Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B3ECE8504DD111F18C05C814CF1D38B0.roa
File: B3ECE8504DD111F18C05C814CF1D38B0.roa (raw, json)
Hash identifier: MmyFesgzlrIMSbcznx5RDmipUaWp2uAuXAIAxdLHwJw=
Subject key identifier: 88:5C:05:71:E0:83:93:B3:B5:9F:D2:50:FC:14:B5:EF:DE:8C:B7:70
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0E65
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B3ECE8504DD111F18C05C814CF1D38B0.roa
Signing time: Tue 12 May 2026 07:10:49 +0000
ROA not before: Tue 12 May 2026 07:10:43 +0000
ROA not after: Mon 12 May 2036 07:10:43 +0000
asID: 198077
IP address blocks: 192.142.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 12 07:10:43 2026 GMT
Not After : May 12 07:10:43 2036 GMT
Subject: CN=6a02d279-4eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:71:a1:f1:44:96:62:0f:57:9f:af:b9:a1:
4c:47:d3:0e:55:b4:83:f4:8d:d2:ad:af:e5:ae:ff:
16:a3:44:99:44:db:c1:c3:f4:a4:1c:3d:77:1c:b1:
6f:07:4f:ec:18:77:66:49:b6:22:b0:ee:68:00:61:
db:69:71:67:5b:41:f7:bc:f2:70:3a:5a:c7:65:c8:
a4:7e:13:97:ad:cc:6a:2b:c1:d1:1e:4a:e7:b9:9e:
61:24:23:70:27:74:8a:d4:88:63:63:9b:11:7b:92:
23:bf:cd:8d:96:71:37:98:b9:86:52:9c:1a:8c:a5:
a7:8f:e0:cf:91:c8:5c:ef:af:fd:ee:07:74:ee:d0:
1f:3d:72:57:ae:e0:24:eb:f7:8b:de:54:fc:b2:56:
3f:26:00:fd:b2:8b:74:1a:a1:40:47:99:9b:73:aa:
f2:41:5e:78:1b:e3:9a:94:11:8b:ed:3d:5b:85:62:
0b:b0:32:c4:50:bb:96:45:b9:28:e9:79:e5:e8:6e:
f2:88:33:a4:b4:71:10:b6:8a:b6:f4:df:de:e4:73:
c3:98:e6:86:64:09:f6:52:4d:4b:55:6f:da:11:48:
78:07:af:1f:50:5b:a8:90:b3:84:2e:24:93:4c:2f:
ed:d2:bb:38:ed:ed:4e:ed:6c:f4:ad:83:5e:26:88:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:05:71:E0:83:93:B3:B5:9F:D2:50:FC:14:B5:EF:DE:8C:B7:70
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B3ECE8504DD111F18C05C814CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.12.0/24
Signature Algorithm: sha256WithRSAEncryption
34:44:56:00:78:04:4c:d6:15:e1:33:f7:9d:5c:07:c6:e1:09:
a8:fe:9d:7a:81:dd:4e:2b:0f:de:c4:55:3f:f0:e5:5f:10:00:
84:39:32:8f:9b:40:11:78:06:0e:ca:9a:d4:7d:1c:29:4d:82:
a6:e8:c0:aa:e1:23:e9:99:20:ec:8e:4f:1a:a1:aa:de:c3:6d:
fb:e6:de:72:c0:f8:2f:dc:5e:87:07:5b:80:87:3e:51:86:5b:
98:07:a9:94:99:d6:00:6f:6a:9e:89:ee:1b:09:0c:12:64:07:
25:76:05:10:a0:56:76:1b:0b:ec:f0:c8:b9:6f:82:fe:69:38:
0e:18:a4:f1:75:26:48:b3:b5:e2:7f:1c:8e:03:9d:2b:80:d0:
ba:a2:17:ee:df:21:04:26:18:ee:43:44:cd:74:d7:99:80:09:
e3:37:7f:7e:d4:f9:71:cb:76:d1:b1:0e:3e:38:44:a0:bc:46:
70:df:ca:99:49:4a:5b:22:8b:22:de:86:17:b9:d2:c4:27:2d:
77:c7:cb:0d:2f:1e:25:e5:43:7d:e0:f6:f7:db:1a:03:f4:aa:
05:52:12:8c:19:15:7a:19:2e:74:b6:55:21:83:2c:36:11:93:
39:72:45:88:5f:23:ef:df:f5:a4:12:29:74:ec:ca:ec:b2:00:
b1:85:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:39 2026 by rpki-client