Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/F05CDE6684E611F1886BCED9CE1D38B0.roa
File: F05CDE6684E611F1886BCED9CE1D38B0.roa (raw, json)
Hash identifier: BKX3UcRCwM62AYLNiq8SzyAS2T5C7ScNOyMg7wplAWU=
Subject key identifier: 20:23:BB:4F:8C:04:C2:CF:72:81:4D:A5:1E:EB:54:A3:F7:F0:0E:1C
Certificate issuer: /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial: 069F
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/F05CDE6684E611F1886BCED9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:31:24 +0000
ROA not before: Tue 21 Jul 2026 09:31:20 +0000
ROA not after: Thu 31 Jul 2036 09:31:20 +0000
asID: 37611
IP address blocks: 192.143.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Validity
Not Before: Jul 21 09:31:20 2026 GMT
Not After : Jul 31 09:31:20 2036 GMT
Subject: CN=6a5f3c6c-2344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:79:2c:3b:63:a3:68:b9:9d:5f:73:4e:b3:
a7:4f:f3:54:79:94:ea:31:e3:fb:b1:1e:ac:19:c8:
d7:d4:25:54:0e:81:c5:e0:7a:2d:56:d4:8c:8a:01:
53:38:82:5d:09:b3:94:ef:53:e0:69:22:eb:4f:a8:
6d:35:e1:15:d6:21:72:17:59:0f:22:68:1c:27:b4:
db:75:b2:bb:30:8c:2f:b4:85:9e:a8:67:d1:5c:20:
25:d7:aa:af:af:33:ab:4a:bd:19:ed:32:c5:cd:e0:
31:a0:1c:ac:b7:c3:b3:26:0c:8a:dd:31:37:d7:bc:
81:0b:12:f9:67:c1:cf:0b:c2:1f:f5:04:ba:2d:85:
04:0c:51:3c:fc:62:7f:9f:85:7f:95:fa:9d:bf:1e:
df:03:9d:ce:ad:77:0b:1a:f0:4f:7c:6a:3f:aa:22:
e7:1b:cb:8b:e6:48:ea:fc:f0:ab:4b:e2:3c:c3:ed:
94:c1:0f:12:e2:22:c5:43:04:ac:82:94:7e:f5:ed:
ef:51:d4:fb:c9:89:f0:c4:f2:4d:9e:e3:01:9f:0c:
bf:2d:c2:d7:0d:92:80:15:bc:7c:a6:73:71:9f:ee:
7c:9e:2a:65:fd:36:f0:56:fc:10:b1:25:e6:80:a9:
0f:9f:44:72:7e:40:96:65:2a:7a:1b:85:a6:a3:01:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:BB:4F:8C:04:C2:CF:72:81:4D:A5:1E:EB:54:A3:F7:F0:0E:1C
X509v3 Authority Key Identifier:
keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/F05CDE6684E611F1886BCED9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:ba:b5:55:ed:eb:a6:ec:61:cc:70:cc:1e:66:f9:d0:e0:b3:
22:48:75:04:36:6b:10:56:0c:f0:29:ff:bd:86:10:18:b5:72:
2d:1a:6d:28:7d:c3:a0:eb:03:ed:86:60:d1:63:f7:ff:40:1a:
cc:3b:03:02:8e:ae:ab:b3:83:ef:bc:69:60:a1:44:1a:4b:3b:
bc:a1:03:62:f1:72:66:20:c9:9f:bc:e5:df:0f:f8:d3:c3:94:
5b:b7:72:c3:b1:74:9c:a3:4b:12:37:e6:c2:8f:1f:bb:18:49:
75:d9:9f:96:8c:2c:f2:ee:97:08:3a:d0:bb:a0:83:16:00:c7:
fd:4b:8d:15:c8:14:01:6c:1b:ce:d6:4a:1e:0c:cb:42:82:52:
56:b1:09:56:fd:bf:c2:a3:bf:55:f6:97:9b:71:3d:49:ef:6e:
2c:b8:4f:a1:11:60:45:1b:6a:d3:0b:c4:4b:22:ad:70:27:14:
c2:1b:f0:7d:29:4d:1f:49:8d:00:2b:1e:7d:fd:1f:a6:90:0e:
cd:41:d8:cc:b5:73:0f:65:5f:8f:fd:be:c9:49:0d:26:f2:11:
64:dd:4b:0d:ed:9d:97:dd:ae:5f:f2:70:20:41:53:17:aa:d3:
2f:da:ca:42:58:b4:2a:d2:45:77:52:e3:19:b2:93:e7:13:e6:
1e:04:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:34 2026 by rpki-client