Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A893E222494611F18D7CF7EECE1D38B0.roa
File: A893E222494611F18D7CF7EECE1D38B0.roa (raw, json)
Hash identifier: oKIc5iUYlhTAXseh0GcKO3UQ9OBTRLjIFU1M3QZmSz4=
Subject key identifier: 04:9D:54:46:CB:C2:72:48:37:F4:26:31:A0:05:23:DE:FE:59:00:EC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0E5D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A893E222494611F18D7CF7EECE1D38B0.roa
Signing time: Wed 06 May 2026 12:25:25 +0000
ROA not before: Wed 06 May 2026 12:25:21 +0000
ROA not after: Wed 07 May 2036 12:25:21 +0000
asID: 198077
IP address blocks: 192.142.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 6 12:25:21 2026 GMT
Not After : May 7 12:25:21 2036 GMT
Subject: CN=69fb3335-5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:90:45:f6:90:29:bf:2c:63:34:b5:e9:70:
be:a6:86:3f:61:d9:70:6f:e0:39:71:2c:23:47:f7:
29:5f:81:b5:81:27:a7:da:be:91:ad:1c:9d:cc:73:
be:0f:1e:a3:b0:55:56:02:b1:1b:03:43:a3:26:98:
9f:0b:0c:b6:a6:96:26:03:fc:5e:1e:cb:f5:41:67:
e6:bb:88:a9:88:b1:f3:b9:16:e9:2f:dc:78:78:fb:
2b:4f:ae:cc:87:98:d8:d2:ea:54:1a:99:40:e7:73:
42:f1:95:3f:94:fb:22:21:6c:6e:4a:a9:ba:60:8a:
3e:50:5b:e1:5c:5f:16:f4:0e:d0:36:b2:d2:90:6a:
a7:62:cf:73:95:f1:08:16:25:48:d4:79:e5:91:f3:
0a:b3:96:aa:d9:58:d4:bb:55:08:5c:bc:37:54:2d:
26:d3:e6:1a:9a:8f:8c:e9:1a:8e:9e:9a:98:b1:4b:
9b:35:5e:57:cd:99:f5:5d:4d:01:3f:7f:c9:4a:7e:
47:f4:b0:6e:a9:96:35:b9:2c:b5:db:e6:ba:62:5a:
7d:e5:57:bb:a3:4d:ad:7b:84:42:93:5c:92:ea:82:
e9:3c:76:39:41:21:3e:94:2e:f6:26:83:9f:eb:20:
a0:f8:64:f7:22:b8:40:0b:9b:df:e6:24:d6:c5:20:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9D:54:46:CB:C2:72:48:37:F4:26:31:A0:05:23:DE:FE:59:00:EC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A893E222494611F18D7CF7EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0e:5d:a7:c8:4b:c3:e5:48:23:7b:e5:57:ea:40:5a:06:1c:
c8:70:25:80:be:01:86:61:58:0e:7f:45:9d:6f:ce:6b:a0:19:
00:d6:62:75:95:a3:fe:ba:c7:64:6c:81:dd:45:12:d8:e1:ba:
9d:8d:5f:f4:6f:0d:09:73:73:d4:d2:03:73:75:35:2f:7c:9e:
a7:72:dc:01:bb:12:30:83:b2:62:4f:63:b1:be:88:c1:94:c4:
39:5a:99:ae:de:c3:31:66:e8:bf:c0:64:0c:85:e2:3a:6f:d5:
28:ce:72:44:5b:1b:6d:22:1c:0b:4b:91:1a:32:b1:b8:d6:d3:
fc:3f:e5:7b:78:5a:03:91:a0:50:a5:65:f6:d6:3b:46:79:82:
c5:c9:00:07:48:96:14:c0:82:ac:dd:75:06:1e:a6:55:31:52:
19:f4:a0:52:2e:1d:d4:15:b4:34:db:27:de:4e:a5:74:5a:6d:
82:4a:ab:0b:c2:ba:aa:94:9f:cc:ce:2d:ec:a3:5d:83:aa:47:
be:f7:a0:2d:33:98:86:0f:81:76:db:f2:4f:e5:0b:39:5b:4e:
7a:4f:9c:78:51:fe:cd:74:a4:0f:e8:58:6a:99:98:c5:72:b5:
46:27:6a:3a:59:cf:26:3b:dd:4c:dd:f4:e0:6c:40:c0:4a:67:
f0:5a:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 16:11:15 2026 by rpki-client