Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa
File: 24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa (raw, json)
Hash identifier: S2U9uds7Cld2AWKqvudZAdjph2xQxW8yaq1n4PfigRc=
Subject key identifier: 91:42:C7:9D:8F:E2:53:E1:6E:B5:D9:65:47:0C:F9:67:C9:B3:72:B3
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0621
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa
Signing time: Sun 12 Jul 2026 19:59:08 +0000
ROA not before: Sun 12 Jul 2026 19:59:03 +0000
ROA not after: Sun 11 Jul 2027 19:59:03 +0000
asID: 174
IP address blocks: 66.251.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 19:59:03 2026 GMT
Not After : Jul 11 19:59:03 2027 GMT
Subject: CN=6a53f20c-cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:4d:7f:17:38:de:9f:61:18:28:b8:25:45:
9f:e0:be:6b:ea:30:86:cd:63:cf:e4:1d:8b:38:69:
ed:d6:b5:eb:3d:15:bf:19:e1:a4:d1:c8:3a:f4:0e:
37:da:c7:18:ed:b6:cc:be:e5:63:1e:1e:93:76:72:
86:fd:94:aa:ea:6f:3f:41:ab:fd:2d:e8:87:4b:1b:
c7:4e:cb:fd:0f:7d:40:e1:72:81:3f:f9:f2:c1:f3:
1b:7e:7a:a6:34:79:ee:e2:15:a2:88:4c:ce:a1:9d:
e4:23:2b:d8:f9:8a:a7:1e:67:c7:ec:a6:21:cd:d4:
7e:03:3d:d6:7d:c6:34:c5:52:c6:0f:07:7d:d1:df:
6e:0c:5a:8e:f6:04:1d:dc:b3:64:20:b0:34:41:75:
41:65:89:28:6f:85:da:ec:7e:3a:5b:14:7a:d6:c6:
84:4f:63:5e:6c:1e:61:d5:05:b5:17:db:48:04:1c:
e7:ee:ca:c9:2e:37:a6:4f:4e:04:5f:77:72:c8:76:
d7:fd:7a:47:71:76:3d:54:40:77:99:fb:4c:be:ca:
59:c7:28:25:eb:65:bd:fc:9c:e5:38:54:45:ce:bc:
5a:16:32:ad:90:63:0e:92:9e:95:90:d3:be:99:ce:
80:f9:73:21:34:3e:f0:24:67:e4:f5:08:06:f7:d9:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:C7:9D:8F:E2:53:E1:6E:B5:D9:65:47:0C:F9:67:C9:B3:72:B3
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ee:50:f9:f3:ac:b1:76:dc:65:ec:41:c7:c9:9a:84:e2:68:e2:
dc:77:69:66:21:8c:2d:1b:b2:0c:55:0b:47:94:9c:9a:2b:94:
56:39:82:c8:39:36:8f:33:90:ca:13:d5:38:e7:af:c2:e8:8a:
f2:44:eb:7b:5d:2a:73:5d:79:37:b2:fe:5c:de:aa:d8:9a:13:
ec:8b:76:e4:00:01:53:ad:61:1d:dd:8d:54:eb:33:49:47:e3:
2f:88:d9:68:d8:b6:d1:24:be:b4:8f:d0:ee:5b:05:23:9d:e2:
e4:37:56:ca:93:9c:ae:68:30:14:8a:57:b1:90:fc:db:92:ed:
c9:e7:b5:60:57:6a:c4:93:39:c6:23:ae:4e:fd:ff:09:33:8d:
4d:11:a4:f2:d3:2c:ec:3c:1f:1b:f7:b2:b0:ff:69:96:db:ea:
a6:6d:9d:3f:7f:2e:e7:38:7a:42:3d:ba:ee:d1:ec:60:9a:f8:
f6:c6:b2:f9:c8:ae:48:e6:45:12:66:cc:0c:0f:da:e6:1a:93:
ee:ab:57:0f:37:99:16:b2:a9:a7:58:45:30:3d:69:65:d9:66:
8c:57:17:3a:fa:4c:d8:46:a8:83:12:14:04:06:46:23:b9:8c:
1e:56:82:6b:f9:7a:91:80:47:79:70:bf:b2:6a:1e:f5:82:58:
d7:ef:28:a5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA3MTIxOTU5MDNaFw0yNzA3MTExOTU5MDNaMBgxFjAU
BgNVBAMTDTZhNTNmMjBjLWNmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr3k1/Fzjen2EYKLglRZ/gvmvqMIbNY8/kHYs4ae3Wtes9Fb8Z4aTRyDr0
Djfaxxjttsy+5WMeHpN2cob9lKrqbz9Bq/0t6IdLG8dOy/0PfUDhcoE/+fLB8xt+
eqY0ee7iFaKITM6hneQjK9j5iqceZ8fspiHN1H4DPdZ9xjTFUsYPB33R324MWo72
BB3cs2QgsDRBdUFliShvhdrsfjpbFHrWxoRPY15sHmHVBbUX20gEHOfuyskuN6ZP
TgRfd3LIdtf9ekdxdj1UQHeZ+0y+ylnHKCXrZb38nOU4VEXOvFoWMq2QYw6SnpWQ
076ZzoD5cyE0PvAkZ+T1CAb32V6PAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUkULH
nY/iU+FutdllRwz5Z8mzcrMwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzI0Mzg2Q0VFN0UyQzExRjFBMURCOEIwQkNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+5AwDQYJKoZIhvcNAQELBQAD
ggEBAO5Q+fOssXbcZexBx8mahOJo4tx3aWYhjC0bsgxVC0eUnJorlFY5gsg5No8z
kMoT1Tjnr8LoivJE63tdKnNdeTey/lzeqtiaE+yLduQAAVOtYR3djVTrM0lH4y+I
2WjYttEkvrSP0O5bBSOd4uQ3VsqTnK5oMBSKV7GQ/NuS7cnntWBXasSTOcYjrk79
/wkzjU0RpPLTLOw8Hxv3srD/aZbb6qZtnT9/Luc4ekI9uu7R7GCa+PbGsvnIrkjm
RRJmzAwP2uYak+6rVw83mRayqadYRTA9aWXZZoxXFzr6TNhGqIMSFAQGRiO5jB5W
gmv5epGAR3lwv7JqHvWCWNfvKKU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:49 2026 by rpki-client