Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/3BFE8668876111F1A98F1AF4CE1D38B0.roa
File: 3BFE8668876111F1A98F1AF4CE1D38B0.roa (raw, json)
Hash identifier: Z+yJ9FcpMmm2v6EDv3fvnGmbZ/nIaxlYnchakU4g7C4=
Subject key identifier: 95:69:70:6D:BE:84:E7:D4:7C:B7:FC:84:6D:2D:C2:A9:C6:25:F0:F6
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 088F
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/3BFE8668876111F1A98F1AF4CE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:11:52 +0000
ROA not before: Fri 24 Jul 2026 13:11:47 +0000
ROA not after: Wed 31 Dec 2036 13:11:47 +0000
asID: 20011
IP address blocks: 168.210.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 24 13:11:47 2026 GMT
Not After : Dec 31 13:11:47 2036 GMT
Subject: CN=6a636497-9950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:a8:1b:d4:4e:8a:6e:ee:a4:ec:ec:75:8a:
19:53:51:02:8d:0d:7e:a4:6f:97:eb:73:df:6c:54:
0a:b3:bf:27:06:d5:23:9a:9a:16:63:dc:d7:eb:74:
98:ec:f5:bb:26:4c:9f:4f:32:c8:6f:cd:3b:9c:fb:
6e:99:50:1f:6a:28:bc:0d:64:0a:40:6f:08:4c:46:
e6:3c:b5:d1:13:76:92:f4:4d:56:e7:29:fb:69:05:
eb:85:56:c3:f0:57:d1:c9:d0:d9:71:a0:bb:65:9f:
9c:5d:44:76:f5:63:f7:b7:fe:e8:a4:da:da:19:d3:
6d:8a:f8:d0:d8:95:ac:6f:5e:d2:3e:e4:d3:ca:eb:
ed:71:16:5b:44:42:87:46:a6:02:56:cf:74:2a:53:
86:0e:91:e1:25:54:3b:a9:51:47:8d:1c:39:61:5a:
9a:50:75:ba:1d:97:01:1d:3a:38:84:5f:5c:93:b8:
5a:02:d7:a9:6a:b8:f6:68:cc:24:cd:ab:d3:f7:50:
c9:34:06:95:e6:d9:ff:a4:bc:25:fb:bb:d0:4b:c1:
79:eb:1a:e2:6c:4a:59:e7:3a:ec:f9:1f:7c:f5:25:
d8:49:96:4e:69:cf:35:8d:51:40:12:50:70:b3:96:
3c:33:54:4d:92:12:94:bd:60:e5:4f:2b:0a:01:c7:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:69:70:6D:BE:84:E7:D4:7C:B7:FC:84:6D:2D:C2:A9:C6:25:F0:F6
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/3BFE8668876111F1A98F1AF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.12.0/22
Signature Algorithm: sha256WithRSAEncryption
83:68:00:69:47:d8:bc:09:f1:59:95:03:ec:df:11:1c:f4:66:
b4:df:ac:4c:64:8e:70:3d:7e:76:39:c1:01:32:80:d7:52:c1:
c4:93:e1:c2:56:40:4e:de:01:f9:9d:ef:4b:cc:75:ec:cb:10:
7b:b3:8c:95:ea:c8:b6:09:80:2c:3d:7c:3a:38:db:30:1a:ee:
29:d3:58:94:c2:a0:55:40:2b:d2:d5:2b:4e:3d:43:23:08:d8:
7d:6c:04:0e:e1:a4:b9:03:3c:70:b9:9e:53:3e:66:cf:7c:98:
82:fc:dc:8d:4d:d9:86:0e:8a:c2:99:b7:64:1c:ec:fd:15:0a:
46:50:68:60:87:32:3c:1d:43:fb:50:8d:91:19:4f:a6:9e:6b:
12:c5:d5:f0:b2:59:52:90:b8:e5:02:4f:3d:bb:f6:bb:e1:1f:
ea:bb:c6:1a:1a:35:a6:19:8f:c3:af:ff:6c:45:82:f7:63:11:
72:f6:2e:cd:ea:3f:25:6e:c2:bd:bf:c2:8d:bf:6d:c9:af:e6:
85:2f:9b:f2:fb:4f:2b:21:de:3e:83:63:09:50:a9:23:b0:a9:
c5:22:d8:3f:0c:c6:63:db:50:f6:b0:db:b3:89:c6:c0:c4:de:
7e:ab:13:c2:7c:98:ba:59:2e:08:60:c2:98:f2:06:7a:a1:51:
af:ef:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:11 2026 by rpki-client