Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/443D61DC8C1611F1B170F7B4CE1D38B0.roa
File: 443D61DC8C1611F1B170F7B4CE1D38B0.roa (raw, json)
Hash identifier: KZp0cRVYX85iyWmj7q0tz1Dh4M50wMsbhERrN+kVn/E=
Subject key identifier: 6A:02:11:29:27:F0:E0:14:83:E3:0F:A1:4D:98:54:C7:F3:CF:C7:99
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ED5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/443D61DC8C1611F1B170F7B4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:57:49 +0000
ROA not before: Thu 30 Jul 2026 12:57:45 +0000
ROA not after: Wed 30 Jul 2036 12:57:45 +0000
asID: 399138
IP address blocks: 192.142.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:57:45 2026 GMT
Not After : Jul 30 12:57:45 2036 GMT
Subject: CN=6a6b4a4d-d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:df:a9:45:8a:fb:d4:21:74:3f:df:e6:41:
91:4d:52:89:28:f4:d3:3d:46:ee:68:6d:0b:03:10:
2f:4b:e5:c6:ea:55:11:68:8e:93:cf:43:92:30:e4:
5e:ed:b2:27:b9:d6:72:5c:b3:f1:dd:71:10:11:da:
a6:f5:d5:e1:4d:fe:74:0c:84:90:68:d7:6b:1c:ed:
7c:05:0e:3b:f5:90:cb:c9:87:f0:62:b7:5d:db:af:
2d:b5:ee:2b:ec:3d:b0:91:1c:90:6c:62:f3:f4:95:
88:97:12:6a:69:6e:5a:b1:00:88:f3:a8:aa:44:e4:
66:32:61:a8:7a:fe:b0:1f:07:44:98:12:63:26:e7:
0c:39:fb:66:f4:4d:0f:9c:43:a5:9b:c8:6a:8f:ff:
50:bf:9b:30:99:c8:8c:1f:87:bd:50:8f:3f:72:ec:
cd:d9:2e:6d:15:75:76:48:0f:8f:9b:0d:57:93:70:
6d:e6:8c:d6:f4:ff:07:80:0f:00:e9:c6:36:78:03:
cb:94:2e:7a:7e:b7:67:a3:fd:a9:2f:b6:d3:11:a5:
f3:09:b2:fc:a0:ba:62:4a:f5:c4:2b:90:b0:fe:d4:
f8:47:7c:02:43:b3:f2:04:f4:07:8f:12:c1:f1:67:
b5:72:7d:f4:8e:e8:50:4b:c1:b4:ce:5a:12:a1:13:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:11:29:27:F0:E0:14:83:E3:0F:A1:4D:98:54:C7:F3:CF:C7:99
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/443D61DC8C1611F1B170F7B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.224.0/20
Signature Algorithm: sha256WithRSAEncryption
15:1f:3d:0f:d0:4a:3a:7a:62:60:4f:22:50:b9:c2:42:b1:d4:
06:95:b4:be:dc:bf:7c:bf:f9:6e:0f:73:00:b5:6f:e8:ff:66:
18:bc:a2:fd:d2:75:94:b5:4c:d5:cf:e4:dd:89:18:3d:78:65:
85:a7:73:16:69:2f:18:f4:c2:11:1c:5e:c2:4a:f5:69:67:e7:
7a:1e:da:f6:e3:55:3c:18:22:a3:45:d3:bb:e2:cf:5c:22:02:
52:0b:a3:bc:f0:4c:d1:54:38:03:8b:9b:0f:f3:13:a8:fc:88:
75:45:f2:74:23:06:c9:de:11:3f:ad:b1:33:97:6e:c7:5d:56:
6d:13:dc:6c:17:f1:1c:7c:07:a9:05:92:75:57:3c:6d:0f:ec:
d2:41:f9:af:77:c8:ad:50:fc:4a:09:c7:5f:2e:85:00:13:ea:
30:8f:b6:40:c3:fc:16:42:24:12:a0:0a:c3:3a:c8:4f:cf:8c:
c6:44:af:74:d9:f9:c8:41:f1:22:9a:fb:1f:e4:65:9a:63:d0:
af:1b:01:78:58:00:8a:f9:02:ba:39:03:e8:6b:e1:2a:64:ec:
a2:dc:e3:23:ac:d6:20:05:10:5d:8e:c6:d8:2b:63:09:07:3c:
35:32:d0:23:5d:f4:d2:03:ee:f9:25:21:a4:c7:04:6d:73:c6:
16:96:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:56:11 2026 by rpki-client