Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/3786E1E6875411F1AB4D1CA6CE1D38B0.roa
File: 3786E1E6875411F1AB4D1CA6CE1D38B0.roa (raw, json)
Hash identifier: c5g+zlY8gSNebtc8+UVgbZSk+dgTpqbWRZq27v61klg=
Subject key identifier: CE:AB:92:88:C6:17:FA:1C:34:1C:BE:07:78:75:A4:D6:E0:34:EA:4E
Certificate issuer: /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial: 05DA
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Authority info access: rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/3786E1E6875411F1AB4D1CA6CE1D38B0.roa
Signing time: Fri 24 Jul 2026 11:38:41 +0000
ROA not before: Fri 24 Jul 2026 11:38:37 +0000
ROA not after: Mon 09 Aug 2032 11:38:37 +0000
asID: 327896
IP address blocks: 169.255.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Validity
Not Before: Jul 24 11:38:37 2026 GMT
Not After : Aug 9 11:38:37 2032 GMT
Subject: CN=6a634ec1-cfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:a6:a5:2a:6a:c4:41:b2:1b:02:97:1c:ac:
47:95:58:35:02:6e:89:10:51:8b:94:38:1a:bb:e9:
db:2c:82:bd:bb:11:73:96:63:3e:b4:40:13:a7:1b:
3a:72:c5:e0:e0:cc:c9:83:79:2f:68:e0:bb:63:78:
41:48:74:95:0b:e6:ce:1f:89:40:58:4e:ec:86:a4:
4f:75:9c:3d:8e:09:40:a6:56:b8:02:47:bf:b6:90:
04:c4:05:0c:91:2d:8e:93:25:b0:75:d7:13:22:a1:
88:a3:27:bc:f4:a7:a1:d3:fc:81:04:a1:0a:a4:5c:
1c:f7:03:a4:8d:44:f0:ea:f8:10:81:6d:23:a1:6c:
90:95:f9:8b:1b:97:c0:64:ba:37:24:b3:39:9b:1e:
50:ab:1e:d8:0a:22:22:00:a8:79:bd:18:0d:89:b7:
27:14:12:19:e6:24:64:ac:65:34:1c:98:58:69:37:
ca:66:43:d7:16:1f:d0:35:48:e5:1b:6e:67:42:ce:
cb:27:6a:dc:30:22:ec:e4:e1:bd:be:b5:b8:1a:ee:
06:3c:75:fc:64:5b:db:a7:79:51:15:2d:ab:48:70:
97:c8:16:4a:9d:57:5a:56:c7:4a:44:e6:71:1b:de:
7a:50:c6:c9:4d:4b:61:f4:f0:52:aa:86:45:3e:d8:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AB:92:88:C6:17:FA:1C:34:1C:BE:07:78:75:A4:D6:E0:34:EA:4E
X509v3 Authority Key Identifier:
keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/3786E1E6875411F1AB4D1CA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.240.0/22
Signature Algorithm: sha256WithRSAEncryption
70:cc:49:82:dc:14:5e:2d:6e:8d:0e:5b:84:26:54:22:59:9a:
74:fc:15:05:fc:0b:ae:b6:41:69:67:d4:5c:d3:63:e4:8a:4f:
bc:4f:50:da:6b:f1:c6:95:78:b1:45:91:2e:42:65:86:48:02:
5c:6f:a4:52:ce:e9:c0:9e:bb:5f:03:30:76:23:ba:6e:81:0a:
2d:53:a6:8f:4b:c8:34:79:58:db:d9:93:a7:87:de:4f:f3:b3:
e2:29:60:17:80:1c:e2:c5:56:ec:7e:74:ac:58:df:00:5a:16:
18:88:29:de:5c:b1:70:3b:8b:99:78:fc:97:4f:ec:b9:dd:ca:
08:3d:2c:f7:e7:ba:37:98:54:0e:b3:61:fe:9b:0d:f7:f7:1a:
ca:74:48:d5:67:76:00:ea:56:ac:2f:47:e8:47:67:70:ac:e1:
04:9d:04:e6:4c:46:fb:bf:bb:74:99:e8:c0:77:b4:e2:b8:2f:
0c:b3:ff:27:06:3d:e5:b6:9f:e3:de:4b:a1:23:f7:f1:72:47:
4d:20:a0:1a:fe:d7:c4:0f:e3:ae:48:a6:8d:16:e5:90:a2:cf:
8f:5a:2b:94:8c:f6:f7:f0:83:44:60:29:70:e3:bf:a6:c5:c2:
eb:95:69:08:55:97:84:45:e4:e7:a6:b4:e6:d1:4f:b9:09:27:
59:64:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:42 2026 by rpki-client