Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7B0E03D07E2C11F1891C990FCF1D38B0.roa
File: 7B0E03D07E2C11F1891C990FCF1D38B0.roa (raw, json)
Hash identifier: H5ZqBfAUkoo2kyPOpuK5FGQS9v/LC3fkqvaCdMvWPN8=
Subject key identifier: 94:F6:60:24:F3:70:8A:12:C2:59:CD:5F:D9:CC:BC:AD:8E:62:1E:42
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0625
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7B0E03D07E2C11F1891C990FCF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:01:34 +0000
ROA not before: Sun 12 Jul 2026 20:01:29 +0000
ROA not after: Sun 11 Jul 2027 20:01:29 +0000
asID: 174
IP address blocks: 66.251.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:01:29 2026 GMT
Not After : Jul 11 20:01:29 2027 GMT
Subject: CN=6a53f29e-d0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:a5:3a:fc:10:3c:f9:03:68:aa:9b:29:01:
11:cb:3e:8d:fe:d0:d7:1f:17:e8:f7:b8:c3:ba:38:
bd:9d:e3:e7:fa:44:82:a7:8b:45:24:04:aa:48:ee:
b0:7f:aa:56:b6:8d:fb:62:a0:52:cc:df:e1:4f:f5:
b1:e4:e3:3d:2d:12:98:88:ba:2d:65:61:04:ac:b7:
f0:60:d4:6a:93:69:a6:83:0e:2e:86:70:ec:53:e0:
8b:74:37:ee:bb:b3:ef:a9:1e:ad:25:e0:73:88:5c:
a6:83:48:e8:d6:7b:62:3e:69:12:03:9b:eb:a2:19:
fa:7f:8b:64:46:57:14:04:1e:26:1c:ca:51:25:ec:
18:bc:f3:27:5e:0e:86:9d:79:62:90:96:cd:fe:ea:
4f:81:82:75:05:44:18:6d:1b:5b:b4:db:3e:2e:b5:
ac:da:e7:c7:3f:57:08:c6:33:dc:49:c9:65:47:76:
69:c5:4f:17:6c:52:32:ec:94:36:be:6c:b7:4b:01:
31:b2:7e:4a:ea:63:68:ea:fa:0c:73:15:43:87:1c:
a9:fb:30:9f:19:b6:54:fb:b0:8f:79:b0:46:01:ca:
68:7f:d2:84:65:4f:0a:a7:ba:90:f4:b8:d5:c4:23:
f4:3a:81:0a:25:2b:52:d0:a8:8d:2c:79:30:87:dd:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:60:24:F3:70:8A:12:C2:59:CD:5F:D9:CC:BC:AD:8E:62:1E:42
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7B0E03D07E2C11F1891C990FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.156.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a5:d4:df:d3:8c:ce:f4:8b:bf:43:48:e1:eb:38:4e:61:f2:
41:95:9a:c8:5f:bd:0f:a1:7a:55:67:16:6e:f7:ac:04:4b:0c:
6d:f4:9b:89:2f:76:90:53:83:27:37:73:e9:c1:18:1c:46:c3:
47:a8:0f:23:b6:b1:bf:01:32:19:84:2a:bc:9a:04:11:11:9d:
bf:e9:14:b6:90:d3:d1:ca:84:36:cd:ba:68:09:51:d5:70:c8:
23:70:3b:5c:f6:13:00:62:d7:06:c8:57:29:f3:dd:2c:16:a6:
02:8c:c0:33:2e:95:3e:4d:37:d1:dd:43:91:67:1d:87:9d:7f:
12:cd:7b:01:a0:1a:80:5f:4b:05:68:79:00:09:ba:9f:34:f6:
56:3d:f0:44:1f:92:ae:d1:55:ff:15:b8:3a:0e:95:8b:3c:51:
89:71:e9:12:82:57:50:0a:b2:8e:7a:39:4b:58:97:d6:1e:15:
c3:a3:ea:21:72:1c:a9:41:bf:1a:49:25:79:6f:5b:6c:bb:d1:
1e:9c:56:a5:30:79:07:7e:2f:16:a9:ea:56:8e:d6:47:53:98:
91:cc:9f:ac:a8:6d:2e:b2:45:08:7f:f4:36:c5:fb:f5:c3:dc:
4e:7b:1f:94:58:04:a4:a7:dc:d1:c3:ff:0e:f2:45:8b:97:c9:
8a:7b:3d:23
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA3MTIyMDAxMjlaFw0yNzA3MTEyMDAxMjlaMBgxFjAU
BgNVBAMTDTZhNTNmMjllLWQwYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCl5qU6/BA8+QNoqpspARHLPo3+0NcfF+j3uMO6OL2d4+f6RIKni0UkBKpI
7rB/qla2jftioFLM3+FP9bHk4z0tEpiIui1lYQSst/Bg1GqTaaaDDi6GcOxT4It0
N+67s++pHq0l4HOIXKaDSOjWe2I+aRIDm+uiGfp/i2RGVxQEHiYcylEl7Bi88yde
DoadeWKQls3+6k+BgnUFRBhtG1u02z4utaza58c/VwjGM9xJyWVHdmnFTxdsUjLs
lDa+bLdLATGyfkrqY2jq+gxzFUOHHKn7MJ8ZtlT7sI95sEYBymh/0oRlTwqnupD0
uNXEI/Q6gQolK1LQqI0seTCH3Z4VAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUlPZg
JPNwihLCWc1f2cy8rY5iHkIwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzdCMEUwM0QwN0UyQzExRjE4OTFDOTkwRkNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+5wwDQYJKoZIhvcNAQELBQAD
ggEBAEil1N/TjM70i79DSOHrOE5h8kGVmshfvQ+helVnFm73rARLDG30m4kvdpBT
gyc3c+nBGBxGw0eoDyO2sb8BMhmEKryaBBERnb/pFLaQ09HKhDbNumgJUdVwyCNw
O1z2EwBi1wbIVynz3SwWpgKMwDMulT5NN9HdQ5FnHYedfxLNewGgGoBfSwVoeQAJ
up809lY98EQfkq7RVf8VuDoOlYs8UYlx6RKCV1AKso56OUtYl9YeFcOj6iFyHKlB
vxpJJXlvW2y70R6cVqUweQd+Lxap6laO1kdTmJHMn6yobS6yRQh/9DbF+/XD3E57
H5RYBKSn3NHD/w7yRYuXyYp7PSM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:12 2026 by rpki-client