Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/89E136148F0911F1BE9146B4CE1D38B0.roa
File: 89E136148F0911F1BE9146B4CE1D38B0.roa (raw, json)
Hash identifier: 0Bibn/zgW9nQetOuDrSsmtgMFzcRPNQvalv4kLZon/A=
Subject key identifier: FB:D1:55:B2:AF:B0:DA:69:C9:E6:73:E0:3C:B8:06:EE:49:35:DF:9A
Certificate issuer: /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial: 07A4
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Authority info access: rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/89E136148F0911F1BE9146B4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:04:16 +0000
ROA not before: Mon 03 Aug 2026 07:04:12 +0000
ROA not after: Wed 30 Apr 2031 07:04:12 +0000
asID: 327750
IP address blocks: 45.221.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAR, serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Validity
Not Before: Aug 3 07:04:12 2026 GMT
Not After : Apr 30 07:04:12 2031 GMT
Subject: CN=6a703d70-7d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:3a:df:dc:39:3d:07:4e:18:00:a9:64:92:
9f:85:1f:bf:52:2f:47:86:4a:ff:44:ce:4a:3c:ca:
f0:8b:75:dc:bc:24:1a:b6:ea:51:46:f2:e3:62:86:
40:41:a4:ef:d9:05:d1:a4:39:b3:7f:ae:10:63:12:
62:46:22:68:5d:66:8b:e0:e3:10:e2:c0:12:7e:af:
aa:d4:30:e2:f2:c4:6e:35:4b:e6:f0:a5:3a:48:ab:
9a:d5:eb:92:92:74:85:b3:06:98:bf:d8:cd:86:d5:
fb:47:9a:f8:87:56:e3:22:a1:ac:ae:0d:b2:72:59:
ff:3b:a8:0f:5e:5d:e0:75:4e:57:38:a6:f3:fc:40:
a1:79:aa:b3:b4:22:83:6e:38:5c:c5:bb:24:a5:30:
94:a7:b6:b9:78:d6:ac:48:2a:2e:0c:de:84:d2:81:
d2:e8:38:15:99:c4:20:14:82:bf:6d:c4:1d:a9:99:
d2:fa:a4:05:39:f5:ef:6f:f8:66:eb:0b:6c:d3:e1:
78:df:df:38:4f:ca:f4:2a:ce:2c:82:8a:c2:f5:ab:
97:1f:e2:6a:f3:4d:45:ae:7d:0e:79:3e:81:18:5d:
f6:83:a3:89:c3:30:98:2f:de:7a:2f:d0:1c:b7:e5:
57:dd:13:30:67:a7:b9:c8:80:5b:50:f5:b8:e5:1a:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:55:B2:AF:B0:DA:69:C9:E6:73:E0:3C:B8:06:EE:49:35:DF:9A
X509v3 Authority Key Identifier:
keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/89E136148F0911F1BE9146B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:d4:81:f4:e4:f9:dd:6e:bf:e2:db:a8:37:db:97:c6:b2:13:
f8:bb:aa:46:2d:ba:1f:56:23:75:74:e8:09:67:52:71:9f:88:
ab:a5:85:28:e8:01:69:39:54:9d:6e:27:9f:4c:9e:2b:97:6a:
04:fd:16:39:b7:5c:8a:76:ac:fc:ed:0d:10:ab:07:07:d6:ed:
d7:a7:f4:6e:cc:4a:fe:3a:96:d5:b3:f8:3e:27:15:3d:e6:1c:
32:19:72:e1:07:ee:20:40:e4:4e:f2:ba:e9:0a:fd:cd:58:89:
5e:48:e8:d6:c6:ab:11:59:3f:1c:e0:3a:d4:bd:88:d6:c1:b2:
78:5f:36:f6:6b:a0:5c:14:ae:fa:98:c7:61:c8:b3:87:e7:8c:
9d:aa:85:53:cb:a6:1d:51:ce:af:c7:48:be:68:33:f3:3f:a0:
c1:34:7a:2d:5a:8d:ba:27:1d:70:2e:43:5e:fd:35:5e:9c:85:
50:b0:9d:73:35:b1:c3:df:8f:2f:f5:3f:b0:e8:2d:90:ba:aa:
ba:a5:a7:70:c6:a5:42:4c:90:bf:3c:47:6b:80:1d:0d:32:b6:
21:30:4a:ff:35:0d:9e:46:55:27:19:47:be:a6:e3:37:87:32:
5d:76:b2:bc:e0:fb:99:99:08:2b:b4:e8:a9:62:1e:4a:c9:8b:
e5:c5:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:12:13 2026 by rpki-client