Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/782F5ACE875F11F192479FE9CE1D38B0.roa
File: 782F5ACE875F11F192479FE9CE1D38B0.roa (raw, json)
Hash identifier: vTMr3angMMBQDnu2OUBQHKu7EJNLw04DfTTyz8Jar6M=
Subject key identifier: 86:E1:8C:26:BF:22:6C:46:7B:B3:F4:B3:FB:45:2F:75:78:71:E0:2C
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 0889
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/782F5ACE875F11F192479FE9CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:59:14 +0000
ROA not before: Fri 24 Jul 2026 12:59:09 +0000
ROA not after: Wed 31 Dec 2036 12:59:09 +0000
asID: 3741
IP address blocks: 168.209.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 24 12:59:09 2026 GMT
Not After : Dec 31 12:59:09 2036 GMT
Subject: CN=6a6361a1-251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:c1:4b:9a:93:38:fa:4f:e9:1f:e5:d9:94:
4e:5b:d8:dd:da:12:ae:50:b6:a5:e1:0f:1f:3d:d8:
f6:40:27:21:e0:aa:99:fe:04:f1:a3:fc:e9:40:02:
90:d5:f5:54:e2:a7:d6:0c:a8:80:ec:3e:cc:ed:5e:
63:92:f6:67:b0:50:00:b3:88:70:6c:54:99:1e:85:
2e:ce:6e:49:df:4e:91:ea:d8:a3:11:4c:1b:64:5b:
2a:51:da:2a:c7:6d:15:2e:e5:f9:ba:f7:2d:e2:61:
36:a0:4c:47:d8:26:49:af:49:80:70:42:06:ff:f2:
c8:a0:4e:65:59:a9:11:75:50:20:4f:8f:ad:8c:e0:
f4:47:c8:2c:49:51:c4:00:d6:7b:1c:e3:99:c4:90:
03:96:cc:da:7d:37:64:65:0f:b0:d1:5f:2d:b1:bd:
6f:ac:cb:f2:3d:26:6d:e9:bc:56:14:13:eb:d8:46:
81:77:af:7b:04:7b:72:40:aa:15:a6:98:bd:71:b0:
27:82:e6:27:16:57:63:28:5c:ad:94:0d:76:6f:70:
04:34:da:7d:7f:ee:dc:dc:98:7b:a5:8e:73:09:d9:
18:3b:53:be:f3:cf:32:5f:7e:37:8f:99:41:eb:96:
66:a5:31:34:5f:53:fe:a1:0a:f1:09:ec:0d:96:6c:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:8C:26:BF:22:6C:46:7B:B3:F4:B3:FB:45:2F:75:78:71:E0:2C
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/782F5ACE875F11F192479FE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:fd:e2:53:db:49:44:b3:de:cc:3d:63:5b:1c:a9:91:57:9d:
e8:03:49:2f:32:2a:51:43:e4:84:19:0f:6a:2b:98:24:d9:65:
d4:93:bc:48:89:33:4e:73:30:e7:7a:87:e2:08:d1:4b:81:4d:
d3:2d:53:92:93:91:cc:ec:6c:c8:94:7f:86:20:fe:8b:39:e1:
d0:37:78:08:7e:4a:75:75:37:96:52:dc:a0:1b:1f:04:9e:d5:
77:98:9a:f5:47:58:1e:aa:89:11:65:09:89:33:c4:ad:53:f0:
a5:f5:81:07:8d:2a:95:bb:af:54:81:0b:90:12:12:b9:0c:96:
59:2f:87:bd:53:1c:bc:0e:9c:cc:be:ce:dc:a3:16:ac:8b:39:
da:ec:78:cc:86:10:90:48:67:4e:ef:14:f0:f3:19:7d:e4:d2:
a3:4f:c0:6a:66:ff:fa:da:94:08:17:19:c2:94:de:38:30:0d:
53:b2:be:a7:38:df:d2:d0:89:62:be:12:8b:dd:29:93:3e:32:
75:88:14:9a:0d:5d:74:00:cf:61:94:9b:10:bf:26:95:30:ff:
b6:0e:7b:b5:e3:b0:4e:7f:d6:b3:9f:5d:d5:30:e0:36:24:78:
9e:4b:68:21:01:0b:38:c4:03:c7:24:4a:4b:f6:08:71:db:75:
65:da:5d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:33 2026 by rpki-client