Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D671248C1511F185B962B0CE1D38B0.roa
File: 22D671248C1511F185B962B0CE1D38B0.roa (raw, json)
Hash identifier: wnlelC67xlwE+7qLw2pVXeECsjo1Wbx1wkZhXdUimiU=
Subject key identifier: 5B:3E:CF:12:FB:52:38:C1:21:3B:6E:3A:CE:AF:88:A1:38:A3:9E:81
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0EC9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D671248C1511F185B962B0CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:49:43 +0000
ROA not before: Thu 30 Jul 2026 12:49:39 +0000
ROA not after: Wed 30 Jul 2036 12:49:39 +0000
asID: 399138
IP address blocks: 192.142.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3785 (0xec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:49:39 2026 GMT
Not After : Jul 30 12:49:39 2036 GMT
Subject: CN=6a6b4867-e398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:3d:ed:a3:0a:d3:64:41:8c:f6:60:56:d5:
68:73:bc:ec:db:3a:d7:1e:22:36:8b:e3:f2:64:3e:
7d:7c:4d:81:22:cc:be:f4:ab:e4:27:bc:77:1f:cd:
91:34:78:c1:f8:73:a5:c1:05:8f:fe:61:48:a9:d7:
14:18:fe:dc:52:68:d3:d8:46:d6:34:39:ce:84:ad:
81:02:cd:23:0b:78:c3:b9:e0:7e:01:f2:ec:2c:5f:
f7:b6:f8:dc:f8:17:7b:7b:f7:b0:72:42:51:a6:45:
27:a4:3b:97:a3:a7:a6:cb:32:cb:87:88:98:6b:f6:
82:43:8d:fa:20:1b:65:45:d2:d6:5f:8e:9d:78:4c:
b5:45:56:f3:bd:80:57:98:8d:d9:14:4d:36:19:a7:
73:90:4c:80:9c:41:f2:cc:96:e5:0f:d6:d7:9a:0a:
51:e1:a0:bd:fb:2f:a6:74:7b:bc:8a:12:dd:85:da:
43:31:72:40:01:7d:6d:e0:77:e2:3f:c1:e3:2f:70:
94:64:a3:99:41:75:66:45:f9:88:9c:f3:ef:de:5f:
d1:b2:4b:40:49:97:c7:de:48:a4:61:cf:8d:3e:b7:
33:d6:bc:b9:45:f4:3f:f3:3a:7f:ce:af:fc:96:19:
b0:46:ff:7a:84:d8:b9:e1:16:12:db:0f:bd:46:97:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3E:CF:12:FB:52:38:C1:21:3B:6E:3A:CE:AF:88:A1:38:A3:9E:81
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D671248C1511F185B962B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.64.0/20
Signature Algorithm: sha256WithRSAEncryption
87:12:f3:a8:08:c9:49:c7:d8:3f:12:c6:44:c3:8b:75:75:24:
aa:4e:09:6f:ae:0f:26:ba:1e:8c:d6:fa:d5:22:41:04:ca:5b:
6a:87:38:27:49:66:33:eb:62:b6:16:17:c4:69:86:5e:a8:8c:
89:34:b2:10:57:59:52:82:2e:e1:f9:ab:78:ec:64:25:8e:5c:
ec:2e:2d:0d:57:61:1d:77:a7:04:60:41:b2:09:d5:21:e1:c1:
97:b7:b9:e6:75:5a:3d:ca:7e:02:58:e7:8e:1e:85:59:42:cf:
c8:f3:c6:d4:59:93:07:6c:fe:fd:7a:fc:ba:eb:f2:7e:9c:f6:
0b:6d:d9:4f:6f:7b:70:10:0a:e1:b3:b7:f7:ac:2d:a9:81:c8:
ab:53:a0:72:45:ec:1d:e5:7c:79:01:b1:bd:2d:69:e0:7b:61:
be:42:89:a9:b0:25:56:08:c7:39:6c:81:6f:91:8e:24:a0:8e:
05:0e:f2:db:dd:7f:0d:05:fa:8c:c9:b9:62:61:05:e5:0e:c7:
40:c9:9e:69:93:64:a7:fa:61:29:20:36:96:7c:a1:5e:59:00:
64:41:9a:83:5e:c0:b6:67:1e:b1:2b:1f:7d:5a:15:ea:84:ba:
e1:c1:d9:47:f6:22:bc:59:aa:e1:74:90:aa:58:c0:9a:92:d5:
d1:41:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:53:52 2026 by rpki-client