Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/85646DF6810611F1A0DAD9BBCE1D38B0.roa
File: 85646DF6810611F1A0DAD9BBCE1D38B0.roa (raw, json)
Hash identifier: B7JSdpCDvdCowhd8fItl2q3YSW6S80IDRQehjHkIeM0=
Subject key identifier: 48:BE:47:1C:3B:81:C9:9E:C2:29:A4:E4:00:8D:1C:08:92:0E:BB:80
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0EB9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/85646DF6810611F1A0DAD9BBCE1D38B0.roa
Signing time: Thu 16 Jul 2026 11:07:24 +0000
ROA not before: Thu 16 Jul 2026 11:07:20 +0000
ROA not after: Wed 16 Jul 2036 11:07:20 +0000
asID: 36916
IP address blocks: 192.142.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3769 (0xeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 16 11:07:20 2026 GMT
Not After : Jul 16 11:07:20 2036 GMT
Subject: CN=6a58bb6b-d83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:52:10:3e:71:ce:c1:e9:c3:26:c5:e0:36:
52:58:07:00:80:38:47:0d:b2:5c:57:a5:68:f3:62:
1a:9b:33:3b:78:9a:34:e2:c1:4e:7a:cf:8f:fa:59:
ad:4b:29:4f:c6:e3:b6:7a:47:c0:07:a2:2e:c5:52:
5d:30:10:8b:48:12:f7:3a:0a:be:bf:ad:11:90:42:
af:49:da:ba:2e:4b:1f:00:96:56:8e:41:4e:3f:31:
5c:71:af:f0:d3:28:61:9d:83:06:0f:f9:13:94:4f:
5b:f1:f3:68:83:f6:31:01:66:19:01:d3:64:e0:7e:
3f:5c:67:b9:eb:cc:91:58:c0:07:f7:59:7e:b6:71:
e1:7e:1d:1a:cf:5a:51:38:fe:01:ac:a6:c1:d7:2b:
b1:61:8b:f8:a0:b1:49:06:e4:04:94:95:35:b9:84:
0c:97:b3:96:8f:41:f6:0a:58:3f:42:c3:e8:77:8d:
f3:26:68:20:9a:aa:2a:25:ea:37:c7:fd:c6:5c:c3:
a3:af:5e:eb:61:ae:b0:8d:dc:35:66:bd:82:b0:aa:
03:59:a3:d0:c1:2e:f5:48:c5:e1:db:6c:b2:55:1d:
aa:77:af:ac:e8:99:bb:63:54:a3:58:8c:ee:69:83:
b2:28:61:ec:b6:08:b2:9f:6f:03:e6:fc:6f:d4:80:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:47:1C:3B:81:C9:9E:C2:29:A4:E4:00:8D:1C:08:92:0E:BB:80
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/85646DF6810611F1A0DAD9BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:3d:6e:07:c1:ec:c8:1f:4f:c1:d5:e3:50:93:29:81:14:8d:
eb:63:e0:80:95:05:a5:e3:cd:97:86:17:1e:bc:1d:25:58:a5:
1a:2f:11:c2:87:df:ca:fd:50:e7:14:11:77:f5:6f:37:53:f7:
fa:6f:e9:20:f3:f6:b3:64:54:37:76:a0:fb:7a:a1:9e:cd:da:
44:d5:da:f0:8b:6a:3f:95:5b:78:b8:90:27:b9:69:fa:2f:1c:
4b:41:7f:87:7c:9f:2d:af:fe:23:fe:6a:81:a1:60:79:58:73:
76:d8:c5:11:77:6a:3d:41:bc:cc:30:81:f2:ee:4d:24:71:9f:
6d:a3:12:2f:b0:44:37:f7:a0:0d:1f:5a:72:25:a6:89:d8:58:
61:a7:9b:dd:c1:ed:80:f8:d1:b8:85:77:7c:df:1e:99:14:62:
e1:7e:c0:32:a4:60:89:ec:5a:2c:bc:8e:03:75:9f:62:1c:22:
a6:6f:1d:f9:ea:a0:3c:c2:23:0d:4d:c4:64:6d:19:35:c9:b9:
c6:42:d2:fb:99:71:ce:b8:8d:f8:81:4a:75:ff:2f:76:04:98:
44:6c:bf:41:0a:2d:cd:33:0a:4b:8a:ce:7d:6a:65:de:c2:83:
99:3d:0c:38:fe:44:3a:27:31:4c:87:20:e9:0a:02:c9:74:03:
53:91:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 04:36:24 2026 by rpki-client