Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3943014C7E2E11F1B899F517CF1D38B0.roa
File: 3943014C7E2E11F1B899F517CF1D38B0.roa (raw, json)
Hash identifier: Ld72qTQ+RiSgzBnyA5W/7X5KKgV11K1UIxJd9Z50BXg=
Subject key identifier: 6F:8A:17:46:53:9B:9C:34:08:B5:A9:84:9D:9B:32:7F:82:B4:CF:95
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 062E
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3943014C7E2E11F1B899F517CF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:14:02 +0000
ROA not before: Sun 12 Jul 2026 20:13:58 +0000
ROA not after: Sun 11 Jul 2027 20:13:58 +0000
asID: 174
IP address blocks: 66.251.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:13:58 2026 GMT
Not After : Jul 11 20:13:58 2027 GMT
Subject: CN=6a53f58a-e8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:b2:e2:4e:6c:fd:39:ab:5b:1c:9f:06:cd:
e8:18:38:67:e9:af:ca:10:a2:72:40:61:1d:75:fe:
e1:b4:3e:31:00:84:ed:d7:f4:86:7f:82:11:23:77:
a5:ed:32:dc:8f:cc:82:b8:c6:8c:e4:f4:a0:b1:d3:
5d:ae:7a:03:9f:00:ea:9a:cf:98:a0:2a:de:27:f5:
6c:2c:d4:31:59:ff:26:c0:9b:a4:87:16:dd:19:2c:
29:c9:d0:da:4b:9f:12:42:a8:08:20:9e:14:7d:7b:
2e:29:7e:70:2a:34:56:df:11:67:85:03:b2:2a:b1:
a0:0d:ef:9f:f7:54:98:b3:4b:01:9e:a8:3a:f6:a0:
f2:49:d6:92:46:f9:7a:6b:90:eb:5d:a4:6c:a5:e2:
d4:95:ef:d7:f9:6b:aa:46:b2:41:39:7e:df:c6:6e:
c8:72:b5:ff:4c:02:6e:0b:f5:42:8a:4e:75:0f:5d:
18:30:ed:6a:b0:d4:9a:80:19:f6:cc:7c:47:4e:bf:
84:56:40:6d:45:24:cf:80:65:eb:5c:03:a5:30:99:
0d:44:f7:ea:d4:e0:e9:13:8e:37:64:6d:5e:da:da:
4b:0e:e5:aa:e5:cc:5c:09:e4:e8:ac:35:b4:c9:4e:
fe:8d:1a:d0:76:d0:c1:d9:46:2f:74:4a:bc:1a:bd:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:17:46:53:9B:9C:34:08:B5:A9:84:9D:9B:32:7F:82:B4:CF:95
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3943014C7E2E11F1B899F517CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d1:95:40:86:f2:c0:c5:8a:b8:4a:64:56:79:55:6f:d5:ad:
31:22:b0:9a:a8:c7:79:9b:5a:aa:80:cd:6f:e8:95:89:97:5c:
cb:ed:1d:95:50:df:07:bf:77:26:d0:24:a0:c7:43:b3:b1:e4:
9f:56:81:a0:73:2c:ef:7d:8e:49:95:98:8e:e3:84:fa:93:3c:
bb:7b:56:32:5e:c5:ec:bb:13:75:64:b6:83:2a:1c:b9:53:ae:
94:94:b6:71:93:c7:f5:d9:b0:a0:f4:39:1e:d5:04:3d:93:bc:
89:ea:60:f2:c5:d4:b5:98:e7:c4:57:10:6c:6b:f1:ff:8b:58:
07:d5:49:a3:0d:a6:c0:83:59:6e:5b:4d:6a:2e:3f:13:52:17:
62:d2:33:b9:3b:25:e7:24:80:17:1d:35:dd:bb:00:22:70:3c:
11:bc:31:1b:df:d8:ef:62:96:12:14:d1:72:97:74:d9:5b:79:
8f:70:8e:38:ae:5b:79:b2:14:c9:e2:66:73:21:61:21:e5:b9:
e8:11:10:1c:0e:92:80:84:17:fa:69:7d:f2:17:57:d3:4d:af:
35:6e:6d:76:8f:b1:43:55:80:8a:2c:39:ae:e5:cc:c1:d7:17:
4f:13:70:81:e5:ec:59:68:e9:7c:78:fa:3a:ea:9f:ac:69:72:
97:53:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:09 2026 by rpki-client