Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5B43754A7E3011F1B6C216A6CE1D38B0.roa
File: 5B43754A7E3011F1B6C216A6CE1D38B0.roa (raw, json)
Hash identifier: 0hAe/QtewAi2sMOEQpa0fwfSQe7kQWIzxoUKxq88RUs=
Subject key identifier: 6F:07:63:F8:E4:0C:5D:53:74:42:A7:28:06:F2:2F:25:1A:39:35:0D
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0648
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5B43754A7E3011F1B6C216A6CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:29:18 +0000
ROA not before: Sun 12 Jul 2026 20:29:14 +0000
ROA not after: Sun 11 Jul 2027 20:29:14 +0000
asID: 174
IP address blocks: 66.251.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:29:14 2026 GMT
Not After : Jul 11 20:29:14 2027 GMT
Subject: CN=6a53f91e-e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:be:01:ca:43:92:db:52:09:44:fe:e4:19:
08:c9:57:8e:76:98:c4:b8:d4:1f:54:ed:73:c7:27:
bc:cb:17:1b:8e:c6:18:84:4b:63:b5:10:76:18:16:
4a:77:86:fb:87:b6:2e:fd:de:41:89:b7:e7:ed:fc:
51:2f:75:f0:c9:f3:8b:f1:7d:94:a3:01:ab:e3:9b:
8b:85:b3:f0:24:70:51:86:86:1c:4c:15:bd:4a:ce:
1f:ce:c1:8c:c6:19:d5:36:f1:b7:74:a2:f1:47:48:
d1:f8:ec:79:46:54:3c:df:76:8f:d2:d4:c8:1f:7d:
65:7f:fd:00:64:f6:c2:ef:f8:c1:23:f4:8c:57:23:
93:56:8b:b7:ec:ef:de:8d:e6:66:1c:3f:de:9b:67:
1c:67:2b:50:97:61:b3:ae:83:7c:55:10:21:7d:0c:
1f:7e:d4:b7:10:b0:4c:04:83:4d:46:76:30:ae:ae:
3e:13:56:4d:74:43:27:71:03:7c:b3:75:32:a0:e0:
df:ea:0f:93:af:5b:15:e3:d6:dd:e0:22:d0:bb:b6:
df:9f:75:cd:43:34:4e:b3:31:d5:63:79:f6:df:52:
c5:30:4d:12:10:dc:63:8a:56:6c:f7:76:65:b7:80:
92:fc:d7:e1:a3:5a:4b:06:73:e5:bb:7d:3c:76:35:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:07:63:F8:E4:0C:5D:53:74:42:A7:28:06:F2:2F:25:1A:39:35:0D
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5B43754A7E3011F1B6C216A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ea:d7:b2:39:94:cb:7e:53:15:7d:c3:08:0b:54:31:05:43:
97:1a:88:90:8c:19:9c:22:32:8d:4d:10:e6:04:bb:ea:24:18:
e8:ca:74:a3:00:d9:52:82:d8:48:dd:da:76:c1:46:d8:1c:a5:
dc:3c:c2:3f:b4:7f:a1:43:d8:4e:fd:5c:d4:01:6c:66:33:a7:
a1:50:0b:1f:71:51:df:0f:71:8f:60:ae:e1:ea:db:ef:83:48:
41:79:50:f0:4e:26:1d:06:b9:90:c8:b5:c1:3b:1d:ff:fc:da:
37:79:1b:89:87:68:70:fa:ab:fc:28:b9:e7:27:b3:f2:c7:be:
44:d1:1f:d7:75:ab:92:c4:d7:e2:ae:75:36:21:87:b0:74:72:
1d:c2:70:12:53:f7:20:00:58:df:bb:ab:4f:31:d0:24:21:bd:
95:19:5d:fa:10:f7:7b:f9:a2:c1:6a:8f:8e:5b:39:36:fc:89:
e7:53:17:89:db:c3:06:f8:aa:2b:73:74:c7:34:47:43:41:c3:
eb:3f:52:0e:7b:f9:8a:8e:aa:3e:23:e0:d3:8a:f3:95:17:8f:
35:6b:56:cb:ed:96:83:d4:7e:3c:ab:4e:21:b1:94:c1:ce:9c:
22:99:b3:8f:2a:eb:ce:29:c7:20:cb:4a:61:af:9c:36:2d:50:
3d:68:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:29 2026 by rpki-client