Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4D8965EE7E2C11F1AD65030CCF1D38B0.roa
File: 4D8965EE7E2C11F1AD65030CCF1D38B0.roa (raw, json)
Hash identifier: im27BEXtZMCxHYCtlYuIYnBk5vy5TS9xuR5cBwFGxvk=
Subject key identifier: 2A:53:C5:64:FB:5C:4B:25:7F:15:13:58:4C:EA:E0:0A:28:10:05:9A
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0623
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4D8965EE7E2C11F1AD65030CCF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:00:17 +0000
ROA not before: Sun 12 Jul 2026 20:00:13 +0000
ROA not after: Sun 11 Jul 2027 20:00:13 +0000
asID: 174
IP address blocks: 66.251.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:00:13 2026 GMT
Not After : Jul 11 20:00:13 2027 GMT
Subject: CN=6a53f251-08f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:14:2e:b1:fb:14:ec:a0:3f:70:31:2f:28:
a0:50:bc:e0:7f:c3:99:bb:0f:91:a8:11:f1:3a:f4:
89:09:96:4e:3b:f1:a5:92:dd:62:65:cd:98:42:6c:
8d:4b:4e:04:56:e8:66:80:6c:ee:c9:4b:28:93:ca:
c8:3f:28:33:d7:4c:34:c1:bf:c5:f7:65:72:3c:17:
b9:60:98:36:08:58:a8:fd:f6:df:99:f5:75:09:9f:
4b:b6:76:31:0f:e5:54:17:53:70:c8:d8:5a:c2:2f:
2f:37:07:ed:c1:fb:94:31:8f:9d:bd:b2:26:2f:d0:
1f:b6:30:66:a3:21:5b:05:7c:93:38:04:3f:9c:25:
5b:d9:73:39:18:ef:2c:2e:52:7f:48:0d:b5:6c:81:
e8:11:63:ea:71:a3:19:97:13:8e:aa:36:44:76:7a:
72:c8:f6:ae:02:b6:88:4f:a3:9c:b7:9a:3d:bd:56:
3a:1f:4b:e2:fe:ba:e5:07:ef:92:60:f0:38:0d:bd:
66:77:05:95:c1:cd:71:3c:a0:88:ed:91:b6:01:c9:
7d:5a:4b:1c:69:66:9a:03:9e:39:d0:71:e0:fc:de:
6a:c7:d5:b2:59:a2:75:d5:cf:30:32:58:65:99:8c:
a9:67:19:28:96:df:aa:a6:69:75:d5:df:53:76:55:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:C5:64:FB:5C:4B:25:7F:15:13:58:4C:EA:E0:0A:28:10:05:9A
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4D8965EE7E2C11F1AD65030CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4a:5c:37:24:e4:66:c6:b1:ca:42:55:cc:1e:0b:06:58:42:
35:65:18:6c:91:38:62:4a:69:60:7d:b0:5a:2c:79:e2:4b:8c:
5d:8d:54:63:08:2f:91:78:33:b7:9a:f4:55:28:70:6f:03:69:
fe:7f:a4:18:ec:a4:3a:97:74:10:30:46:83:aa:48:fc:92:30:
60:61:97:9b:54:ca:aa:a0:1f:63:50:fa:2a:f8:08:91:ad:ae:
fa:0a:7f:62:11:e9:93:f9:12:af:83:99:d7:04:fe:c2:2e:74:
59:13:46:6c:14:b6:41:f1:79:d1:27:6f:0e:48:5b:c6:0a:ab:
1a:21:27:41:95:48:30:d5:4c:80:52:7f:00:ee:5b:66:3c:5d:
83:5f:c9:8e:e5:51:5a:52:04:a4:0b:ce:d9:ff:5c:51:30:de:
62:e2:70:22:0c:27:65:f2:04:bd:3d:a6:53:3d:f3:bc:9d:37:
1f:ba:30:0a:c7:01:3a:c9:19:ef:12:d8:f1:10:8e:7a:4b:f7:
b4:49:33:46:23:e8:42:df:09:58:67:53:54:d6:45:fb:ca:43:
ed:00:74:6b:eb:e2:29:26:68:0e:f8:d0:53:d8:9f:4e:29:34:
65:a4:10:46:25:87:8b:16:be:4c:cf:f4:c8:cc:5d:cd:a3:fb:
ff:12:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:10 2026 by rpki-client