Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/1A9CC1767E3111F1BAA359AACE1D38B0.roa
File: 1A9CC1767E3111F1BAA359AACE1D38B0.roa (raw, json)
Hash identifier: sri8YlprmjTFTKhiBNsUHI55PNlpSbIzcKUcDqn8R3A=
Subject key identifier: FA:C2:0D:CC:6E:97:03:35:1D:10:3B:AB:F3:2E:4F:CF:7D:6B:98:E2
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0652
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/1A9CC1767E3111F1BAA359AACE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:34:39 +0000
ROA not before: Sun 12 Jul 2026 20:34:35 +0000
ROA not after: Sun 11 Jul 2027 20:34:35 +0000
asID: 174
IP address blocks: 66.251.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:34:35 2026 GMT
Not After : Jul 11 20:34:35 2027 GMT
Subject: CN=6a53fa5f-360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d4:53:36:86:a2:c5:39:09:2b:83:bd:9f:cc:
21:dc:39:67:79:ec:8d:1d:32:27:13:75:d6:a5:1a:
a9:f9:2d:f3:cf:a6:40:90:75:27:15:f4:40:23:90:
d2:f3:1a:f6:cc:65:ac:31:89:b8:44:46:11:91:ba:
d5:c8:0a:19:b6:09:92:1c:0c:04:b7:c4:b4:65:dc:
ce:d0:20:a6:a9:f4:67:2a:89:ac:7e:6f:df:5e:f3:
1f:d3:2f:d6:cc:61:e9:40:48:d5:54:87:84:ea:bc:
57:22:42:06:35:2f:78:5d:06:46:83:fb:41:be:96:
97:5e:f2:10:4c:8a:0d:c2:3f:cc:0f:57:a3:2d:d0:
fc:a2:65:98:2c:9d:71:b1:5a:3c:61:3a:ff:d4:f0:
72:c7:76:7b:cc:cc:6c:a7:f8:6a:55:0e:6c:4b:31:
bf:f8:cc:f0:ee:f7:e4:80:90:c6:cd:6c:42:6d:fd:
6d:91:9d:5b:f9:01:bf:3a:4a:27:7c:27:f8:87:1a:
ce:3d:8a:f8:f5:a8:35:47:b4:f0:53:90:07:42:5b:
bb:a7:eb:4a:22:e2:2d:67:f4:35:5c:f5:e1:db:54:
86:5c:ac:87:7f:33:67:c0:a1:92:5e:34:a6:07:1e:
7b:9a:62:5f:9d:42:86:3b:90:5b:78:8c:bb:6e:d5:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:0D:CC:6E:97:03:35:1D:10:3B:AB:F3:2E:4F:CF:7D:6B:98:E2
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/1A9CC1767E3111F1BAA359AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.188.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:8b:32:a9:86:bc:84:7c:c5:b1:35:ce:a6:c3:9c:bc:a2:c5:
8a:8e:f5:b6:3e:1a:98:05:57:a6:93:e7:e4:bf:14:20:a9:f9:
dc:23:b1:6b:24:2e:c9:9e:fb:da:38:44:fb:00:0a:ce:a8:ee:
21:9d:b0:ff:32:14:0b:95:44:8c:30:23:07:97:e7:45:f5:9d:
c9:e4:13:33:72:62:6d:29:77:98:c9:26:d9:bc:d3:14:8c:cf:
44:04:70:68:ef:27:a0:8c:e9:55:ee:09:52:29:3c:9b:3e:a3:
9f:28:d7:68:4f:db:8f:d1:c9:67:99:d7:07:ae:44:96:fe:a5:
21:1c:b2:53:fd:c8:34:62:5d:47:02:84:e8:90:57:04:7f:5a:
82:06:24:2e:65:77:a6:f6:4a:7a:e3:a5:99:2a:7d:c5:5e:48:
ea:1c:bf:75:b8:00:1d:0e:e7:3d:87:c3:77:19:d8:48:e8:cf:
10:5b:31:ed:6a:2f:46:c1:a5:01:e8:8a:ed:5e:90:2b:e7:fc:
75:61:91:ed:a8:d8:2a:a7:03:5c:ed:8e:39:02:22:2d:4e:a8:
af:16:bd:82:4f:8d:7b:41:88:69:59:c5:01:3f:ff:ba:f8:95:
cd:5a:c6:72:f7:d6:ea:fd:29:89:32:9f:4c:40:28:f0:3d:04:
3f:9b:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:50 2026 by rpki-client