Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C7EF85E9AE611F1851FF61ACF1D38B0.roa
File: 4C7EF85E9AE611F1851FF61ACF1D38B0.roa (raw, json)
Hash identifier: 8g3CxVWM2DLE6FThs7iQeUXmCDjnsmiQu45LMT/lO9g=
Subject key identifier: 3F:5A:BB:E0:B7:FE:98:E5:40:BA:5A:C8:5C:12:99:20:62:5A:79:E6
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0EFA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C7EF85E9AE611F1851FF61ACF1D38B0.roa
Signing time: Tue 18 Aug 2026 09:22:14 +0000
ROA not before: Tue 18 Aug 2026 09:22:10 +0000
ROA not after: Mon 18 Aug 2036 09:22:10 +0000
asID: 3257
IP address blocks: 192.142.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3834 (0xefa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 18 09:22:10 2026 GMT
Not After : Aug 18 09:22:10 2036 GMT
Subject: CN=6a842446-33c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:61:85:91:36:13:dd:cb:e4:61:be:a4:8c:
e2:09:12:34:0a:61:56:14:75:f9:5e:bb:80:2a:f1:
ee:28:c3:0b:bd:e3:51:3e:1a:b3:ab:6f:77:b0:6b:
92:d4:36:f5:c9:15:a6:51:82:1c:0b:78:46:37:49:
dc:30:ef:2e:51:b3:78:9e:0f:bf:93:b5:a3:f5:a0:
d9:a1:a3:f2:9b:de:4c:f1:00:1a:ea:d3:95:66:b6:
15:80:27:24:48:63:f7:e7:89:b7:17:5c:d9:c0:53:
95:ef:30:09:e3:9e:7f:47:52:8b:d9:2c:04:c4:55:
5c:01:5d:b1:32:13:a7:2b:4e:8e:32:0c:af:70:2e:
68:2a:56:ff:d8:84:87:78:3c:2e:16:b0:84:f8:f3:
08:41:1e:ad:0d:df:a5:4b:bc:5a:e7:db:72:7f:30:
29:26:b3:d0:4f:33:f3:f1:c4:8b:7e:7e:fe:15:8a:
10:68:22:2e:eb:6e:fd:8d:df:d6:12:b4:11:1e:27:
20:00:92:2b:b4:22:c1:17:a4:a7:87:98:08:f7:03:
52:ec:98:ea:bb:b5:42:22:38:5b:92:51:a6:78:1d:
53:51:84:e1:22:8b:5d:80:9f:4e:70:5e:80:47:e5:
e9:f2:0e:43:b2:67:8f:a6:2d:5c:1a:17:c7:f1:50:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:BB:E0:B7:FE:98:E5:40:BA:5A:C8:5C:12:99:20:62:5A:79:E6
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C7EF85E9AE611F1851FF61ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:2d:92:4d:4e:9c:9a:18:52:e9:9a:9a:2a:63:87:1b:11:69:
5d:03:ee:0c:86:71:38:d1:b1:af:71:b7:09:07:f9:a9:00:1e:
0c:1b:0a:2f:f4:a8:43:b8:5c:82:15:4c:bc:fa:47:b9:07:3d:
ad:44:71:8d:3d:ce:8c:ea:bf:bc:de:98:ec:b6:85:ef:b5:30:
88:2d:d5:4d:68:02:46:c1:7e:2d:ad:4e:d6:85:d5:56:d3:b5:
5a:e2:b8:79:dc:37:a9:cb:a2:14:dd:7e:9f:8b:7c:b6:28:6d:
07:3e:63:37:dd:2e:37:2b:fd:47:26:ff:56:07:38:f4:a5:ce:
c9:34:40:3d:d0:96:e5:32:78:35:43:cd:f2:cf:94:9b:39:40:
39:1b:cd:3a:a8:4d:c4:a0:1d:f0:73:96:9e:f6:c7:3e:c3:f0:
50:c4:21:ea:63:f7:8e:0c:79:39:8b:9e:de:3f:0c:4a:c0:d8:
46:a4:5d:44:4d:1c:69:70:0b:f9:d5:cf:9e:40:7d:d5:84:f2:
f6:9c:ad:6f:c0:69:b1:e9:89:92:f7:1a:ab:a7:af:d7:58:30:
c2:eb:20:82:53:67:96:b7:e7:16:12:2c:50:6b:28:03:05:18:
8f:f1:df:42:d9:90:25:c2:92:13:13:b7:ec:62:95:10:24:ec:
57:be:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 09:56:13 2026 by rpki-client