Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/3D93A998876811F18427031ECF1D38B0.roa
File: 3D93A998876811F18427031ECF1D38B0.roa (raw, json)
Hash identifier: ED++UQzskmFMrBOiAcPQY8inrGju/ayfk7tJLhTNd6I=
Subject key identifier: 64:34:A0:8D:DB:7B:00:94:4C:CE:06:06:F2:56:A8:5B:4B:64:B4:63
Certificate issuer: /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial: 0828
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Authority info access: rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/3D93A998876811F18427031ECF1D38B0.roa
Signing time: Fri 24 Jul 2026 14:02:01 +0000
ROA not before: Fri 24 Jul 2026 14:01:56 +0000
ROA not after: Wed 31 Dec 2036 14:01:56 +0000
asID: 3741
IP address blocks: 200.16.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Validity
Not Before: Jul 24 14:01:56 2026 GMT
Not After : Dec 31 14:01:56 2036 GMT
Subject: CN=6a637059-c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:b2:1d:07:0d:41:c2:d2:8a:f0:87:fe:5d:
a4:a6:9d:e1:4b:15:7f:e0:db:70:04:43:b5:40:52:
41:59:b2:94:1f:86:fd:e6:6c:57:2b:9d:22:50:9a:
0a:5d:c2:95:82:c9:ac:55:9e:4f:4a:49:6c:98:62:
a6:3d:31:de:42:e8:12:37:44:d6:c3:2e:ff:c2:9d:
ff:3a:16:c1:55:6a:4e:db:7f:2f:1e:00:d8:9d:a1:
4f:a6:a6:96:da:92:09:26:55:ad:87:06:14:70:75:
7d:96:2a:7e:e0:d0:80:2f:77:6b:94:05:00:03:aa:
2f:33:e8:19:bd:e5:da:34:6e:74:9a:f5:96:45:1e:
b2:27:27:2e:d7:80:0e:a3:25:9a:61:6f:c1:87:01:
30:4a:00:e5:3a:1d:98:2c:01:31:c2:03:c1:21:ac:
d1:8e:12:e7:81:13:b5:f7:7c:d1:89:2e:96:6e:3e:
8c:b3:cd:fd:a0:3e:3f:7e:44:c2:24:06:e0:12:2d:
34:7c:85:c8:64:fe:a4:76:92:25:21:f8:dd:0e:ea:
3a:9b:f7:01:22:5f:2f:54:54:d0:10:bc:74:e1:49:
89:e2:44:cc:fd:8f:f3:e7:5e:a4:64:22:7d:e4:1e:
cb:27:2e:3a:ab:e8:3c:f8:85:5c:9a:26:b5:94:85:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:A0:8D:DB:7B:00:94:4C:CE:06:06:F2:56:A8:5B:4B:64:B4:63
X509v3 Authority Key Identifier:
keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/3D93A998876811F18427031ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
200.16.8.0/21
Signature Algorithm: sha256WithRSAEncryption
93:14:5f:82:b2:cc:a6:49:74:28:ba:8d:c6:7f:d2:28:a5:7f:
64:6e:47:0e:66:2d:87:5d:06:e8:48:f1:c1:e3:bf:32:ff:c6:
bc:58:b0:3a:20:2a:ca:ae:6e:04:a5:4f:7c:b4:6f:c9:5f:42:
9f:cf:7f:26:5d:80:88:70:3f:df:de:2b:c9:f0:c4:a8:bf:e9:
72:22:e5:b5:89:f7:55:84:88:84:fb:bf:18:b1:0e:d5:aa:4b:
70:b0:d3:c0:d3:5e:40:6e:88:be:6e:73:e3:f8:26:a9:dc:62:
d2:b5:25:b7:d1:5b:0b:c7:15:56:4a:08:92:69:5d:f5:d0:46:
2a:41:43:c7:92:f1:18:df:87:27:b6:e1:b5:15:06:27:50:40:
5f:5c:04:58:90:54:a3:24:e6:fd:72:da:8d:e4:8c:a9:4a:56:
33:49:54:af:75:da:69:53:94:ec:8b:2e:32:8b:9d:4b:36:10:
b2:a8:e1:94:89:d9:bf:3c:0d:9d:fa:ad:dc:ab:35:6b:5b:26:
b9:93:b6:dc:6d:4e:80:0f:b9:88:18:a5:27:4e:38:48:5c:e8:
b2:15:0d:de:17:bc:76:35:e1:a7:8e:01:43:19:3a:fd:4a:4f:
35:9d:ab:f3:de:d5:9f:22:e1:05:42:74:5e:7d:9f:ba:ac:e7:
bd:04:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:11 2026 by rpki-client