Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/56E2A1FC7E2F11F197B081A1CE1D38B0.roa
File: 56E2A1FC7E2F11F197B081A1CE1D38B0.roa (raw, json)
Hash identifier: MLMn7DgcjC9kJt10C+ajiAUd9w+iQTq8t0+fDA7JRrw=
Subject key identifier: F5:26:74:72:E9:C6:CE:89:76:FF:E0:14:A6:D4:08:19:78:D5:23:88
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 063A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/56E2A1FC7E2F11F197B081A1CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:22:01 +0000
ROA not before: Sun 12 Jul 2026 20:21:57 +0000
ROA not after: Sun 11 Jul 2027 20:21:57 +0000
asID: 174
IP address blocks: 66.251.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:21:57 2026 GMT
Not After : Jul 11 20:21:57 2027 GMT
Subject: CN=6a53f769-71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:10:9e:15:b2:6b:bb:81:09:69:44:1f:26:
14:6f:1c:97:d8:21:83:74:55:86:89:80:f8:3e:17:
2f:79:0b:3f:64:b7:0d:8a:82:03:d6:83:bc:17:b8:
ab:0b:14:83:ac:a8:ac:29:fa:6b:e1:15:88:93:f9:
51:44:1c:33:6f:1f:5a:86:9b:7b:4c:9a:83:e2:1c:
d8:6c:9d:2c:7d:fc:c8:99:42:58:1a:e6:11:e4:a7:
82:a7:19:af:4a:7c:36:7f:df:62:96:56:ad:65:ec:
c0:60:c8:fd:cf:af:94:02:b9:75:a1:80:b8:3b:e9:
cc:bd:03:2c:c6:b7:12:60:c4:bc:45:24:f4:44:22:
ad:d2:3a:99:41:ce:dc:9d:e3:80:18:d0:43:ba:8e:
06:bc:33:0c:27:7c:72:4a:3d:ba:b2:32:45:9f:b3:
85:e1:e2:dd:68:6c:f9:1b:1f:87:f7:54:91:be:92:
61:13:3c:d9:03:c6:9e:25:39:17:23:2b:2a:2b:d6:
18:eb:ac:df:58:44:7d:47:85:61:fc:b4:67:81:df:
2f:29:82:31:98:6d:59:d4:49:f8:01:62:69:2e:e4:
15:4d:fc:d8:ac:52:ca:ed:39:71:87:e0:5e:e7:24:
ca:ad:7c:d6:27:df:cd:ab:e8:51:90:d6:b4:f5:f5:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:74:72:E9:C6:CE:89:76:FF:E0:14:A6:D4:08:19:78:D5:23:88
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/56E2A1FC7E2F11F197B081A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:13:a4:ef:97:9e:c4:6e:91:d4:d7:1c:5b:b1:a3:c1:fc:89:
32:bd:38:ed:a0:2c:97:a2:81:ad:d3:8f:2f:0c:c4:36:23:dc:
9a:32:21:86:f6:35:88:d4:a9:79:86:d5:cb:94:21:43:6a:0d:
83:9d:17:80:86:12:ca:72:8c:a1:83:db:56:fe:24:3d:63:2f:
5b:42:84:7f:c3:25:6a:ac:aa:9e:7b:87:be:02:b3:11:34:3e:
f1:0d:9e:34:0d:3a:26:b2:1d:fa:a0:4b:5d:73:ea:38:70:5a:
fc:71:f1:5d:20:a0:bf:d3:a0:b1:65:fd:25:d9:28:81:cb:e1:
63:62:d7:5a:42:55:4f:c1:3e:bd:43:f7:3b:78:8f:4a:b4:8b:
70:cf:da:dc:19:e0:29:75:ae:22:df:fe:7c:8f:b6:9c:ff:cf:
8f:0c:14:5f:31:1e:f4:9c:eb:8f:c6:d0:f6:20:65:db:c5:4a:
f2:10:11:73:3a:1b:a7:e3:9a:63:d8:3c:06:40:6e:ec:95:25:
45:83:0d:37:a8:0d:80:a4:0e:fe:8b:28:09:22:db:46:a6:0a:
12:c0:d8:0b:02:49:97:79:13:0e:ee:ce:c2:c0:2e:78:59:2e:
ed:04:85:66:cd:c5:ef:c6:10:0a:5c:16:2b:27:08:7d:48:45:
10:a1:b5:18
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBjowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA3MTIyMDIxNTdaFw0yNzA3MTEyMDIxNTdaMBgxFjAU
BgNVBAMTDTZhNTNmNzY5LTcxYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC78RCeFbJru4EJaUQfJhRvHJfYIYN0VYaJgPg+Fy95Cz9ktw2KggPWg7wX
uKsLFIOsqKwp+mvhFYiT+VFEHDNvH1qGm3tMmoPiHNhsnSx9/MiZQlga5hHkp4Kn
Ga9KfDZ/32KWVq1l7MBgyP3Pr5QCuXWhgLg76cy9AyzGtxJgxLxFJPREIq3SOplB
ztyd44AY0EO6jga8MwwnfHJKPbqyMkWfs4Xh4t1obPkbH4f3VJG+kmETPNkDxp4l
ORcjKyor1hjrrN9YRH1HhWH8tGeB3y8pgjGYbVnUSfgBYmku5BVN/NisUsrtOXGH
4F7nJMqtfNYn382r6FGQ1rT19SYbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9SZ0
cunGzol2/+AUptQIGXjVI4gwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzU2RTJBMUZDN0UyRjExRjE5N0IwODFBMUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+64wDQYJKoZIhvcNAQELBQAD
ggEBAH8TpO+XnsRukdTXHFuxo8H8iTK9OO2gLJeiga3Tjy8MxDYj3JoyIYb2NYjU
qXmG1cuUIUNqDYOdF4CGEspyjKGD21b+JD1jL1tChH/DJWqsqp57h74CsxE0PvEN
njQNOiayHfqgS11z6jhwWvxx8V0goL/ToLFl/SXZKIHL4WNi11pCVU/BPr1D9zt4
j0q0i3DP2twZ4Cl1riLf/nyPtpz/z48MFF8xHvSc64/G0PYgZdvFSvIQEXM6G6fj
mmPYPAZAbuyVJUWDDTeoDYCkDv6LKAki20amChLA2AsCSZd5Ew7uzsLALnhZLu0E
hWbNxe/GEApcFisnCH1IRRChtRg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:05 2026 by rpki-client