Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/3E04DE108B7811F18705BAE8CE1D38B0.roa
File: 3E04DE108B7811F18705BAE8CE1D38B0.roa (raw, json)
Hash identifier: C1lsyEuFMUa4JVGq3Zk1ehqqctSAV2zoFX32Ak+7/iw=
Subject key identifier: B0:D5:F0:25:6D:A0:F1:6B:1B:95:8D:18:70:5B:5F:C6:2E:05:F0:F8
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 0F7D
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/3E04DE108B7811F18705BAE8CE1D38B0.roa
Signing time: Wed 29 Jul 2026 18:06:38 +0000
ROA not before: Wed 29 Jul 2026 18:06:34 +0000
ROA not after: Mon 01 Jul 2030 18:06:34 +0000
asID: 203061
IP address blocks: 169.239.200.0/24 maxlen: 24
169.239.201.0/24 maxlen: 24
169.239.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3965 (0xf7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Jul 29 18:06:34 2026 GMT
Not After : Jul 1 18:06:34 2030 GMT
Subject: CN=6a6a412e-7fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:df:3d:f6:ad:dd:b5:9a:fb:fd:01:ef:4b:
94:bb:bd:15:2b:62:11:5f:46:b3:1d:c9:7f:31:f0:
d0:41:42:fe:94:69:6b:b2:5e:11:ac:44:a6:4b:71:
bb:46:0e:8f:ab:86:bb:d0:54:35:82:ab:23:7d:2c:
81:94:57:df:73:c8:e4:6f:1a:31:a0:00:9c:4c:dd:
8f:21:ed:89:9b:30:88:92:28:f6:6d:96:a3:82:0a:
fd:76:67:a1:f8:41:e2:95:98:62:48:6d:b5:a7:e7:
25:65:80:d1:3f:81:57:a4:70:58:3a:f2:0a:82:fd:
d3:84:48:77:bb:dd:b5:33:3b:08:74:e5:e5:0d:1e:
34:05:fd:00:89:5e:63:e4:cb:73:9f:95:87:47:03:
45:c4:21:ed:6b:d4:49:f1:61:6f:35:22:05:99:7f:
c6:35:cd:c2:77:7c:c5:20:83:33:b1:8b:f0:0d:7d:
c2:4c:9f:5f:c1:87:97:1a:15:52:08:50:2f:1e:6e:
72:db:ed:03:bc:f9:bc:21:f3:2e:d1:4f:a8:13:19:
9a:79:e5:3f:1b:26:34:46:25:fd:2b:1b:39:56:80:
0a:0c:0d:f0:3b:46:f7:de:f9:92:4d:7d:26:26:46:
d0:1a:5e:e0:60:2c:af:a9:ca:d8:fd:45:ef:6d:bf:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:F0:25:6D:A0:F1:6B:1B:95:8D:18:70:5B:5F:C6:2E:05:F0:F8
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/3E04DE108B7811F18705BAE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.200.0/23
169.239.203.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ad:ed:66:44:78:78:d9:dd:f4:e3:46:2e:be:fc:e5:c5:f2:
78:5a:ca:f9:94:64:5d:a1:3e:05:5f:11:69:65:13:69:f7:92:
52:3a:23:b3:cd:06:6c:0b:89:a9:8d:90:7c:36:16:ee:7d:44:
0a:05:3a:1a:bb:74:30:d7:e0:4e:77:bd:08:cb:8e:6f:9a:37:
7b:55:be:00:bf:ac:4d:eb:8d:b2:37:d2:d1:55:b2:b1:02:0e:
77:c3:61:dc:a6:30:00:ee:0f:e8:f2:c0:e2:fb:2b:e5:bf:1a:
9e:8e:85:18:bf:3e:25:91:ad:55:c6:9f:aa:ac:85:bc:dd:55:
87:a9:48:86:90:b2:ae:cd:16:92:6f:93:5f:62:f7:c8:7b:f7:
0a:04:cd:29:b9:93:a3:9a:2d:2b:0a:4f:24:b7:69:a3:17:f5:
8d:20:67:a3:c9:06:28:03:8f:7f:4d:ee:50:57:1f:da:8f:db:
90:6b:2f:ae:fa:e4:07:26:b7:1a:d7:a6:9b:43:11:7e:5d:1b:
79:39:55:c5:56:15:21:bd:72:02:41:ac:b2:29:86:27:38:f2:
12:7f:88:ae:4d:a8:ba:ee:7a:93:07:71:12:51:97:e2:f5:82:
aa:00:41:df:3e:b2:74:ae:2a:d9:e7:63:59:40:1c:75:32:d3:
a2:f2:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:03:17 2026 by rpki-client