Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1FE993DC5A6111F1B1832509CF1D38B0.roa
File: 1FE993DC5A6111F1B1832509CF1D38B0.roa (raw, json)
Hash identifier: l2w150T6gb4BUNgTixqQHv4qUawa0PwWA6QK/WYn8NE=
Subject key identifier: 29:EE:6D:12:FD:6B:84:D6:1F:18:17:EE:4D:BB:D0:73:C2:21:3B:72
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0E79
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1FE993DC5A6111F1B1832509CF1D38B0.roa
Signing time: Thu 28 May 2026 06:47:42 +0000
ROA not before: Thu 28 May 2026 06:47:38 +0000
ROA not after: Wed 28 May 2036 06:47:38 +0000
asID: 141777
IP address blocks: 192.142.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 30 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3705 (0xe79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 28 06:47:38 2026 GMT
Not After : May 28 06:47:38 2036 GMT
Subject: CN=6a17e50e-8374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:47:9d:26:56:81:f5:47:7d:dc:2c:6b:93:
93:17:0b:fa:95:33:fc:0c:f4:c7:e4:c4:ba:a8:87:
76:8a:99:3b:da:cc:05:3b:85:f8:f5:90:13:10:f1:
66:ef:b1:a4:57:58:89:dd:70:0d:e4:73:40:68:9c:
d4:6d:68:ed:7e:99:e6:dc:22:bb:27:87:b8:11:4f:
a7:82:b2:ec:22:47:64:97:61:4f:0d:6d:8b:2c:88:
46:19:9c:f4:47:10:68:1a:f3:a1:3c:b2:11:1a:c6:
fb:a6:a1:3a:1e:3c:96:ed:dc:fd:c5:17:3a:33:b8:
50:0d:7e:5c:10:8e:13:90:c9:78:50:02:41:3d:79:
d4:0f:4d:41:27:1c:32:b3:a3:05:b2:ce:76:8d:52:
b7:e0:87:a9:3d:a4:f4:1e:0e:c7:0c:cf:62:52:01:
31:5a:51:43:f9:94:0a:78:56:01:e9:bf:b8:46:24:
b8:ec:a4:dd:37:54:f3:20:f6:1d:2a:3b:0c:e5:b4:
eb:17:d1:39:2b:5a:cb:c2:d2:77:d8:5f:c8:3a:aa:
8c:6d:d4:fc:77:fc:43:bc:eb:c1:5d:3f:31:e9:e8:
17:e3:84:25:68:cd:a2:50:5e:f7:08:82:77:cb:ec:
70:f7:94:e9:d7:3a:31:b1:62:95:ac:31:76:f6:43:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:6D:12:FD:6B:84:D6:1F:18:17:EE:4D:BB:D0:73:C2:21:3B:72
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1FE993DC5A6111F1B1832509CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.16.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b0:9d:db:95:f0:dc:41:80:e6:bd:79:df:43:5a:26:8d:54:
15:5c:ad:a9:5d:9b:9f:fa:6d:c6:ff:a3:88:86:9b:8b:1e:65:
b3:b4:9e:0c:a5:d3:e1:a5:01:c2:28:eb:07:17:0f:3b:6f:3c:
23:5e:1b:15:28:3d:b6:0b:92:6d:00:5c:3a:bf:97:95:92:6a:
33:9f:aa:37:bf:5f:4a:0d:6f:51:7d:32:01:ae:f0:8c:cf:82:
05:29:50:73:56:1f:8a:17:45:46:62:02:8d:e0:70:53:85:38:
3e:c7:03:a3:08:57:26:a4:72:65:b6:f7:35:ac:92:bd:82:92:
48:fd:6c:a6:8f:40:69:ed:74:75:c9:d7:6b:c6:6e:bd:64:d7:
e9:56:82:2a:a8:e2:a9:f5:91:e1:66:4a:4b:da:e6:b5:8e:b3:
3f:a0:c7:bc:ad:89:ff:1f:b8:c7:e4:8b:33:e9:fb:07:c5:f5:
34:f6:d2:42:6a:12:96:50:30:9f:72:82:fd:78:d8:b1:ac:15:
fc:1f:a8:c6:13:1a:5f:b6:35:87:e9:71:53:08:87:0e:9b:00:
e8:8d:6c:6d:da:67:31:bd:bd:06:36:92:8b:b9:aa:5d:78:cd:
e2:b1:2b:02:47:1e:14:bd:13:8b:f9:9c:48:e1:a9:a3:2b:36:
91:bc:3c:05
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDnkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNjA1MjgwNjQ3MzhaFw0zNjA1MjgwNjQ3MzhaMBgxFjAU
BgNVBAMTDTZhMTdlNTBlLTgzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWlUedJlaB9Ud93Cxrk5MXC/qVM/wM9MfkxLqoh3aKmTvazAU7hfj1kBMQ
8WbvsaRXWIndcA3kc0BonNRtaO1+mebcIrsnh7gRT6eCsuwiR2SXYU8NbYssiEYZ
nPRHEGga86E8shEaxvumoToePJbt3P3FFzozuFANflwQjhOQyXhQAkE9edQPTUEn
HDKzowWyznaNUrfgh6k9pPQeDscMz2JSATFaUUP5lAp4VgHpv7hGJLjspN03VPMg
9h0qOwzltOsX0TkrWsvC0nfYX8g6qoxt1Px3/EO868FdPzHp6BfjhCVozaJQXvcI
gnfL7HD3lOnXOjGxYpWsMXb2Q3aPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKe5t
Ev1rhNYfGBfuTbvQc8IhO3IwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzFGRTk5M0RDNUE2MTExRjFCMTgzMjUwOUNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjhAwDQYJKoZIhvcNAQELBQAD
ggEBAFKwnduV8NxBgOa9ed9DWiaNVBVcraldm5/6bcb/o4iGm4seZbO0ngyl0+Gl
AcIo6wcXDztvPCNeGxUoPbYLkm0AXDq/l5WSajOfqje/X0oNb1F9MgGu8IzPggUp
UHNWH4oXRUZiAo3gcFOFOD7HA6MIVyakcmW29zWskr2Ckkj9bKaPQGntdHXJ12vG
br1k1+lWgiqo4qn1keFmSkva5rWOsz+gx7ytif8fuMfkizPp+wfF9TT20kJqEpZQ
MJ9ygv142LGsFfwfqMYTGl+2NYfpcVMIhw6bAOiNbG3aZzG9vQY2kou5ql14zeKx
KwJHHhS9E4v5nEjhqaMrNpG8PAU=
-----END CERTIFICATE-----
Generated at Thu May 28 18:54:09 2026 by rpki-client