Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/3469E5FA7B7211F1B243C300CF1D38B0.roa
File: 3469E5FA7B7211F1B243C300CF1D38B0.roa (raw, json)
Hash identifier: hX8O0ZYKk9oF6OhSZ3d33KQkrAldnrJfSsy0yCg08EU=
Subject key identifier: ED:76:6A:59:44:EB:7C:18:4C:FF:0D:4C:5F:31:C8:C0:4A:F8:99:2C
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0FE7
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/3469E5FA7B7211F1B243C300CF1D38B0.roa
Signing time: Thu 09 Jul 2026 08:43:06 +0000
ROA not before: Thu 09 Jul 2026 08:43:01 +0000
ROA not after: Wed 31 Dec 2036 08:43:01 +0000
asID: 327750
IP address blocks: 154.126.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4071 (0xfe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Jul 9 08:43:01 2026 GMT
Not After : Dec 31 08:43:01 2036 GMT
Subject: CN=6a4f5f1a-0397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:6d:7e:8a:cb:8b:b8:e0:39:72:9d:f8:99:
41:08:8b:9e:b8:dc:3d:98:c0:dd:ff:15:a6:5f:20:
4c:2e:26:4a:91:e7:ea:97:91:27:27:b5:ac:49:03:
48:0e:41:7a:64:b0:7c:01:56:43:79:b0:6b:3e:5c:
e2:68:44:05:2b:32:f5:87:3c:87:15:2e:61:be:e9:
45:97:02:36:b2:c1:68:4a:d4:a5:c1:40:c3:7a:48:
d7:24:e5:5b:b7:23:cf:d1:51:36:93:85:d4:69:e1:
db:53:2c:d8:6d:41:0a:f1:ce:2e:ce:5d:e0:6f:c7:
31:55:41:bf:13:e6:bf:c1:f9:b9:d6:45:60:ca:a9:
80:e7:66:6c:9f:90:61:5a:65:1f:ee:39:c2:de:5e:
0f:48:4c:45:9a:2f:b9:d2:f4:93:c8:87:f2:2c:fd:
55:2a:bc:4a:ee:5d:3a:35:aa:02:45:d3:6d:de:2e:
9b:2b:58:3a:27:b0:d2:88:b4:6d:bf:ca:29:8e:26:
0a:8f:fc:40:0e:e6:21:15:94:8c:d3:d0:d5:5e:87:
f6:50:f7:39:59:86:40:65:b8:a4:4b:36:c3:7c:f2:
6c:1a:7d:7c:75:d3:73:40:47:66:d3:b7:50:91:fa:
2d:ad:97:e9:1f:c8:02:1d:aa:e9:bc:5b:8c:82:f8:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:6A:59:44:EB:7C:18:4C:FF:0D:4C:5F:31:C8:C0:4A:F8:99:2C
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/3469E5FA7B7211F1B243C300CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.192.0/19
Signature Algorithm: sha256WithRSAEncryption
73:86:69:f8:a9:fd:17:e2:9b:30:0f:78:2d:5b:97:cd:36:68:
dd:e7:95:76:06:37:9f:a8:06:fe:0a:d8:65:5c:b7:67:bd:b3:
39:8a:be:e7:2a:3a:c9:04:7f:f7:43:25:c2:20:1d:0b:15:56:
c5:ff:29:38:77:c2:18:d9:27:2d:a6:2c:56:4b:45:fc:17:48:
c7:2a:e8:fa:03:5f:e2:a2:c3:2f:51:4f:a7:0f:d6:b1:28:0a:
0d:d1:c5:c3:27:79:c7:cc:a0:25:3d:91:f5:9b:40:09:1d:86:
67:8c:e6:7d:f5:67:0e:13:7e:76:f0:98:c1:32:58:1c:dd:3d:
80:ae:45:a2:b4:c7:28:1d:18:ee:76:7f:74:13:2e:39:55:14:
90:7f:b5:02:a4:2a:58:16:b5:ad:94:89:50:08:a9:99:53:4f:
2f:b5:bb:1b:76:b1:6c:55:e2:79:2a:f7:eb:47:3b:99:06:0b:
76:cc:a0:20:06:c5:62:7f:26:26:91:31:d7:c3:13:c8:b0:db:
38:0d:d0:9b:65:4c:2b:21:a5:3d:b4:a0:49:0d:69:f2:15:af:
65:9f:05:86:7d:ae:97:67:bf:5a:f9:84:83:12:14:da:b0:fe:
4e:f3:b6:ec:c3:5c:f8:b3:94:51:12:f7:9a:65:b6:88:73:c5:
0a:41:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:46 2026 by rpki-client