Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E11B9D68C1611F1905DECB4CE1D38B0.roa
File: 1E11B9D68C1611F1905DECB4CE1D38B0.roa (raw, json)
Hash identifier: k9DDFE7HYunPyQP86LEbeN0lUYTFyfWA7ugzUI8IIqE=
Subject key identifier: 7B:AE:75:64:26:F9:D6:E9:6B:20:80:44:C2:44:3A:9E:3F:A6:72:02
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ED3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E11B9D68C1611F1905DECB4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:56:45 +0000
ROA not before: Thu 30 Jul 2026 12:56:41 +0000
ROA not after: Wed 30 Jul 2036 12:56:41 +0000
asID: 399138
IP address blocks: 192.142.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3795 (0xed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:56:41 2026 GMT
Not After : Jul 30 12:56:41 2036 GMT
Subject: CN=6a6b4a0d-cc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:91:2f:b3:c1:a2:18:d0:71:37:7a:ed:63:
e2:60:35:4d:b4:c5:3d:33:a8:81:5e:40:d7:55:ec:
e3:d1:e6:b7:33:4d:c4:a9:62:76:64:06:d6:07:12:
0f:8f:ef:cc:7f:ca:08:5c:6d:e9:0f:e9:89:29:2d:
58:91:15:e1:d6:4c:7e:ac:bd:ff:56:f4:84:bf:57:
0a:5e:bb:b7:0b:88:45:ce:3a:d9:a2:b7:d7:21:be:
14:bd:0c:0a:d8:b8:75:02:a2:6e:62:53:cb:51:12:
ce:be:a6:d3:86:b2:3f:9f:92:a3:b7:bd:b4:36:56:
87:0c:f8:0f:01:4d:76:5b:97:a0:ab:f5:9a:ef:25:
15:93:c0:27:08:36:b4:e7:a3:e6:cc:4e:dd:c5:0d:
d8:5e:eb:fd:18:a6:35:fd:5e:de:4f:89:1a:9b:0e:
14:ed:21:cd:a2:11:a5:e8:d9:e7:94:6a:2e:3c:62:
2d:8b:be:71:a8:c0:bf:25:a0:50:0c:2d:18:e8:12:
e4:2a:8d:d3:d4:bb:2a:2f:5a:43:9f:a7:76:b7:e8:
b1:79:88:58:a4:48:33:dc:3e:fd:63:25:d5:67:ee:
7f:47:8e:53:de:f7:b2:64:6d:42:36:98:11:73:c7:
c0:ac:5a:07:2c:64:85:9b:4c:33:44:2e:48:d0:dd:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AE:75:64:26:F9:D6:E9:6B:20:80:44:C2:44:3A:9E:3F:A6:72:02
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E11B9D68C1611F1905DECB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.208.0/20
Signature Algorithm: sha256WithRSAEncryption
53:a6:a7:e5:3e:82:95:37:7e:24:1a:63:c2:a8:b7:71:69:f6:
6a:dc:d6:2e:f4:5f:e2:79:48:b8:a2:95:4b:d4:bf:52:d9:ec:
94:42:ec:32:24:f7:6f:5f:e1:eb:3b:a0:75:0d:a9:ce:38:2c:
98:9d:75:b1:ae:33:36:72:87:9c:b0:62:e7:4b:d5:ac:3a:d9:
db:e9:34:af:0d:aa:b0:2c:17:b2:a4:ef:f7:f3:8e:16:fd:ff:
3a:14:ba:66:f8:9c:49:fb:28:df:f7:16:48:95:36:58:43:9d:
62:91:45:0c:59:36:d1:e7:6c:ab:5a:4a:18:23:ee:57:91:e1:
80:ed:76:b9:d9:39:50:00:bb:f9:15:b7:7f:2f:83:31:75:f3:
c3:ec:01:32:c4:05:3d:33:61:de:19:69:54:6b:d7:5f:3a:90:
c7:ce:49:39:1a:7a:f8:17:94:c2:b8:ef:98:af:25:3c:db:1d:
80:4d:2c:5b:c9:07:b1:4d:63:02:9c:f5:ad:57:d4:e1:6f:22:
61:5d:ce:ff:fd:ba:ee:99:5d:09:9d:c4:da:e3:d4:66:45:ed:
c4:05:1b:b3:5c:b7:27:50:3e:6e:2b:29:79:22:84:c9:3e:67:
27:3f:af:45:c5:78:be:66:01:7e:ec:9e:d6:2f:d7:47:da:8e:
18:cb:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:55:38 2026 by rpki-client