Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/086E21E4739A11F1856A661ACF1D38B0.roa
File: 086E21E4739A11F1856A661ACF1D38B0.roa (raw, json)
Hash identifier: Iwj4Iz6FPSO/V/ChjskNqodJ18zm4zl5mQLO7h52nOM=
Subject key identifier: 46:D1:73:F7:53:82:F6:0D:30:F3:85:04:4D:9C:9D:30:62:25:6A:07
Certificate issuer: /CN=F3652B4FAR/serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
Certificate serial: 02
Authority key identifier: 56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D
Authority info access: rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/086E21E4739A11F1856A661ACF1D38B0.roa
Signing time: Mon 29 Jun 2026 09:08:03 +0000
ROA not before: Mon 29 Jun 2026 09:07:48 +0000
ROA not after: Tue 31 Dec 2047 09:07:48 +0000
asID: 327990
IP address blocks: 169.239.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652B4FAR, serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
Validity
Not Before: Jun 29 09:07:48 2026 GMT
Not After : Dec 31 09:07:48 2047 GMT
Subject: CN=6a4235f3-b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:ca:2d:00:ce:09:a0:d5:79:89:6d:5f:c0:
39:52:96:37:0c:8a:be:e1:db:f3:4a:dc:87:97:a2:
14:4e:cb:b3:df:c8:8a:b8:92:61:e0:9c:ca:54:e2:
b9:0f:af:d5:53:f4:f4:e9:de:33:ef:4d:8f:e5:83:
34:44:41:18:23:cf:19:3a:b8:20:04:d2:4a:ac:6f:
70:c8:6f:b8:b7:2c:f9:b9:e2:db:af:96:3d:d9:0c:
7e:d0:73:7e:ec:c9:78:8b:97:d8:be:31:39:15:e6:
a9:90:76:03:c8:56:cc:58:df:a3:2f:cc:8b:5c:4e:
77:26:7a:35:4c:a1:b4:f8:02:3c:54:9b:3c:be:2b:
2c:b8:a7:49:3f:e3:9e:fa:42:7d:c4:eb:6c:55:ad:
23:32:27:d2:72:10:75:fa:23:cc:6e:96:1c:1c:fb:
84:27:3e:ca:a7:ca:b6:fe:14:cb:27:3d:88:ad:2b:
6c:0b:39:b9:b5:0b:9d:87:95:1c:c7:52:9a:28:44:
3a:5d:cf:bc:5b:1a:91:4d:e8:4c:c4:06:64:3a:a7:
00:04:8a:de:19:47:ec:d4:d9:b4:98:ea:2c:5e:25:
7e:63:45:e0:6e:4a:10:94:a5:dd:f5:55:de:ec:db:
d4:99:14:d1:d6:23:60:f7:88:61:78:aa:08:55:7d:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:73:F7:53:82:F6:0D:30:F3:85:04:4D:9C:9D:30:62:25:6A:07
X509v3 Authority Key Identifier:
keyid:56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/086E21E4739A11F1856A661ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c9:b5:16:e2:e3:bf:19:d3:db:bd:47:51:c6:2c:c2:5d:b0:
e5:77:29:37:fe:4a:bb:56:b7:a4:9c:60:88:e6:7d:62:7c:14:
67:e8:40:44:f0:27:7f:7c:e6:e1:05:18:58:4a:72:28:c1:45:
4e:c5:1e:5c:5f:6b:71:79:d9:24:1f:76:5a:e2:ea:4e:99:98:
6f:7f:67:ca:e7:28:48:a7:78:fc:ba:dd:2d:a4:ef:c2:59:dc:
be:49:a2:6e:17:03:d0:50:dc:02:06:ff:2b:7e:b7:2d:b2:a4:
b0:c8:aa:7e:d8:7f:35:35:64:7f:95:b2:d9:92:05:51:62:ad:
15:bb:36:a1:6e:6e:39:81:b6:d6:8e:c8:1b:09:15:32:fc:76:
4b:d0:f6:15:d8:16:d0:b6:6b:78:2e:f9:56:66:99:7c:db:6b:
dc:9b:96:88:ee:97:d7:02:a8:63:bf:65:7b:46:84:72:b0:45:
2b:e2:56:b1:c1:43:5d:4f:53:ba:8f:42:85:ae:e7:4e:a5:96:
e8:3a:87:1d:02:08:c6:35:4c:b5:d4:56:8f:f6:74:38:5b:28:
91:a3:2c:e2:dd:6f:2f:2c:9a:98:fe:50:7b:ea:dd:7b:00:d8:
e3:9c:cb:d7:02:1c:9c:09:54:15:95:40:4b:d6:9d:42:ef:0c:
32:34:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:03 2026 by rpki-client