:0f:34:a5:de:05:a9:82:ca:9f:fa:c6:
12:58:2b:2e:51:a0:34:fb:94:26:9b:79:7f:45:7d:2b:72:b1:
de:65:ec:2b:08:ab:92:ea:c4:27:a2:d8:32:25:d2:20:c7:73:
fd:8e:a3:c1:68:c1:41:69:48:7b:9c:72:bb:ec:e4:e9:f2:c5:
a0:bc:de:9a:b2:ce:65:50:77:09:fc:ed:aa:b7:1c:0c:93:ef:
41:57:1a:07:87:e7:f2:c9:62:4f:d1:6d:02:95:4d:35:c8:ae:
0e:45:58:b6:af:19:9d:40:c6:62:86:b4:eb:21:a8:fe:ab:b9:
f5:2a:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:38 2026 by rpki-client