Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/B34ECFDE8A3111F1A83C6016CF1D38B0.roa
File: B34ECFDE8A3111F1A83C6016CF1D38B0.roa (raw, json)
Hash identifier: WWcREXZ/VIFzmTTYzmuui5KSZyqOd0anmtzmN+ePjHk=
Subject key identifier: 00:1C:7F:9E:AF:01:1A:FB:65:AA:E3:B3:9D:96:51:2A:EF:C9:D9:8B
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 0896
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/B34ECFDE8A3111F1A83C6016CF1D38B0.roa
Signing time: Tue 28 Jul 2026 03:09:09 +0000
ROA not before: Tue 28 Jul 2026 03:09:05 +0000
ROA not after: Sun 31 Jul 2033 03:09:05 +0000
asID: 20011
IP address blocks: 152.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 03:09:05 2026 GMT
Not After : Jul 31 03:09:05 2033 GMT
Subject: CN=6a681d55-8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:04:06:67:d3:c9:9e:99:bd:b2:8e:40:6d:
76:28:4f:47:aa:d2:09:76:12:02:43:69:71:ac:52:
1f:97:5d:b9:33:94:09:b5:56:ac:1f:1e:3a:d7:62:
80:e5:56:c4:ea:5e:61:50:6a:ce:8c:72:96:a8:68:
a6:76:09:54:71:69:91:44:d6:bc:e5:b6:8f:1a:25:
33:f4:57:5c:35:4b:d1:0a:8d:08:a1:36:97:a7:95:
f9:01:99:1a:5f:5a:b1:56:06:25:c3:8c:c9:a7:2f:
81:29:27:24:74:27:de:54:0b:5b:60:65:c4:5d:e8:
6e:3a:7c:26:32:c9:c2:2b:01:fa:34:e2:3b:a2:81:
fa:7b:db:fe:03:e1:58:5e:2d:ae:4f:bd:f9:47:50:
cf:a4:48:81:3d:18:f4:1c:42:2b:3e:f6:ea:e1:14:
0b:f1:08:51:01:3c:8e:26:d5:76:56:f5:09:18:29:
25:9a:c1:b3:f1:1f:4f:a8:ed:18:d0:01:f3:13:97:
0e:f4:a1:86:ad:09:5d:b3:a5:89:ea:78:4e:9b:2a:
fa:26:d2:f9:95:6c:57:6c:53:b2:47:63:04:e1:39:
bb:75:62:73:13:ff:b0:5f:b3:d1:4b:4c:18:98:c6:
90:f9:75:aa:30:a7:62:d3:a7:7c:38:5d:22:63:f3:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1C:7F:9E:AF:01:1A:FB:65:AA:E3:B3:9D:96:51:2A:EF:C9:D9:8B
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/B34ECFDE8A3111F1A83C6016CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:c0:ee:e6:1c:1b:17:3c:3f:41:ee:bb:a4:b9:30:1a:06:b5:
13:f2:5f:e8:7e:92:31:43:ea:9f:74:35:0d:4a:b2:a9:1a:5d:
b2:9d:7f:4b:30:84:7d:45:b3:c8:41:6c:5a:5b:df:0a:1a:fb:
0a:1a:fd:de:ae:e3:f4:cf:a3:f4:ed:0a:97:99:0e:10:78:5c:
04:73:c3:7b:02:6e:f5:77:8e:b4:dd:ec:a8:68:b4:36:fa:92:
f9:9b:f6:6f:ff:f8:b9:fc:cc:61:f0:04:93:18:26:a5:3d:a5:
24:7c:f5:66:8f:6c:97:f8:a5:f5:30:50:87:e2:a1:45:94:b2:
28:42:e3:44:f9:53:98:df:01:54:6b:bd:d1:58:b1:5f:1c:d0:
a8:ab:2d:b1:a3:15:52:3d:43:ee:0d:fa:5f:6c:0d:da:c1:d2:
4e:1b:36:74:7b:c9:f7:e6:99:3e:e8:34:cf:76:3a:41:b8:ca:
91:9b:3a:51:f8:a2:80:36:d7:13:e8:6c:66:84:cd:e2:ea:95:
fa:21:5e:05:5d:31:b4:7c:b4:1c:22:18:c5:74:b9:1b:a5:93:
1c:3d:55:b5:ca:e7:19:f6:71:e2:2a:64:94:6f:e3:4f:50:f3:
54:88:f8:8d:01:20:c1:95:0f:f3:03:5b:14:c4:ad:06:af:26:
1a:88:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:33 2026 by rpki-client