Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/DF891880876011F1830CE9F1CE1D38B0.roa
File: DF891880876011F1830CE9F1CE1D38B0.roa (raw, json)
Hash identifier: H6grOpUgmmbUupL8oKvn5RUKSzVClZwovYf9bcqWgxg=
Subject key identifier: 43:E5:FC:C9:20:F2:49:1D:C8:97:A5:9D:CD:52:C8:88:10:FB:B7:00
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 088D
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/DF891880876011F1830CE9F1CE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:09:17 +0000
ROA not before: Fri 24 Jul 2026 13:09:12 +0000
ROA not after: Wed 31 Dec 2036 13:09:12 +0000
asID: 20011
IP address blocks: 168.210.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 24 13:09:12 2026 GMT
Not After : Dec 31 13:09:12 2036 GMT
Subject: CN=6a6363fc-7f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:57:bb:0c:54:85:19:cc:38:c3:a4:a0:c0:
34:60:02:b6:57:bc:f7:7a:20:85:da:21:1e:a7:63:
db:94:8b:63:a5:a0:b1:fa:7a:05:02:9f:51:75:3a:
fd:75:fb:61:91:03:d7:4a:9f:43:2b:f5:66:df:fc:
54:bc:3e:d0:bc:24:2f:2b:80:cd:26:ce:f6:24:27:
3e:b2:50:c7:6f:f1:57:87:0b:00:23:04:56:64:07:
da:c1:ba:a0:c2:65:c2:64:c9:b4:8f:48:3b:52:ab:
66:c5:06:94:e0:c5:d1:2b:3c:fa:a7:90:9d:4f:9d:
ac:75:59:af:45:47:e6:ee:2e:d6:66:f2:a9:16:5e:
9e:9d:06:47:a6:b7:fe:25:c4:c7:83:7d:43:ec:09:
5f:8f:15:fc:08:3e:d1:83:38:28:dd:32:e4:25:09:
e5:63:0b:7b:15:f6:1e:60:07:5c:68:71:f7:c0:d5:
5d:fe:14:e8:1a:19:f3:82:b7:eb:3c:7b:c9:bf:6a:
cd:71:51:c9:d7:87:34:d1:e1:78:07:38:61:f2:70:
da:9d:b0:7a:35:e6:36:b9:f3:6e:43:83:cc:97:a6:
47:be:30:6b:e0:d2:98:13:ea:c9:24:2b:f6:7c:43:
6f:51:fa:a6:fb:87:67:38:1d:77:86:89:42:42:2f:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:FC:C9:20:F2:49:1D:C8:97:A5:9D:CD:52:C8:88:10:FB:B7:00
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/DF891880876011F1830CE9F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
96:97:a2:3a:ec:e8:b9:26:11:f4:d9:5e:dc:fe:01:39:1a:dd:
e9:b5:cc:c2:f0:b5:03:06:f5:10:cd:bc:e4:47:67:e2:ac:fb:
5c:5a:77:01:81:68:91:39:3f:53:16:ac:99:22:d9:80:2c:30:
eb:c3:60:a5:08:75:9e:38:39:78:45:99:5d:bd:75:e8:c0:83:
7a:8a:cf:b1:07:78:7e:ee:c1:7a:46:b2:79:9b:f7:61:81:35:
8c:d6:fe:f5:b8:6d:9e:a6:11:73:81:9d:f7:89:c4:e6:d2:c1:
c2:6f:d5:ab:e8:72:33:1b:39:6f:9f:41:ac:1e:d0:e8:a0:29:
b8:84:7f:ff:86:c7:45:a3:69:fd:79:09:8d:35:bc:09:de:e5:
ad:73:84:ac:4f:25:ad:7f:f7:d7:a6:34:de:d6:99:1a:79:c9:
53:ce:1e:85:f4:0b:1e:45:e2:fa:02:06:e3:a8:91:58:f2:1f:
c4:10:25:1b:84:50:5d:e5:f3:17:e5:27:b2:7c:37:5d:1a:de:
6e:4d:42:8f:b6:08:f8:17:16:b7:d9:28:cb:72:47:ff:62:df:
27:01:be:ba:19:2f:53:c0:20:62:94:85:25:e1:71:60:6a:db:
6f:21:f7:a3:23:98:20:88:22:a1:ab:9c:fd:d7:fb:2c:c0:1c:
4a:4d:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:35 2026 by rpki-client