Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6F673F548C1611F1B0E2D6B6CE1D38B0.roa
File: 6F673F548C1611F1B0E2D6B6CE1D38B0.roa (raw, json)
Hash identifier: AJjEOE6QBcD3671Tnz/1txWS1ehX4q97qdU0z1oLsrE=
Subject key identifier: B2:44:CF:55:50:79:F2:A7:8F:98:51:4B:95:54:64:A7:A0:32:3B:A8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ED7
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6F673F548C1611F1B0E2D6B6CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:59:01 +0000
ROA not before: Thu 30 Jul 2026 12:58:57 +0000
ROA not after: Wed 30 Jul 2036 12:58:57 +0000
asID: 399138
IP address blocks: 192.142.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3799 (0xed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:58:57 2026 GMT
Not After : Jul 30 12:58:57 2036 GMT
Subject: CN=6a6b4a95-36c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:57:69:aa:05:be:6c:dc:bd:00:0d:99:8f:
82:53:41:e2:99:18:d9:34:92:f5:dc:94:96:cc:4a:
9c:24:15:de:ef:fa:ef:60:f8:00:56:f4:4e:59:0f:
2b:d8:28:ed:fd:e0:b1:da:36:f4:68:5e:c2:4f:31:
5b:85:13:2b:dc:ac:65:a3:37:e9:c9:db:7e:f4:64:
e1:e8:05:e8:cf:a9:e2:2c:db:52:3c:67:0d:43:8b:
5e:29:14:b4:a5:76:c6:18:10:4c:48:cc:31:3a:16:
fb:1e:e7:6c:4d:2a:04:7c:85:8a:18:02:97:75:dc:
8e:1c:23:0f:00:9a:8c:06:05:1e:c8:16:a8:3b:7c:
1e:eb:c5:a7:fa:e9:b7:e5:21:f3:71:a3:94:32:99:
95:19:b5:c1:33:92:fe:03:04:e1:14:b6:a4:c2:55:
d4:1b:14:26:ef:a1:83:a6:9d:ed:8e:29:5f:27:c9:
81:14:d9:55:86:ba:61:09:51:87:23:a1:96:80:e6:
b0:ab:fe:f2:f8:40:63:bb:2b:e5:88:4a:90:a3:24:
61:17:76:a0:18:50:e7:56:28:5e:a2:0c:5b:c5:ee:
ec:61:95:80:90:3f:a4:5b:1d:4d:c6:e3:19:61:ea:
54:6c:c5:35:0e:00:fa:3f:d9:c7:91:25:44:e7:14:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:CF:55:50:79:F2:A7:8F:98:51:4B:95:54:64:A7:A0:32:3B:A8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6F673F548C1611F1B0E2D6B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.240.0/20
Signature Algorithm: sha256WithRSAEncryption
66:84:61:27:73:29:33:4d:b5:23:48:25:d6:2c:33:c7:f9:1d:
41:c7:e8:72:97:c3:87:62:8c:4a:c5:3e:f2:a7:36:0c:23:3a:
ba:19:de:ea:4f:92:a4:0f:f2:48:00:4a:a5:2a:2c:8b:c8:a4:
77:d6:25:ea:a3:6b:86:09:1f:0a:cc:e1:f6:ca:98:a8:c1:2f:
f7:23:a8:85:2e:bd:a3:53:28:a1:09:c4:bf:6a:7b:1f:7a:37:
e3:d3:cf:2f:57:dc:28:33:b5:3d:ae:83:25:5e:43:4a:da:af:
3a:b2:3f:84:86:87:6e:91:86:d3:81:f9:2c:5a:05:64:5f:a5:
29:66:ba:97:b2:ad:21:5e:01:e3:3b:b3:ae:92:cd:c1:b2:21:
45:50:f8:b2:f4:b4:17:56:fc:e3:0f:df:59:62:62:df:fd:f2:
8a:5a:9d:68:10:d4:ce:97:8c:a4:8d:6e:1e:59:4b:93:48:23:
6f:bd:8d:c7:12:de:23:35:e3:6e:8f:ba:7f:bc:4c:25:47:aa:
d7:5b:25:c7:62:da:51:03:e7:f2:92:2a:a8:1c:12:54:d5:ea:
fe:3c:cf:33:bd:7a:12:3c:df:78:d8:60:48:fe:b2:be:9a:00:
65:b6:54:60:d9:f2:b5:dc:56:96:cc:ed:88:d3:dc:31:e1:dc:
83:c7:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:56:50 2026 by rpki-client