Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/792AC6FE12EB11F1BBA063D8DAE4EC9C.roa
File: 792AC6FE12EB11F1BBA063D8DAE4EC9C.roa (raw, json)
Hash identifier: FV1HvGKo7J9l7FcHYxqEX2NlNmbKW3p4kjuZ3Nc4JAI=
Subject key identifier: 3A:E8:9D:B5:A1:56:3E:29:61:07:5A:7F:BC:E7:72:6C:EA:6D:12:40
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0E13
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/792AC6FE12EB11F1BBA063D8DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 08:16:39 +0000
ROA not before: Thu 26 Feb 2026 08:16:34 +0000
ROA not after: Tue 26 Feb 2036 08:16:34 +0000
asID: 208959
IP address blocks: 192.142.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3603 (0xe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 26 08:16:34 2026 GMT
Not After : Feb 26 08:16:34 2036 GMT
Subject: CN=69a00166-7517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:ef:eb:3d:2b:a3:8d:e6:7b:ba:e1:02:d9:
a8:36:3b:dc:8a:01:6b:86:f9:6a:fa:5a:67:ff:2a:
6b:8c:c6:47:7f:e9:c0:44:f2:f2:21:b3:71:05:6b:
0e:f6:de:e5:8a:94:54:08:d0:9e:96:35:95:e1:b5:
c0:44:bf:d7:27:b7:3d:24:71:cc:a2:de:63:15:0f:
09:76:fb:4d:59:df:70:53:f4:ae:82:86:fa:e7:6c:
3b:03:9f:70:ff:46:19:aa:d4:78:0f:21:cb:e2:3d:
d0:43:5e:de:75:49:c0:e4:0e:48:71:a8:ee:7c:96:
e2:0d:37:90:65:68:38:b9:14:e7:6c:a4:25:90:3b:
f8:4c:87:03:61:48:70:df:6b:27:95:94:38:66:0e:
3e:9a:79:63:72:7a:cd:24:97:6b:e7:db:b1:e3:46:
f9:47:f3:e8:47:f0:ea:be:fa:e0:6c:08:af:70:4e:
b6:26:4e:16:4e:b5:02:9e:f3:44:26:c5:2f:03:6b:
88:14:da:8d:59:81:b3:42:a7:f7:56:bc:0c:f3:68:
ee:51:9f:e4:fb:b4:48:72:04:63:9c:6f:cb:42:0f:
20:0e:60:c0:7f:76:4c:82:ab:11:a2:dd:97:73:21:
00:20:aa:c8:4d:a5:69:da:45:0d:6e:84:65:42:7d:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:9D:B5:A1:56:3E:29:61:07:5A:7F:BC:E7:72:6C:EA:6D:12:40
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/792AC6FE12EB11F1BBA063D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:82:c9:03:35:a9:fb:b3:a0:fe:a0:03:aa:43:fd:a8:75:43:
9f:82:a4:d6:a8:03:b7:e5:71:88:63:20:89:05:46:53:d0:23:
29:01:dd:52:ae:17:98:f8:ad:ec:66:55:b9:c8:af:bb:c2:cb:
38:e8:2a:2f:4b:14:7d:e8:af:de:f7:4b:a4:f7:cc:aa:ec:e5:
1b:11:1b:53:cb:1f:33:38:92:cb:0d:be:f0:aa:68:a7:fa:cc:
35:fb:74:fb:63:d1:6b:b5:64:59:d2:29:ca:70:8c:08:0d:05:
12:c1:3b:c8:1e:27:2d:de:cb:8e:93:f6:e3:c7:7e:14:4b:25:
71:48:a0:9d:d0:81:23:65:f0:ce:90:c1:a9:6d:83:2d:e0:7a:
45:b5:19:fd:5f:c6:17:68:5f:4c:80:67:57:5c:66:2f:5a:27:
ca:3f:e3:18:0e:99:0f:7b:01:58:53:2d:b5:91:5e:60:68:3a:
9b:a3:dd:ad:7a:b4:e4:4c:73:f8:07:c5:12:98:4e:b6:73:5f:
4f:d3:29:3e:ef:98:b0:59:e8:f7:3a:77:d4:7e:02:f6:35:83:
04:02:8d:dc:14:09:f3:fe:56:2b:e0:60:b7:d7:91:00:2c:9f:
2c:43:c6:16:71:53:0a:96:4b:c9:1a:96:57:d4:29:5d:be:22:
7e:66:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:31:54 2026 by rpki-client