Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/326EDB067E2F11F1B541811CCF1D38B0.roa
File: 326EDB067E2F11F1B541811CCF1D38B0.roa (raw, json)
Hash identifier: 1XIr2PJb94zxYZkffWRict/jrq9o05Vf+fzVAjTqwcQ=
Subject key identifier: 5A:85:AB:09:67:7F:0B:1E:6E:68:B8:C1:7F:ED:07:02:60:DA:81:87
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0638
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/326EDB067E2F11F1B541811CCF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:21:00 +0000
ROA not before: Sun 12 Jul 2026 20:20:55 +0000
ROA not after: Sun 11 Jul 2027 20:20:55 +0000
asID: 174
IP address blocks: 66.251.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:20:55 2026 GMT
Not After : Jul 11 20:20:55 2027 GMT
Subject: CN=6a53f72c-b0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:43:91:e5:d8:50:87:9b:f3:32:48:74:6e:
a8:62:82:6e:d0:e8:e4:ab:26:49:b1:a3:59:6d:5f:
df:7e:3c:86:fe:b8:af:5e:36:26:8a:c4:55:18:0f:
c0:71:80:49:23:92:f8:fa:40:51:a7:d5:a6:c5:33:
87:da:83:ca:bb:5d:90:02:7f:08:15:e7:5f:1c:aa:
22:38:f4:0e:d9:71:7c:ac:45:7a:f3:8e:f9:96:10:
de:2a:3f:f0:7c:a6:e2:7f:37:eb:43:80:d8:61:66:
af:8a:45:f6:16:59:47:6b:31:28:18:ef:51:5f:c1:
95:a2:49:6f:c5:f7:0e:42:46:a7:fc:2b:31:57:d4:
fe:11:7d:78:16:90:f2:6b:7b:a1:23:d3:a3:aa:3b:
80:fc:3b:a2:4b:4e:40:e8:c0:92:97:fb:a6:a6:4e:
f6:8d:66:a0:ad:70:ff:57:84:ed:92:2c:b2:2f:d5:
6f:d5:5e:32:9e:2d:52:59:04:56:79:cd:88:a5:0c:
91:fe:3d:a2:8b:4d:17:13:ae:76:14:64:30:a0:ea:
04:59:6c:1d:33:cb:c4:43:e2:7a:68:48:8a:09:91:
3b:4b:00:6e:61:2c:14:fa:9f:66:65:39:43:ac:89:
8b:d6:32:18:c5:a5:67:2d:55:e2:82:43:b1:5b:3e:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:AB:09:67:7F:0B:1E:6E:68:B8:C1:7F:ED:07:02:60:DA:81:87
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/326EDB067E2F11F1B541811CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.173.0/24
Signature Algorithm: sha256WithRSAEncryption
95:29:ec:d3:71:d6:b5:33:ae:fa:ba:14:87:2f:90:5a:9a:b6:
5c:b8:86:18:ca:7d:13:25:21:e0:9a:f2:8c:46:29:54:fb:4c:
c2:7c:55:e0:d0:a0:ea:a7:72:c4:38:1a:11:48:98:8a:df:e9:
fc:86:72:a5:d2:9b:6f:eb:01:fb:0e:a9:bb:3f:63:59:be:0b:
f8:98:b4:26:45:db:83:65:15:03:7d:1b:70:a0:d7:c5:2f:4a:
fc:4a:25:5b:62:2b:f6:9f:29:ce:b3:97:8e:96:d5:93:91:72:
48:63:d6:2f:1e:ef:a5:96:64:56:f0:63:98:2e:54:25:ed:e8:
7a:71:84:e6:ca:42:da:60:ac:ef:4b:fd:3c:ba:c9:39:7a:f4:
e1:4f:3f:58:da:fe:a2:75:a5:f3:ce:3f:34:f6:e0:da:c8:98:
cf:66:28:18:67:88:e5:1e:fc:4c:36:c6:5b:13:85:11:df:46:
48:85:c5:63:2c:64:7d:42:84:4e:bf:b7:49:29:a2:dc:02:98:
fd:fb:27:d9:a5:f0:2a:c0:6f:a0:51:5e:2f:86:fb:88:d3:f2:
24:87:72:9c:89:85:e2:21:cd:83:87:be:5c:c5:4a:6b:68:c7:
30:c7:69:d2:92:c6:af:40:9f:ad:44:71:09:06:9f:e6:51:b2:
c9:1f:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:34 2026 by rpki-client