Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EC787F989AE511F18D7DC218CF1D38B0.roa
File: EC787F989AE511F18D7DC218CF1D38B0.roa (raw, json)
Hash identifier: 1MbnhYbAlkT9cOB8v61xlI6TcxwKiczuW531Uf064kk=
Subject key identifier: 66:1B:6F:49:28:9C:AA:0E:7E:DC:03:CA:FA:3B:AF:0A:03:FE:7F:72
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0EF6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EC787F989AE511F18D7DC218CF1D38B0.roa
Signing time: Tue 18 Aug 2026 09:19:33 +0000
ROA not before: Tue 18 Aug 2026 09:19:29 +0000
ROA not after: Mon 18 Aug 2036 09:19:29 +0000
asID: 2914
IP address blocks: 192.142.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3830 (0xef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 18 09:19:29 2026 GMT
Not After : Aug 18 09:19:29 2036 GMT
Subject: CN=6a8423a5-b208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:ee:d9:ef:14:3a:0a:aa:30:07:2c:b9:5d:
ae:b1:20:34:8e:f1:ca:47:0b:cb:cc:d3:d3:b7:bf:
ae:00:12:b3:08:aa:4a:2f:c9:c9:b3:b5:19:d8:58:
7e:84:a1:fb:41:f2:1d:fa:1c:e8:77:68:e5:65:6e:
44:04:ec:4e:7d:c0:e1:d6:71:4d:f4:1a:7b:c1:4d:
d7:7f:6e:97:92:ec:48:2c:ac:3c:0b:90:2e:ee:dd:
2f:94:d2:4f:b8:f2:c5:d3:b1:33:8c:64:26:53:59:
ad:23:de:c3:5b:76:eb:26:fb:78:44:55:ef:04:b4:
2e:b5:66:bf:61:75:e7:d8:4c:1e:13:8c:41:60:47:
d7:7a:ca:24:d0:69:f6:1a:81:75:60:1c:02:5d:b9:
7e:0f:5c:a7:e8:d2:2d:bd:56:d8:72:39:6e:3d:25:
bb:df:9b:c9:87:e5:03:9f:de:48:89:1d:ae:b3:9b:
9c:fd:34:be:00:ad:59:62:ac:fb:c7:76:ee:e3:83:
ed:c9:43:1b:e4:ff:07:bd:e4:36:14:f8:44:50:d7:
ab:14:d9:c3:c1:b3:22:38:02:a6:77:b2:9a:00:0e:
6b:b1:5b:d3:3b:ad:b8:13:ae:e9:ad:35:82:43:dc:
6d:91:ab:d4:43:93:cb:d9:2b:ba:79:c8:c8:65:6f:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:6F:49:28:9C:AA:0E:7E:DC:03:CA:FA:3B:AF:0A:03:FE:7F:72
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EC787F989AE511F18D7DC218CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/18
Signature Algorithm: sha256WithRSAEncryption
48:a2:8d:e8:11:b2:58:12:f4:3f:4e:cd:21:8b:b8:61:a4:c7:
e6:76:81:a9:37:f9:9f:b4:78:9f:ab:2d:bd:00:c2:82:d4:49:
c7:66:00:67:90:e2:85:5f:ef:6c:3a:c4:a5:d3:4a:cb:19:b4:
41:b7:d2:51:50:be:2e:2b:54:86:dd:61:ce:e8:f5:9e:1d:47:
33:a0:1e:81:a4:8f:9d:c6:ea:38:57:7f:40:ad:93:32:d9:3b:
12:77:03:dc:70:10:4b:9b:26:e4:dd:8d:19:5c:4e:08:71:e3:
21:ef:a4:29:bd:08:9f:44:90:7d:01:10:1b:0e:b8:0c:4c:e7:
d5:82:70:da:9c:06:fa:ef:1c:cd:a5:6a:47:ec:95:10:18:2f:
4d:48:72:80:fa:1e:2f:e6:e0:d6:60:40:32:ad:c3:28:b8:c3:
8c:9a:32:26:fa:57:29:3d:6d:39:eb:29:69:5d:17:87:7d:d2:
28:95:02:c6:8d:4f:5d:7f:2b:92:09:55:2b:cd:99:44:64:a7:
38:0a:e2:b3:e6:8e:0e:77:c0:5c:ed:49:96:57:02:b2:91:e8:
b9:ef:5d:90:22:0e:9b:95:0f:27:86:d4:cc:45:f9:63:4c:ad:
32:a5:2e:f0:44:84:0c:88:d0:d7:1d:e6:b0:bf:ce:59:2d:9b:
51:03:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 09:56:01 2026 by rpki-client