Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/465229F4B3EE11F092BD47C8DAE4EC9C.roa
File: 465229F4B3EE11F092BD47C8DAE4EC9C.roa (raw, json)
Hash identifier: PqI1M/H6LjXVDZ4ynZDm0sDn95L6n200nbVXGe3qY9U=
Subject key identifier: 8C:BC:38:0E:A7:FF:BD:4D:A5:2F:A6:B2:7A:0A:2B:27:FD:19:14:B2
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0D78
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/465229F4B3EE11F092BD47C8DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:07:21 +0000
ROA not before: Tue 28 Oct 2025 11:07:16 +0000
ROA not after: Tue 16 Oct 2035 11:07:16 +0000
asID: 32415
IP address blocks: 192.142.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3448 (0xd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Oct 28 11:07:16 2025 GMT
Not After : Oct 16 11:07:16 2035 GMT
Subject: CN=6900a3e9-ed6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:b3:ea:2e:09:02:01:b9:29:e1:90:b3:3b:
38:d3:4e:a1:ab:dd:ac:5d:75:e6:3b:9f:15:a3:9e:
e0:73:1a:d1:e5:36:ab:b3:39:e4:3c:a2:c4:64:47:
98:47:56:be:3c:2b:5c:86:54:68:5d:e6:32:3d:32:
0b:17:cd:7c:4e:c7:26:e0:17:0a:6e:7c:78:5d:e1:
33:95:42:7f:f4:96:9b:5f:f3:72:a4:09:6a:9f:dd:
ef:94:49:14:7f:3f:ae:72:2a:6c:3c:4d:e0:ea:d7:
d4:1c:b2:71:9a:43:c9:2d:1f:11:99:37:95:98:86:
ff:10:16:1b:ec:1f:58:aa:3b:33:38:3a:35:3e:3c:
f4:95:de:63:04:fd:49:d2:d1:fa:c8:b1:3a:2c:fa:
b4:59:91:4a:f5:8d:83:e1:99:4c:cb:04:0e:83:f4:
48:9e:8e:dc:19:61:30:d6:bb:c5:f7:37:0c:51:8d:
99:ef:8b:b9:e9:a1:50:85:6b:ce:9d:6a:b8:04:6b:
b9:7f:6c:f7:29:89:a5:c6:20:c7:b3:08:0a:cb:db:
e6:6b:23:0d:94:8e:92:7e:e4:d3:3e:0a:50:9b:37:
a3:17:6d:4d:95:cf:ea:51:69:54:64:67:06:a3:6d:
0f:39:e2:15:ef:ff:f3:37:2c:28:93:72:34:e3:d9:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:38:0E:A7:FF:BD:4D:A5:2F:A6:B2:7A:0A:2B:27:FD:19:14:B2
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/465229F4B3EE11F092BD47C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.32.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e9:aa:ba:f7:eb:f7:a6:c6:97:bd:04:76:41:92:ea:dc:17:
f8:3d:78:fb:05:5c:b2:75:9a:67:35:77:96:ac:11:c5:00:2d:
00:1d:64:03:5c:7f:02:14:88:84:ce:de:ab:94:42:df:00:ad:
db:2e:86:62:34:62:be:e9:d3:cd:27:d0:d6:2b:d0:7f:cb:80:
da:f9:7b:16:8a:41:4c:09:b2:47:bb:11:51:3d:ed:63:99:37:
f5:87:5e:49:ba:45:71:c7:96:2d:7f:c3:36:c5:d4:34:ac:3f:
ed:02:9d:17:cc:bc:8a:1b:3f:a1:b0:6b:f8:55:e5:19:7c:15:
36:aa:06:7c:c2:f6:e6:3a:bf:9e:d4:31:e0:83:93:88:5e:9a:
d8:54:49:de:70:fd:62:7d:0d:5f:04:f4:06:f1:5c:28:52:f1:
b5:c5:e8:96:30:7e:31:05:dc:88:6c:b4:78:2c:e1:fa:a0:de:
7a:e4:a7:69:af:0f:b8:60:8d:a5:c7:13:26:af:0b:62:3f:c4:
b0:d0:15:61:91:6a:2a:f8:f7:94:d0:a2:75:74:6b:90:61:4b:
78:7e:c4:a5:86:b6:78:20:a3:db:fe:eb:c1:cd:dc:ef:1d:d7:
06:0e:56:63:1a:b4:c3:9d:91:be:0b:df:da:f6:7e:f6:37:bb:
e5:46:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:16:11 2025 by rpki-client