Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6FBD02DCB3EE11F0B8554CC8DAE4EC9C.roa
File: 6FBD02DCB3EE11F0B8554CC8DAE4EC9C.roa (raw, json)
Hash identifier: drRKD2KFL1vdW9W2JdeE9tRqinQB1e5JktxkGe7A0q8=
Subject key identifier: 79:28:9C:6E:5F:3D:2A:D4:6E:05:44:46:B7:51:BE:3E:BA:B6:57:AC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0D7A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6FBD02DCB3EE11F0B8554CC8DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:08:31 +0000
ROA not before: Tue 28 Oct 2025 11:08:26 +0000
ROA not after: Tue 16 Oct 2035 11:08:26 +0000
asID: 214036
IP address blocks: 192.142.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3450 (0xd7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Oct 28 11:08:26 2025 GMT
Not After : Oct 16 11:08:26 2035 GMT
Subject: CN=6900a42f-e828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:bc:b0:b8:ac:e2:9e:0f:2c:c0:16:f6:fd:
1d:3f:88:55:dd:71:a6:60:54:f0:0c:57:07:fc:1b:
c8:3b:14:b3:00:ee:a1:9e:7e:06:d5:e3:a0:ba:d5:
79:cc:92:c7:fe:49:ad:a9:e2:18:8f:c0:10:83:fd:
8e:30:8a:d5:ee:0a:be:bb:4c:5e:73:56:c9:64:63:
ed:26:23:d7:52:82:1b:52:fc:01:dd:c2:cc:be:6c:
2b:16:01:d8:5a:d2:13:d1:56:87:49:4c:59:09:0d:
bf:a7:a0:94:cd:dd:1c:40:e1:b1:c1:20:b7:33:dd:
df:67:34:f6:6a:b1:36:c0:fa:64:f3:f1:2d:fa:d3:
99:de:9e:f8:4f:64:2b:ed:83:17:04:3d:30:10:6f:
89:a2:6f:7e:74:b9:89:88:cb:c1:2c:bc:1b:78:73:
3d:c5:14:26:19:50:54:74:19:46:d8:03:69:2b:41:
7b:f0:2b:96:8c:41:76:07:91:92:bb:5a:6e:c5:e6:
91:89:46:db:cd:fb:18:bb:ef:58:31:59:4e:c0:a5:
6d:67:e9:dc:38:64:79:87:91:4f:66:bd:e8:b1:36:
f0:57:3f:2e:18:ca:a7:fc:26:3f:97:c4:a3:80:59:
9c:7a:5f:b7:bc:03:05:52:68:48:aa:05:49:3f:c2:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:9C:6E:5F:3D:2A:D4:6E:05:44:46:B7:51:BE:3E:BA:B6:57:AC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6FBD02DCB3EE11F0B8554CC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.55.0/24
Signature Algorithm: sha256WithRSAEncryption
47:87:8f:96:5a:3b:4e:05:ed:de:a5:46:5e:cd:1b:4c:fc:6c:
24:ee:9c:f4:54:c7:f8:59:84:c1:70:04:21:f7:1c:c4:94:f0:
8a:35:21:1e:9c:7e:c0:3d:db:73:2c:08:eb:82:30:ea:f4:e9:
f9:40:45:f2:af:5d:98:c9:17:01:5c:8f:73:37:46:f7:93:8e:
af:0e:00:83:88:33:44:ef:37:7d:a3:9d:c4:35:a7:71:bc:c6:
be:9d:90:3e:20:37:09:1f:36:3e:3e:37:8f:8c:67:25:8a:17:
a2:92:ec:4f:1e:df:50:71:68:8c:e2:d1:c0:10:1d:6f:e2:fc:
ad:80:62:37:3d:43:be:99:50:6a:27:dc:36:3a:ce:72:21:11:
bc:af:2b:97:0d:b9:58:0b:7c:51:8d:c4:87:90:1e:59:bb:ca:
52:af:3a:d3:13:bd:24:78:cb:30:ca:54:33:a9:39:a5:e0:be:
ff:db:b1:ab:cb:94:1b:aa:12:ec:d2:22:55:16:b7:6b:cf:5f:
9b:6c:c3:6a:be:d4:72:9a:56:4c:9b:9b:16:3a:9b:70:22:6a:
f6:9c:64:0d:2e:14:ad:3a:88:4b:82:0d:d3:b9:cb:ad:9a:61:
fe:e0:db:54:b4:de:63:99:b6:24:1a:c0:75:1a:54:53:cd:b4:
d1:0b:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:16:11 2025 by rpki-client