Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa
File: 0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa (raw, json)
Hash identifier: dhaluCj7RnDZ7PYio53jEw/KHG7gePKgaeCadPKC+2w=
Subject key identifier: D5:7C:F0:3E:50:13:EB:45:AA:78:3D:00:A8:9E:9F:BE:D7:74:C2:BF
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0644
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:27:09 +0000
ROA not before: Sun 12 Jul 2026 20:27:05 +0000
ROA not after: Sun 11 Jul 2027 20:27:05 +0000
asID: 174
IP address blocks: 66.251.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:27:05 2026 GMT
Not After : Jul 11 20:27:05 2027 GMT
Subject: CN=6a53f89d-202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:25:b7:29:49:53:f4:df:af:e4:f7:26:14:
72:57:48:72:f3:b4:15:2a:d4:b0:80:87:fb:b7:6c:
71:ff:10:78:13:f1:5f:71:8a:64:0c:16:da:6e:97:
0e:45:f7:bb:a8:45:01:a4:07:7e:1c:cd:df:31:6c:
ab:6c:b0:2d:36:c0:24:57:94:f9:3a:20:bf:f1:74:
f4:89:2d:24:0f:10:e3:36:78:78:62:77:91:f3:ab:
88:98:b5:f3:88:d8:ae:2e:7c:fd:0a:cd:fc:2a:67:
80:65:41:64:13:fa:32:d5:c4:5a:0f:3c:5b:a2:bf:
83:50:87:d7:c6:b7:ff:8b:04:5f:48:7a:9b:6a:4f:
d3:2e:23:22:23:10:48:7d:d8:cb:54:0d:0c:55:2d:
a3:a8:4a:a8:63:c7:93:3d:1c:68:8a:77:79:00:39:
50:23:f0:44:9a:6d:24:08:eb:ef:3d:f0:6e:51:ee:
da:14:1a:5f:8d:19:80:8a:e8:0e:5b:26:6a:ff:85:
91:65:6f:8b:db:ca:74:28:05:d0:67:f9:58:0d:05:
5b:70:a0:5a:94:45:00:dd:a5:97:62:e8:bf:02:45:
33:a4:b9:91:09:58:82:78:87:2d:7a:19:bf:56:df:
85:d9:4c:67:c2:11:81:5b:fd:7b:1e:dd:48:c2:9d:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:F0:3E:50:13:EB:45:AA:78:3D:00:A8:9E:9F:BE:D7:74:C2:BF
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:23:71:d0:f1:3a:6f:97:73:5d:15:30:d3:af:38:e4:18:c4:
fd:85:23:71:ba:8f:ea:ac:00:cf:72:f6:2e:f9:53:0c:ec:74:
27:10:4b:50:78:e8:a7:f1:76:5c:8b:27:ec:0d:26:48:67:c1:
1c:20:9d:e1:9e:79:d7:70:d8:0a:d2:d7:f5:be:89:ff:38:65:
af:d7:a5:b1:c6:0d:63:03:83:97:3b:eb:5e:0d:30:45:da:85:
45:2e:5a:1c:44:f8:75:c8:7e:a4:ba:70:8d:47:a4:18:cb:6c:
79:57:08:c7:0c:03:66:09:43:1e:9b:20:90:b2:4a:47:27:fd:
50:50:5a:42:d1:c3:74:94:b9:c4:21:5a:e0:44:2c:ed:b7:11:
d6:31:99:dd:51:a1:6b:c1:59:0c:e9:5f:c1:d4:f5:9c:70:60:
b5:bc:b1:63:39:f2:85:50:99:e4:4c:60:fe:02:82:32:aa:21:
a7:a2:6f:31:e4:a9:ac:d9:f4:4c:70:a6:ee:74:6f:57:f8:f4:
a1:d1:53:66:68:00:65:f3:8b:d2:24:3f:fb:d8:26:11:da:8d:
9f:02:63:89:fc:fa:4e:ec:e2:de:4b:0c:5f:62:6c:db:68:4e:
be:a4:05:6f:f0:d6:29:32:4e:c0:7d:32:1a:7a:e9:99:2f:2e:
be:0e:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:11 2026 by rpki-client