Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DB9020208C1511F19E9081B4CE1D38B0.roa
File: DB9020208C1511F19E9081B4CE1D38B0.roa (raw, json)
Hash identifier: hsYJfrCa7q/ZpVaEHlEEpMZw96lY7SV4P/KU/eT5HzQ=
Subject key identifier: E5:EF:CC:D4:CC:06:0E:51:3F:40:C9:58:5F:E0:73:5F:BE:03:5A:99
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ECF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DB9020208C1511F19E9081B4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:54:53 +0000
ROA not before: Thu 30 Jul 2026 12:54:49 +0000
ROA not after: Wed 30 Jul 2036 12:54:49 +0000
asID: 399138
IP address blocks: 192.142.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3791 (0xecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:54:49 2026 GMT
Not After : Jul 30 12:54:49 2036 GMT
Subject: CN=6a6b499d-220a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:ff:c9:7f:4f:f6:57:40:54:32:07:24:ce:
dc:91:4d:4d:46:d9:bd:ea:db:4f:d6:af:ee:d2:e8:
dc:9a:e1:35:69:fc:aa:df:bd:99:b0:d3:03:b5:9b:
31:87:09:39:05:fa:af:5d:51:1d:6c:1a:62:f2:b2:
eb:c7:e2:20:91:40:e3:e3:33:a2:3c:89:1e:65:1c:
7d:7f:07:f4:bf:dc:5d:83:9d:b2:7a:2b:9d:d2:9b:
6b:3b:b7:d9:d0:46:47:15:99:ef:23:75:3a:68:e9:
6f:9b:5c:1d:5c:01:45:ac:48:f6:56:36:46:75:29:
2e:68:13:af:0b:08:99:22:42:7e:aa:fd:e5:b2:49:
3c:12:0d:41:45:fb:df:14:db:40:c9:32:2d:5c:33:
cb:24:56:5b:f1:0e:ce:8c:09:36:a0:6d:66:28:9b:
25:45:c3:34:4a:60:76:9c:b2:37:7f:cb:11:f4:10:
80:a4:ce:f8:ff:f0:b3:55:43:ef:e3:69:76:a4:cf:
a6:73:7d:65:f1:1e:2d:f7:b8:70:7b:b9:a7:7f:7c:
98:e1:53:16:e2:82:19:99:d8:5b:0d:53:2b:a5:40:
6c:1d:a1:3c:54:d8:c3:c9:6b:12:fd:d7:53:a6:b9:
80:37:4d:5e:2f:77:96:84:a9:22:3b:f1:9e:cd:04:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:CC:D4:CC:06:0E:51:3F:40:C9:58:5F:E0:73:5F:BE:03:5A:99
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DB9020208C1511F19E9081B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.112.0/20
Signature Algorithm: sha256WithRSAEncryption
78:94:f1:ad:96:5e:4c:73:33:38:94:39:1a:7b:26:36:1f:d9:
0b:50:a8:6a:20:e1:e4:c7:5f:1a:f1:1a:01:9d:f3:44:eb:f4:
14:81:4d:05:70:a8:32:e4:31:99:bd:e1:7c:70:97:2a:25:ae:
c7:aa:51:d7:94:ac:36:3a:56:24:4d:06:69:e9:0f:df:de:8a:
69:c8:a4:fc:b4:ed:87:10:cf:c1:04:02:5f:84:98:31:53:63:
a6:1c:a5:92:33:20:32:25:17:36:67:04:b7:6d:66:60:63:92:
09:56:27:60:fa:42:2b:57:b8:73:c7:9e:bf:33:9e:37:89:0f:
fc:d4:90:aa:da:03:ac:44:e4:74:e1:50:dc:eb:d7:10:29:f4:
34:ce:7d:b8:29:3a:ab:b1:da:1c:b0:e9:34:06:5f:78:ff:54:
fb:11:7e:05:6a:e0:f3:79:85:d9:cd:b6:c0:bf:1c:eb:36:70:
00:cb:9e:8f:e4:a4:a9:01:5d:2b:96:95:39:bb:41:74:03:d7:
3a:43:f2:c8:cb:cd:fa:6a:fe:e7:2a:ef:0f:86:80:e4:17:22:
6b:5c:fa:2d:34:38:25:67:5f:13:87:68:5e:97:17:fc:aa:fc:
3e:e3:75:93:2f:86:e0:64:ce:a4:95:49:4d:dc:69:51:1e:9f:
ce:0d:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:54:43 2026 by rpki-client