Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4DE35EB88C1511F1A456C6B0CE1D38B0.roa
File: 4DE35EB88C1511F1A456C6B0CE1D38B0.roa (raw, json)
Hash identifier: Hl6q/txgB4MLL8iwlpagaoyIhFqQYTpNXRLVDmbAIOg=
Subject key identifier: 33:35:26:F4:98:B4:A4:37:68:CF:2A:1F:0A:BD:06:A5:CF:DE:84:E0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ECB
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4DE35EB88C1511F1A456C6B0CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:50:56 +0000
ROA not before: Thu 30 Jul 2026 12:50:52 +0000
ROA not after: Wed 30 Jul 2036 12:50:52 +0000
asID: 399138
IP address blocks: 192.142.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3787 (0xecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:50:52 2026 GMT
Not After : Jul 30 12:50:52 2036 GMT
Subject: CN=6a6b48b0-e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:9f:bf:27:28:56:51:ef:7e:44:a8:6a:98:
20:6b:54:56:66:9c:77:c2:ec:f4:20:6f:f4:26:c7:
77:7b:31:81:ba:fd:be:a9:f2:96:9e:7a:2e:c6:e7:
b2:78:e3:b2:1e:44:11:3d:f6:71:b3:24:17:e8:57:
97:8c:fb:b1:ec:93:8f:07:21:be:17:14:2b:ee:3c:
35:d0:9c:10:5d:e8:ba:45:fc:68:af:6f:fe:a8:c2:
4b:26:75:09:19:2e:00:43:89:be:7f:74:90:2f:98:
2f:d0:f0:f2:68:6e:3e:dc:ce:8d:09:a8:32:50:11:
ed:4c:5e:16:22:97:80:53:db:2e:ab:97:13:5e:f7:
ff:82:ae:47:fa:50:51:15:76:c7:24:4c:fc:3c:a6:
57:30:eb:f5:44:24:d4:3e:94:b4:8c:ec:8c:29:17:
38:f7:e5:6e:50:7d:3f:e5:74:2e:ec:e7:75:f5:b6:
95:2f:43:59:29:6c:a3:2c:31:16:0c:79:10:69:75:
86:45:49:f2:2c:dc:b0:f6:32:7d:3f:1b:69:c4:2c:
5e:1c:ce:2d:bd:ba:64:ab:07:72:ec:d3:ad:13:6d:
63:06:40:b9:60:87:18:7a:d9:00:a5:66:bf:02:19:
9f:e4:33:39:ac:d8:f3:83:f2:0a:79:79:3a:eb:39:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:26:F4:98:B4:A4:37:68:CF:2A:1F:0A:BD:06:A5:CF:DE:84:E0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4DE35EB88C1511F1A456C6B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:e9:53:e4:98:56:b1:60:74:70:7c:9d:71:86:d4:39:8c:d2:
c9:e7:a3:2c:c8:34:cf:67:ce:e2:20:da:02:49:24:42:cd:7d:
4d:2b:8a:80:fd:b6:0e:e3:51:48:68:02:b4:09:17:df:9a:83:
b7:71:eb:3d:da:c1:5b:48:46:9d:8a:cc:dd:05:8c:37:00:47:
c2:f5:ff:b5:50:7b:5f:1e:cc:c6:8b:b2:3f:ee:73:01:c2:53:
4a:43:79:84:e4:f2:a8:4b:56:18:33:97:76:2f:fa:c1:a4:d9:
4f:e0:22:f1:b4:3b:01:92:b1:68:b5:e5:a6:19:f7:44:13:30:
10:a3:38:4c:23:41:e5:11:ba:78:82:d7:95:f6:31:1a:e5:99:
cb:ff:77:6c:a7:c2:eb:87:32:db:d5:0b:3b:64:c6:79:ee:c3:
37:69:91:ef:96:36:57:59:bf:95:a2:36:3b:a8:98:8e:7f:43:
2e:b4:31:47:53:ce:0c:f6:b8:4c:07:d9:f2:fb:c7:64:65:e9:
bc:5a:fe:2b:1e:98:c5:24:da:25:93:37:47:8f:2e:72:1d:5f:
3f:90:46:38:d9:eb:37:99:5b:4a:89:52:c0:65:0d:fb:f2:f3:
1e:62:11:a4:81:0a:90:01:66:8a:54:73:73:30:ac:a4:37:d3:
12:b8:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:56:10 2026 by rpki-client