Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/12CF5EF67E2F11F18370421CCF1D38B0.roa
File: 12CF5EF67E2F11F18370421CCF1D38B0.roa (raw, json)
Hash identifier: 4UuN4QLfMxXPy2HM2/BEelU9Bv4KfkAHor15wsAKv1M=
Subject key identifier: 30:24:68:9D:24:AB:67:46:32:9E:B3:FF:71:B4:9C:3D:A2:32:E2:47
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0636
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/12CF5EF67E2F11F18370421CCF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:20:07 +0000
ROA not before: Sun 12 Jul 2026 20:20:03 +0000
ROA not after: Sun 11 Jul 2027 20:20:03 +0000
asID: 174
IP address blocks: 66.251.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:20:03 2026 GMT
Not After : Jul 11 20:20:03 2027 GMT
Subject: CN=6a53f6f7-a114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:3e:fe:c4:84:6d:cc:6b:ce:43:7c:bf:08:
55:c8:bc:59:3a:e4:f0:fc:53:c8:dc:38:0b:84:42:
19:fe:06:b3:63:14:0f:f2:3b:fd:a3:8b:03:b7:30:
b9:4c:52:1e:a1:85:9e:eb:71:cc:00:65:e4:90:37:
4e:75:a1:b9:da:8b:30:f7:5d:a1:63:a4:e9:01:fb:
f3:c9:d1:d1:97:87:1f:dc:76:0d:20:b2:b2:ad:f5:
d0:a8:e0:02:aa:fe:12:f5:6f:87:7b:6f:f4:57:29:
25:46:a3:32:3a:c5:48:0f:00:66:88:35:ee:dd:a5:
0c:d6:7c:fd:b1:6a:fa:fa:53:3a:a3:03:76:a7:57:
7c:51:68:08:3b:49:a3:e5:53:63:dd:96:e9:3f:74:
45:41:fa:d8:cd:2e:5c:0e:63:91:96:8b:c0:ca:f8:
7c:21:5f:8e:81:75:96:0a:79:00:9c:16:c1:9c:6a:
5c:4d:fc:db:81:42:05:90:7d:5e:58:ba:e5:d9:47:
b2:3c:28:ad:31:a1:9c:41:00:64:40:f6:78:ab:68:
88:bf:69:8b:11:cc:26:dc:4b:9a:17:6a:cc:c8:20:
20:c4:f6:ea:c7:59:e2:9c:e8:bf:fc:e3:fe:88:1a:
2f:8f:37:09:da:d1:f7:5d:8f:03:b4:00:76:cb:ff:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:68:9D:24:AB:67:46:32:9E:B3:FF:71:B4:9C:3D:A2:32:E2:47
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/12CF5EF67E2F11F18370421CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.172.0/24
Signature Algorithm: sha256WithRSAEncryption
55:40:58:5e:56:01:b9:49:b0:c0:ac:cd:12:6f:68:d2:0a:99:
ea:b9:64:6b:fd:37:7f:36:be:8a:bd:8b:f9:b7:0b:73:f3:cb:
19:96:af:7b:b6:bd:4a:c6:53:36:24:b9:82:9f:86:2b:87:39:
99:d3:35:1f:54:d7:89:9a:09:3a:8f:d3:ce:0c:92:4f:9b:02:
09:92:97:16:29:ad:1f:4e:72:e7:20:8d:95:56:1b:8f:5a:1a:
21:ff:bf:53:a0:72:1f:a4:34:64:6e:56:09:5d:18:37:f9:d5:
10:03:1f:cc:a5:41:39:c9:fe:a1:17:13:24:c6:43:7d:d9:46:
63:4d:22:ea:9f:d5:7e:85:43:cd:91:69:35:2f:8b:4d:3f:82:
07:51:8b:cd:b5:20:51:22:8c:a3:09:0b:f7:cf:1f:ee:7d:a9:
8b:6f:dc:f8:1b:7d:21:0c:9b:6b:07:d9:15:09:14:41:c4:eb:
e6:08:ed:83:da:74:c7:f7:4b:63:05:4c:e8:cb:87:cb:6e:dd:
be:81:d4:7d:38:49:0a:a0:5c:58:5f:35:c1:db:fb:17:06:85:
e3:4e:15:07:49:b9:dc:e4:ef:21:cb:10:d7:d9:6b:ff:dc:f5:
f1:87:ef:4a:bd:e1:fa:30:ff:fb:c6:8a:58:4e:d9:4f:30:a6:
9b:a8:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:23 2026 by rpki-client