Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F42BE354875F11F1992EE5EBCE1D38B0.roa
File: F42BE354875F11F1992EE5EBCE1D38B0.roa (raw, json)
Hash identifier: RE5lKG1ryU+ajdXMJ2nwYKPsD4axZEN9fRnoHhCTJp0=
Subject key identifier: FD:DB:A6:43:4A:DB:66:0B:FA:21:49:85:B2:50:AC:7A:92:83:FA:F3
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 088B
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F42BE354875F11F1992EE5EBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:02:42 +0000
ROA not before: Fri 24 Jul 2026 13:02:37 +0000
ROA not after: Wed 31 Dec 2036 13:02:37 +0000
asID: 20011
IP address blocks: 168.210.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 24 13:02:37 2026 GMT
Not After : Dec 31 13:02:37 2036 GMT
Subject: CN=6a636271-c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:bf:13:a4:fc:06:de:2e:02:d8:0d:a4:39:
ee:7e:ee:e5:a8:fa:36:1e:ad:fe:81:fa:38:9c:88:
69:7b:ce:f5:a4:cf:8d:ce:2b:82:d4:f5:b2:6f:42:
0c:78:c8:d5:50:06:aa:3c:3b:6d:9e:04:e1:0a:38:
f5:e0:c9:27:c7:fa:12:f6:25:4f:c5:77:3f:61:55:
69:08:6b:a5:74:a6:f5:3b:95:ba:4d:a1:49:62:36:
5d:77:4f:56:2e:0e:6f:bd:80:e7:ce:90:0c:da:95:
6f:1d:36:e4:01:8e:a6:c6:d9:63:9d:c6:87:9d:b6:
c8:2c:67:ff:ff:0b:6b:52:13:f9:5b:93:fb:f0:06:
b8:9f:95:63:53:3a:c4:96:62:96:34:be:30:58:b8:
60:59:37:44:b9:e7:4b:fc:97:c8:75:5c:d4:3a:11:
ba:93:88:5c:aa:25:f1:20:e7:8e:a2:7d:be:79:3e:
b8:33:fd:f0:5d:58:1d:59:60:10:22:fc:94:d3:2b:
34:0d:18:33:5a:4c:2a:7c:c4:43:85:07:bc:0f:39:
64:90:b7:3c:b1:07:2a:a1:ed:1d:8b:cd:59:06:02:
d9:ef:7b:40:a4:27:dc:a8:94:24:73:fc:77:f3:b9:
5f:c6:1a:93:0b:09:4d:3c:36:f4:0e:5b:cd:68:36:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:A6:43:4A:DB:66:0B:FA:21:49:85:B2:50:AC:7A:92:83:FA:F3
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F42BE354875F11F1992EE5EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:10:ea:fa:db:ec:27:9c:4d:13:d8:47:89:71:33:77:69:08:
75:c5:c6:49:14:8b:fc:a2:1f:c5:fe:c0:a7:5b:13:62:40:af:
c2:83:da:df:13:85:68:1b:5f:34:03:56:6c:f8:ce:2a:1b:3c:
0b:96:30:16:82:a0:df:17:6e:72:38:01:db:f8:91:13:69:ad:
48:b6:fb:03:29:e6:96:0d:a8:f2:30:5a:3e:03:f6:24:c1:11:
5b:1b:27:f5:23:de:5c:57:30:a1:ff:57:82:b8:59:c4:d9:c3:
38:53:e5:32:05:a3:b5:0c:8b:63:df:75:a7:87:ff:2a:63:08:
4c:fd:c0:24:83:a0:3f:ac:16:47:3d:33:4c:47:f5:9c:b6:01:
80:7c:39:94:00:90:20:92:6b:86:af:04:67:6b:a0:42:96:54:
65:97:28:59:4a:92:be:09:a0:e4:4c:d8:5c:c8:bc:9d:81:d8:
d3:8b:f2:d9:80:d3:93:a5:fe:3a:c4:f5:14:3c:94:80:cc:38:
99:58:69:ce:91:ff:7a:88:95:8e:44:1d:7d:cd:2a:cd:63:34:
c0:df:fc:77:82:37:e2:12:7e:9e:ae:c7:d1:83:58:9e:c4:42:
e5:34:e1:de:36:f1:2b:ba:82:1b:a8:25:b6:6f:1b:a3:01:bf:
40:f2:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:33 2026 by rpki-client