Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5CBD50B47E2E11F1A0890D18CF1D38B0.roa
File: 5CBD50B47E2E11F1A0890D18CF1D38B0.roa (raw, json)
Hash identifier: Q7c0Ul63V8lCAYTN/5wp6Pif/Y/osWhWIIbpU+DnH0U=
Subject key identifier: E7:49:A7:7A:AD:2A:B0:A6:34:40:03:4C:28:48:84:7C:84:CF:B4:4C
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0630
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5CBD50B47E2E11F1A0890D18CF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:15:02 +0000
ROA not before: Sun 12 Jul 2026 20:14:57 +0000
ROA not after: Sun 11 Jul 2027 20:14:57 +0000
asID: 174
IP address blocks: 66.251.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:14:57 2026 GMT
Not After : Jul 11 20:14:57 2027 GMT
Subject: CN=6a53f5c6-f728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:26:bc:48:c4:a0:74:57:46:f1:82:bb:4a:71:
cd:54:8d:47:d9:f6:1a:17:9b:27:cf:0b:d6:5c:6f:
b2:cc:56:ca:b6:37:a5:f6:79:db:30:38:8b:cc:7b:
0d:40:e4:29:44:03:8d:05:87:77:1f:fc:36:3d:17:
93:d5:f6:24:4d:b6:ac:a6:f8:6a:33:39:5b:a7:28:
c5:90:85:8b:03:89:8d:ea:5b:2f:ad:79:6c:3c:d3:
e4:51:fb:83:bc:86:57:73:ca:49:c5:55:0f:18:65:
5b:73:e0:72:2c:6b:8d:a8:8a:93:61:26:40:cb:2c:
15:4e:e5:25:f0:b8:61:7e:eb:5a:33:94:02:19:37:
f0:2f:4c:2e:66:aa:a8:6d:b2:4e:53:b6:1d:69:f9:
10:39:12:41:a2:96:09:d3:09:cb:22:51:0b:5c:1a:
d7:6b:8d:c5:1b:ab:1e:08:f2:50:3a:88:b2:1c:7f:
f3:67:61:1c:63:1b:f0:26:2c:08:30:b4:be:8d:46:
c9:06:51:41:41:c8:a0:20:12:79:15:b1:04:8f:ee:
03:3c:db:99:02:1b:94:9a:75:d0:0f:da:9b:cc:55:
33:88:40:23:ba:31:ab:85:66:32:e9:bb:02:90:f4:
01:a2:68:fd:60:ff:a8:09:11:4a:3a:5e:e8:54:0f:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:A7:7A:AD:2A:B0:A6:34:40:03:4C:28:48:84:7C:84:CF:B4:4C
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5CBD50B47E2E11F1A0890D18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.165.0/24
Signature Algorithm: sha256WithRSAEncryption
93:33:0f:a5:93:32:3e:c0:b7:f7:54:fd:55:2b:7f:12:79:1c:
67:4e:88:46:e0:b7:10:ff:65:12:bb:55:68:88:95:6b:5f:19:
11:a2:d0:bf:4a:5d:d7:4e:99:9a:33:1f:42:29:ed:d7:bf:99:
fd:1d:8c:ad:e0:25:99:b1:88:b6:81:3b:67:19:5f:90:1c:b3:
84:3e:3c:f8:d5:3c:4d:d5:f8:ec:61:e8:9c:44:62:0c:89:a4:
a3:5f:03:35:a0:ef:43:d7:55:f7:71:35:f7:ca:47:3b:6f:15:
07:1a:05:4e:14:e3:34:e7:4c:0a:38:b4:6b:95:de:e1:e6:35:
fa:a0:0e:f9:14:a7:ab:aa:0c:a9:14:26:79:15:7d:a5:0f:b0:
3f:31:9d:ea:a5:ee:15:b3:67:6c:73:ac:0b:af:eb:8d:3f:c3:
ee:d2:c9:8e:42:b8:ad:d5:95:43:03:60:ff:69:51:62:f7:4f:
9c:b8:b2:0b:6c:68:f9:d2:97:c9:42:7b:63:d9:0f:0c:32:0d:
7f:d0:41:00:3d:96:c5:66:aa:83:d5:7a:d2:f8:94:11:b1:0a:
08:bf:ec:4c:43:03:3e:75:16:ef:a8:af:78:cb:9a:34:43:ba:
53:b1:f2:dd:c7:d1:a6:81:eb:a2:6c:b9:fe:d0:8e:dd:17:38:
e7:3d:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:08 2026 by rpki-client