Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4849F37E7E2B11F1AE846107CF1D38B0.roa
File: 4849F37E7E2B11F1AE846107CF1D38B0.roa (raw, json)
Hash identifier: sxDDEBpdr+bnORECpkJaiHwwOSZML6kx6uvqpMOhO7E=
Subject key identifier: 1B:22:10:CD:E7:DD:6D:EB:9F:0C:94:C5:FE:51:A9:67:1A:FC:1F:37
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0619
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4849F37E7E2B11F1AE846107CF1D38B0.roa
Signing time: Sun 12 Jul 2026 19:53:02 +0000
ROA not before: Sun 12 Jul 2026 19:52:49 +0000
ROA not after: Sun 11 Jul 2027 19:52:49 +0000
asID: 174
IP address blocks: 66.251.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 19:52:49 2026 GMT
Not After : Jul 11 19:52:49 2027 GMT
Subject: CN=6a53f09e-5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:af:5d:e0:05:43:95:18:72:25:3c:d8:fe:
a1:ce:d1:7e:a0:84:f8:35:fc:b4:9d:c6:99:98:9c:
91:4e:bf:b3:4d:ca:21:23:af:83:4b:eb:a6:44:37:
e3:b6:cd:fe:24:a6:f5:ba:5c:d7:a4:00:f1:7e:c1:
24:00:c9:83:1d:54:ad:4a:3c:4c:87:49:5a:65:59:
18:de:21:8e:6d:be:22:7b:da:96:24:42:80:24:a1:
ed:0e:23:ce:55:be:b2:52:6a:f0:12:91:80:fe:0e:
0d:9d:fa:07:95:dd:2a:c7:9b:5b:f5:c7:e9:2d:5b:
0c:9c:4a:95:95:6f:d3:68:d9:f1:95:a1:0f:31:24:
d4:a9:d4:96:43:2b:f9:a2:a8:b8:3f:4d:f1:0d:73:
5b:b5:f7:c7:fc:31:62:d6:1d:48:a9:9a:4c:6f:36:
1b:d0:c0:a3:bc:16:67:f2:cb:61:7f:42:be:1e:ed:
c2:fc:5f:c9:1f:81:0a:53:a8:a4:06:29:95:e3:34:
f0:08:65:35:36:34:1a:ad:6e:ec:e2:cd:98:ad:b6:
d5:fe:d1:38:c7:be:98:39:a3:77:45:08:40:11:c4:
f1:71:39:63:aa:a2:69:fa:eb:83:e0:ef:90:9e:86:
51:87:cf:7a:eb:0b:4b:89:81:30:4e:f3:d0:6c:c2:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:10:CD:E7:DD:6D:EB:9F:0C:94:C5:FE:51:A9:67:1A:FC:1F:37
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4849F37E7E2B11F1AE846107CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:95:7a:7b:b4:f1:cf:40:2e:88:a3:cd:03:25:04:dd:7c:6f:
07:63:fd:8e:0c:d8:e5:f3:35:4b:94:2c:ed:e2:66:e8:76:ed:
6b:5b:7d:8e:50:49:b0:ed:7c:84:68:ea:d2:50:a9:23:fc:73:
09:42:08:01:24:d7:c0:36:3f:fe:d0:e0:7c:65:5f:6e:fe:f1:
06:3a:7e:67:21:01:f7:3d:8d:24:b1:53:65:23:76:8e:bd:4f:
b3:a8:23:9b:83:08:5c:ab:09:65:bb:17:01:6f:e9:a4:5e:4c:
4e:c7:aa:80:51:81:e8:dd:25:3c:94:67:3e:6d:94:14:ca:37:
0b:ba:6a:2d:97:51:25:df:03:d3:85:c3:c3:d1:01:3b:01:90:
97:16:f9:d6:00:3f:46:46:19:17:a2:20:d6:cf:3e:9f:8d:50:
63:ab:6f:06:fb:b1:aa:71:4e:4d:e1:cd:8e:14:22:31:d9:bd:
69:aa:66:c0:02:e5:ed:2e:51:3f:12:42:04:9c:3b:15:c9:4a:
ca:e6:9a:85:0d:12:27:f7:f4:db:32:03:bc:e0:bd:bb:18:1d:
99:d5:e3:d2:7d:3a:9b:2a:22:ca:36:61:81:54:26:2b:43:f1:
79:24:e3:99:8e:59:68:dc:a3:62:cd:c7:6d:0b:c5:8b:c0:fd:
fb:cf:48:8b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA3MTIxOTUyNDlaFw0yNzA3MTExOTUyNDlaMBgxFjAU
BgNVBAMTDTZhNTNmMDllLTU3NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpMq9d4AVDlRhyJTzY/qHO0X6ghPg1/LSdxpmYnJFOv7NNyiEjr4NL66ZE
N+O2zf4kpvW6XNekAPF+wSQAyYMdVK1KPEyHSVplWRjeIY5tviJ72pYkQoAkoe0O
I85VvrJSavASkYD+Dg2d+geV3SrHm1v1x+ktWwycSpWVb9No2fGVoQ8xJNSp1JZD
K/miqLg/TfENc1u198f8MWLWHUipmkxvNhvQwKO8Fmfyy2F/Qr4e7cL8X8kfgQpT
qKQGKZXjNPAIZTU2NBqtbuzizZitttX+0TjHvpg5o3dFCEARxPFxOWOqomn664Pg
75CehlGHz3rrC0uJgTBO89BswhvPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUGyIQ
zefdbeufDJTF/lGpZxr8HzcwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzQ4NDlGMzdFN0UyQjExRjFBRTg0NjEwN0NGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+4EwDQYJKoZIhvcNAQELBQAD
ggEBAL2Venu08c9ALoijzQMlBN18bwdj/Y4M2OXzNUuULO3iZuh27WtbfY5QSbDt
fIRo6tJQqSP8cwlCCAEk18A2P/7Q4HxlX27+8QY6fmchAfc9jSSxU2Ujdo69T7Oo
I5uDCFyrCWW7FwFv6aReTE7HqoBRgejdJTyUZz5tlBTKNwu6ai2XUSXfA9OFw8PR
ATsBkJcW+dYAP0ZGGReiINbPPp+NUGOrbwb7sapxTk3hzY4UIjHZvWmqZsAC5e0u
UT8SQgScOxXJSsrmmoUNEif39NsyA7zgvbsYHZnV49J9OpsqIso2YYFUJitD8Xkk
45mOWWjco2LNx20LxYvA/fvPSIs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:14 2026 by rpki-client