Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1C4D7E769AE611F196CB2919CF1D38B0.roa
File: 1C4D7E769AE611F196CB2919CF1D38B0.roa (raw, json)
Hash identifier: YZH9SCxafNgj5ET5cjrzwcwY4JkDafSpqh7dKZObJro=
Subject key identifier: 78:60:3C:4E:5B:D0:A3:8C:7A:16:38:C8:B5:CB:97:38:3C:66:B3:07
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0EF8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1C4D7E769AE611F196CB2919CF1D38B0.roa
Signing time: Tue 18 Aug 2026 09:20:54 +0000
ROA not before: Tue 18 Aug 2026 09:20:50 +0000
ROA not after: Mon 18 Aug 2036 09:20:50 +0000
asID: 3257
IP address blocks: 192.142.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3832 (0xef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 18 09:20:50 2026 GMT
Not After : Aug 18 09:20:50 2036 GMT
Subject: CN=6a8423f6-38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:88:72:ec:da:f1:a8:33:b2:8b:e2:b7:32:
fe:2e:6b:2a:a8:8c:70:7e:c8:a4:f5:9e:17:bc:89:
e7:9d:b5:d7:4e:d5:f3:b2:73:e7:25:ed:06:88:7f:
cf:b4:50:9a:0a:d5:d3:06:2a:ab:31:b1:39:c0:02:
74:35:be:da:f1:d4:d5:0b:63:3a:f0:19:02:0e:ff:
8c:5b:f4:89:74:a5:c5:de:4f:b1:44:e9:3c:e0:37:
00:ba:a1:89:a8:12:f0:42:df:c4:f7:b0:aa:2f:18:
4e:af:b0:0f:80:53:d8:c2:d6:ce:67:26:3b:07:e5:
3e:5c:96:30:65:79:21:1f:91:67:66:be:9a:c6:05:
13:2a:a1:68:d4:6d:c4:8e:c3:8e:5e:47:9c:78:15:
94:e9:61:11:b6:d5:dd:35:54:60:85:9c:13:cc:c8:
a0:97:8d:0e:95:b2:ab:fd:fd:7c:fa:e0:b4:25:17:
85:d9:17:17:99:7d:0a:75:a9:0b:a2:79:88:77:f0:
64:c0:da:1a:ed:1c:da:f2:48:37:3f:55:03:33:5d:
c6:d6:10:e8:46:ec:16:9b:06:3f:82:70:e8:5c:fa:
a2:5d:e3:f9:33:62:3c:15:e3:e4:78:f0:74:20:52:
f2:e8:f8:06:c7:73:14:5e:f5:e1:ca:44:6b:de:4d:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:3C:4E:5B:D0:A3:8C:7A:16:38:C8:B5:CB:97:38:3C:66:B3:07
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1C4D7E769AE611F196CB2919CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:fc:7b:29:75:6e:39:a6:0f:f4:4b:7e:6f:6a:15:15:a5:55:
02:c6:19:2e:68:8b:7c:71:cb:2c:5b:8a:cb:d3:7a:73:51:2a:
41:97:2d:3f:8e:31:21:35:4c:3f:3f:bd:70:15:e1:53:b2:88:
a6:6d:9c:72:48:69:a3:55:14:73:90:74:a0:cd:f3:5a:69:82:
fc:07:9e:1e:0f:1f:74:f4:5f:19:7c:11:e8:2a:8d:21:a1:62:
ea:87:e4:2f:1e:de:bd:e1:3d:b6:d6:0f:28:8d:c1:5e:2b:ae:
18:fe:02:07:82:18:11:7b:b2:19:8f:d4:33:65:13:2b:63:65:
5c:60:85:65:6b:57:60:78:20:f9:0d:c8:88:30:6e:c3:56:6d:
23:e5:d6:a3:2b:cb:a0:11:c2:47:df:ab:cf:c4:44:d0:6b:d9:
72:81:86:00:ea:8c:ef:9c:a0:97:4c:aa:0a:21:94:5f:64:af:
c2:2d:26:42:e3:f3:9d:f6:bf:fe:5d:ba:6a:9c:03:68:24:a7:
c5:01:4a:d8:5b:42:13:f1:56:12:32:20:92:ba:9a:83:7e:44:
37:d8:8e:f1:b2:e6:2a:2d:8e:c0:2b:7e:dc:a9:17:87:56:bc:
46:3e:ec:68:8c:83:4b:76:b9:b6:80:e1:28:f8:0d:5b:01:67:
c6:da:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 09:56:13 2026 by rpki-client