Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7C1C231C7E2F11F18E12A3A1CE1D38B0.roa
File: 7C1C231C7E2F11F18E12A3A1CE1D38B0.roa (raw, json)
Hash identifier: hpMHDcjC1T2JibIM96t8LRRDibJaiQLPCpykNcHGTl0=
Subject key identifier: BB:6B:98:72:B4:DC:A9:6E:89:AF:A0:5C:9E:69:20:A2:CF:B8:70:3E
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 063C
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7C1C231C7E2F11F18E12A3A1CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:23:04 +0000
ROA not before: Sun 12 Jul 2026 20:22:59 +0000
ROA not after: Sun 11 Jul 2027 20:22:59 +0000
asID: 174
IP address blocks: 66.251.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:22:59 2026 GMT
Not After : Jul 11 20:22:59 2027 GMT
Subject: CN=6a53f7a8-3de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:86:5a:67:80:03:41:65:63:5f:1c:8f:dd:
fc:2a:91:a6:f3:f6:41:47:49:4e:8f:07:05:60:29:
a2:3b:78:02:8c:2e:1b:4d:2d:fb:a1:38:c3:fe:d1:
66:59:aa:43:4a:6f:6c:a8:33:bb:cc:4b:a6:60:69:
3b:dc:df:0b:c7:a8:45:6e:76:3d:cd:af:52:73:f9:
f6:90:3e:9a:5e:46:c6:e3:e4:9a:9a:db:0e:f7:f1:
64:a6:e4:65:e6:00:aa:86:4d:e6:30:05:7c:68:b9:
2b:a5:fd:3b:65:72:54:ad:40:1e:7b:cb:a3:61:22:
e9:28:97:07:bd:58:c4:cc:50:a7:1e:31:5a:ff:22:
4b:72:51:2c:dd:a7:76:75:0a:5a:36:1a:08:89:6f:
96:c4:76:1e:32:c5:2f:11:59:56:e9:ab:a9:6a:42:
1a:97:b0:8d:fd:13:39:bd:ce:08:0c:a9:2c:94:83:
fa:71:0a:7d:d9:6b:80:a6:6f:e2:ae:12:b8:c3:c8:
7b:ae:61:d0:5d:e7:c9:7b:59:ae:bf:1c:99:b5:b9:
19:7e:c4:75:2a:ff:63:24:62:33:e5:40:21:c5:ad:
18:cf:33:5f:58:bb:fa:a8:70:76:32:ef:b9:84:98:
95:c5:16:5a:55:1b:fd:2a:ba:bf:2b:79:c3:35:ba:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6B:98:72:B4:DC:A9:6E:89:AF:A0:5C:9E:69:20:A2:CF:B8:70:3E
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7C1C231C7E2F11F18E12A3A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:83:9f:0c:05:d1:2c:1e:47:95:cf:41:08:1e:c5:97:86:20:
b1:bb:0a:51:a9:48:9a:48:22:5d:3f:cb:0c:08:9b:37:f3:30:
d0:5b:da:b5:e1:58:09:5f:5f:5c:2d:f9:6a:e4:9a:62:7a:a4:
ad:7e:7d:e4:63:d9:80:7c:20:ba:9b:d0:33:f4:87:7e:2f:3e:
18:8b:ff:c4:d8:33:4a:00:11:fd:f3:37:a8:b0:f7:91:55:8b:
60:aa:ff:80:b5:60:0a:83:08:c9:59:7f:2b:85:19:8a:14:29:
87:a1:71:8a:0c:13:34:4f:8e:0a:ab:76:c9:07:c8:f8:03:13:
c8:32:23:39:3d:71:45:85:63:db:0a:42:a7:f9:15:9b:a4:d9:
74:53:33:e8:de:ff:9e:53:3f:0d:0b:4b:e9:b3:62:85:f7:93:
e3:4d:77:12:0e:7e:a1:5e:be:9d:81:a2:53:a7:c3:a4:00:55:
d5:70:7d:9b:26:cf:c0:9e:e7:0d:24:f6:4d:f9:39:d8:fc:3c:
35:8d:86:fa:82:1d:35:09:05:2e:83:42:7d:09:14:83:25:28:
1a:48:32:69:be:e0:dd:57:a2:a9:8a:5a:24:eb:b8:f9:0d:6e:
2c:69:64:4a:83:c0:3e:ee:e4:fc:ad:88:9e:bb:37:19:0e:63:
17:6c:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:16 2026 by rpki-client