Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/488CA7267E3211F1B91182B2CE1D38B0.roa
File: 488CA7267E3211F1B91182B2CE1D38B0.roa (raw, json)
Hash identifier: uOndVz+lHryR8XE8e4ZXXLo6tsFA/wxx3lbZ6lqxsJg=
Subject key identifier: 5F:BB:73:55:D8:A7:83:D7:84:EB:D4:7D:0C:9E:1B:79:45:33:21:F7
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0657
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/488CA7267E3211F1B91182B2CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:43:06 +0000
ROA not before: Sun 12 Jul 2026 20:43:01 +0000
ROA not after: Sun 11 Jul 2027 20:43:01 +0000
asID: 174
IP address blocks: 66.251.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:43:01 2026 GMT
Not After : Jul 11 20:43:01 2027 GMT
Subject: CN=6a53fc5a-9e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:e9:a2:4a:ca:01:65:bb:6c:22:3f:e5:94:
6c:c0:2a:f3:cb:21:5c:fe:65:6f:35:37:fa:02:90:
22:fa:8c:ff:81:d1:41:88:d5:19:c2:da:c1:01:15:
13:3a:c1:10:3a:94:83:ae:31:dd:79:cd:d1:4c:a8:
36:ca:66:e9:85:b2:14:97:e1:d4:ee:a9:a9:70:1e:
4e:28:b4:03:50:0a:b9:2d:6e:61:cb:b2:07:89:2b:
78:1f:a1:e9:49:f7:70:7e:40:d5:cb:1c:5b:64:86:
db:a0:8b:c4:f9:e5:e9:ac:5d:df:ba:4d:b3:3c:43:
de:b5:cc:c3:23:f3:fc:47:7e:b0:14:d5:8e:d4:e5:
24:ef:55:fc:66:9c:48:b7:de:df:4a:7b:80:7d:3a:
09:0c:cb:5e:bd:92:66:0b:85:99:6d:b0:ea:af:1f:
7a:fa:81:49:2e:35:49:80:58:61:94:7f:0f:84:97:
b5:93:c4:eb:d9:00:40:e9:58:65:43:1b:44:e0:37:
b3:d9:86:59:d0:be:04:5a:0f:95:24:02:8e:9b:1f:
33:4e:f1:04:0f:a3:39:08:94:a0:cd:c1:53:77:85:
98:08:a0:a8:92:d9:bb:34:cd:88:83:71:34:13:1b:
1a:db:87:e0:37:f1:17:c7:ca:36:c3:e5:08:21:d8:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:73:55:D8:A7:83:D7:84:EB:D4:7D:0C:9E:1B:79:45:33:21:F7
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/488CA7267E3211F1B91182B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ae:49:c5:b1:41:d1:3e:21:ca:cd:ba:21:e2:2c:f6:05:3e:
24:b8:6a:0b:b6:f2:a1:59:44:18:a1:68:64:b4:66:8c:e2:e8:
4f:26:60:db:a6:4f:fc:c6:57:0d:ee:fc:51:b0:86:7f:be:2a:
23:43:fc:04:e1:aa:b5:df:4a:c1:41:fd:b7:76:6f:00:3c:e8:
49:80:93:c2:7a:70:0d:47:c8:59:3f:e5:27:93:3f:23:ae:a1:
c7:46:9e:63:82:63:c2:92:2a:95:73:39:26:b9:7e:00:dc:e4:
53:59:80:15:5d:4f:fb:26:6b:9e:a4:3d:71:f9:04:fa:c9:57:
ee:93:72:2d:78:41:c2:60:08:a7:f6:dd:1f:00:c8:49:9e:de:
dd:e4:db:b4:ad:3f:bb:f4:fe:a5:d9:c1:63:0c:c6:22:89:4c:
3c:37:76:76:bc:3d:7e:27:9b:29:ef:43:2f:fc:4b:86:1b:ac:
90:20:0b:39:7d:0b:5f:7a:0b:67:f4:ec:20:17:39:16:21:de:
67:8d:f0:de:33:3d:28:3d:a7:27:93:2a:06:f1:23:7c:8f:58:
14:b9:ed:d6:b7:68:14:d4:9d:33:a1:39:ed:bd:5e:35:8f:6c:
74:17:71:ce:5c:af:85:4d:5f:2c:f5:28:25:d0:f0:b2:b0:37:
a3:7a:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:44:31 2026 by rpki-client