Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C0B1F54C9AE511F1A0EEE816CF1D38B0.roa
File: C0B1F54C9AE511F1A0EEE816CF1D38B0.roa (raw, json)
Hash identifier: S2M1RxRJG4z7DLWGmj6PQZkmzI4UhTOgcVlRL7ymfJE=
Subject key identifier: 49:87:50:BD:75:53:42:AD:F7:39:57:FF:00:4D:8D:CC:1D:75:BD:0A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0EF4
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C0B1F54C9AE511F1A0EEE816CF1D38B0.roa
Signing time: Tue 18 Aug 2026 09:18:20 +0000
ROA not before: Tue 18 Aug 2026 09:18:16 +0000
ROA not after: Mon 18 Aug 2036 09:18:16 +0000
asID: 2914
IP address blocks: 192.142.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3828 (0xef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 18 09:18:16 2026 GMT
Not After : Aug 18 09:18:16 2036 GMT
Subject: CN=6a84235c-9401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:cb:44:be:a3:a0:9b:16:a6:e6:1c:a1:80:
e7:4e:ed:0e:c8:2b:43:ca:79:35:02:35:5a:96:ff:
0f:7c:51:55:c4:72:e3:88:4d:7d:3b:a8:14:dc:ab:
95:f2:a7:9d:03:d4:bc:e1:d9:c6:f7:ec:68:61:4c:
0c:01:c5:a6:32:1c:da:fa:67:7e:fb:49:48:17:da:
13:10:62:8e:9d:82:1a:75:dd:d4:88:6c:d8:79:e3:
4d:e6:a6:de:6a:dc:a9:48:d8:4f:e8:7e:84:14:c7:
78:16:ff:ee:d9:2f:ea:e3:62:7e:ee:52:a3:6d:d8:
fe:ca:59:c7:12:8d:8d:67:a8:9c:c2:37:ad:80:76:
cc:81:49:56:72:20:b7:2f:15:90:52:52:73:f0:92:
9d:cc:60:4d:36:81:10:1e:82:bb:b0:eb:69:35:29:
32:0b:a6:95:bb:46:e0:91:05:ea:23:ec:74:d6:dd:
04:1d:be:a3:1a:0b:8e:a5:c6:f1:bb:f8:46:c4:2c:
c0:3c:2d:ce:6f:ec:64:77:2a:dd:4d:30:4d:f8:51:
bf:35:fc:71:44:ba:d2:3f:43:4b:0d:0a:76:ea:4e:
5d:19:ea:d3:40:da:39:ff:41:00:57:2b:54:62:99:
d3:cc:ce:e7:5b:42:51:8e:af:f5:77:ab:d4:ac:cd:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:50:BD:75:53:42:AD:F7:39:57:FF:00:4D:8D:CC:1D:75:BD:0A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C0B1F54C9AE511F1A0EEE816CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:17:b6:59:10:5a:d5:45:b7:6d:4d:d7:88:21:09:53:57:e3:
63:11:83:d8:b8:62:87:97:1b:a0:8f:e6:00:2f:1f:f1:8c:48:
80:ca:65:bb:b8:e8:61:8a:6b:0f:1a:48:6b:89:0d:9a:84:79:
c8:b1:c5:ef:a5:a4:1f:8b:49:17:85:e2:8f:84:ce:4b:11:ee:
e0:c7:2c:db:54:14:05:10:6e:21:0c:0e:b3:de:b8:3c:95:89:
f7:e4:eb:3d:1e:cb:2d:82:63:ae:4c:d8:74:a8:c2:23:a5:d2:
ce:0f:44:2e:86:bd:cf:c6:e5:73:9c:f6:03:e1:61:cb:4f:1e:
8a:b4:3f:fc:2a:c5:0a:54:c1:05:1b:4b:01:6f:3b:1a:6c:33:
c7:8f:5d:ca:b5:4b:ba:be:6a:80:e9:bc:d1:35:98:68:66:21:
be:4c:33:f5:66:4a:8e:29:ae:3c:fa:cf:eb:25:50:f6:63:c9:
bf:64:a5:56:5b:01:41:8a:a6:8b:a6:7c:b5:60:8e:ff:d0:0b:
b8:83:77:1b:2c:56:ce:27:f1:96:74:d7:c0:64:2c:63:43:06:
3a:2a:33:7d:45:3b:91:3e:fd:de:2a:b8:ed:94:54:69:d8:8d:
87:7c:70:78:b0:e7:ff:fa:7e:bd:6a:35:7c:94:b9:e8:80:1a:
9a:7f:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 09:56:00 2026 by rpki-client