Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1FE657D65D8011F1A9246D02CF1D38B0.roa
File: 1FE657D65D8011F1A9246D02CF1D38B0.roa (raw, json)
Hash identifier: b0kUZPE4+ZcvfHwCbq7krSjUiUquEbjEmHCVTgwig94=
Subject key identifier: 95:98:F4:60:61:96:98:05:63:EB:2D:71:C0:08:F9:35:C5:6A:97:95
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0E81
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1FE657D65D8011F1A9246D02CF1D38B0.roa
Signing time: Mon 01 Jun 2026 06:07:10 +0000
ROA not before: Mon 01 Jun 2026 06:07:01 +0000
ROA not after: Mon 02 Jun 2036 06:07:01 +0000
asID: 198077
IP address blocks: 192.142.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 01:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3713 (0xe81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 1 06:07:01 2026 GMT
Not After : Jun 2 06:07:01 2036 GMT
Subject: CN=6a1d218e-6614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:e3:55:36:3b:ef:d0:2e:70:77:b1:f6:20:
f7:c0:6f:9d:ff:b9:1f:a7:ad:99:ed:b4:60:ec:5c:
5d:4f:bb:bb:1a:78:04:fe:00:50:ec:0e:b0:92:1a:
84:6f:85:71:eb:3c:36:ff:4f:26:f3:53:4a:44:eb:
b5:2b:05:d1:42:70:06:6a:04:b9:b5:21:db:95:71:
6d:37:17:55:e7:85:17:ea:1d:b5:d6:f8:e7:87:2d:
c4:ca:51:58:32:8a:03:5c:fb:63:38:ee:61:35:f1:
ea:cc:4b:d8:27:01:57:5b:07:00:60:ec:a1:de:b8:
e4:e6:84:1c:24:13:2d:ee:ea:18:6a:57:47:d7:77:
c9:02:96:50:96:c7:9e:b1:3e:f9:46:ae:12:08:94:
98:9a:16:a1:89:d2:73:4b:45:2c:12:8f:a7:b3:38:
e7:ee:24:63:7b:44:e1:c0:c7:f4:ed:76:62:71:d8:
b9:48:6c:96:dc:e6:2b:ef:62:79:94:ea:4c:a9:9a:
a3:f8:2f:bf:fd:06:cf:aa:80:91:0f:f3:03:60:cc:
f6:77:9d:04:52:83:25:ba:1f:74:23:a2:8e:6e:db:
08:d9:e1:13:1b:a3:64:b6:78:92:d9:bc:78:8e:0a:
aa:18:70:58:86:1d:54:63:55:5f:f3:9d:61:ca:9c:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:F4:60:61:96:98:05:63:EB:2D:71:C0:08:F9:35:C5:6A:97:95
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1FE657D65D8011F1A9246D02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.23.0/24
Signature Algorithm: sha256WithRSAEncryption
01:69:0e:5d:6c:83:f1:33:3a:78:8b:30:00:cf:37:df:55:fd:
a2:a3:64:e0:e0:30:01:61:66:6e:28:46:1d:2f:97:43:4d:87:
8f:e1:7a:a9:0e:44:ba:dd:40:9c:50:08:9b:e4:2f:b0:c8:22:
61:fd:93:ee:13:0f:5b:86:b4:69:14:40:53:99:2b:f3:01:e7:
93:f7:be:37:64:02:8a:93:93:8d:af:81:f0:7a:5b:69:5d:dc:
3a:27:42:89:b3:ec:59:7f:cd:af:5e:67:8d:1d:cb:87:0c:e7:
4a:6c:55:50:03:5a:f8:65:b1:2e:56:a2:60:08:de:37:8c:71:
14:b7:31:38:6c:94:c8:ea:6f:fc:87:da:cf:df:5e:f7:fc:a8:
d5:6a:9b:db:06:d1:8e:30:1f:7f:7b:08:7a:ad:18:5e:49:1c:
97:0c:a8:3d:04:2c:24:9a:48:2e:7a:50:e8:99:52:ca:5c:92:
01:e8:06:2f:c2:b8:97:d4:90:3a:f9:54:5d:46:f0:db:81:dd:
e0:70:b2:6e:dc:40:5d:27:5f:61:e6:a5:2e:d2:d7:43:74:b0:
8b:51:28:6e:22:57:e2:12:9c:6e:e5:bc:7d:c0:e8:4c:4a:8e:
c4:4f:55:40:98:3c:27:26:2c:57:3d:83:54:c4:5d:0a:b0:39:
9f:3b:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:31 2026 by rpki-client