Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7F089C627E3011F191A271A6CE1D38B0.roa
File: 7F089C627E3011F191A271A6CE1D38B0.roa (raw, json)
Hash identifier: Vhqvt4z82xrmy8Nw0nz6rCCISSc2qFuWV9BTD2ciiBE=
Subject key identifier: FA:F8:F1:0D:4E:C8:E5:D2:5C:AE:B2:4E:64:54:A3:D7:A9:EC:A9:DE
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 064A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7F089C627E3011F191A271A6CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:30:18 +0000
ROA not before: Sun 12 Jul 2026 20:30:14 +0000
ROA not after: Sun 11 Jul 2027 20:30:14 +0000
asID: 174
IP address blocks: 66.251.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:30:14 2026 GMT
Not After : Jul 11 20:30:14 2027 GMT
Subject: CN=6a53f95a-c119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:48:0b:e9:63:e1:fb:11:b4:5f:63:50:70:
52:1d:26:3e:fb:38:d5:6c:11:b6:cd:13:36:82:9f:
ad:d4:23:50:0f:b1:4c:04:fa:34:ba:e7:e7:7c:13:
f5:95:8a:e7:0b:00:ae:41:c4:fd:72:72:62:74:48:
df:a2:8d:62:82:ff:06:f8:c8:4b:b9:14:8e:2e:26:
21:f9:b2:e1:f1:4e:59:e7:ad:55:a4:e7:5c:f7:05:
6c:10:27:66:c4:26:2c:16:42:83:b0:f0:ce:d7:90:
f8:24:d6:01:63:1d:d5:2e:f4:9f:3c:48:4e:e9:09:
aa:e6:d4:d5:6b:4c:18:d6:98:04:e1:ff:a0:c0:d5:
6c:60:31:52:65:6a:db:f1:35:ac:e3:70:5b:0d:3f:
b0:f5:a3:fc:2d:c7:f5:6c:90:7f:5d:c7:f5:89:ee:
bb:cd:84:08:6e:1a:5e:dc:c5:c4:78:3e:95:7e:bb:
1a:6d:d3:7f:1d:e7:a4:25:10:8d:05:ff:f1:ee:a7:
3f:d1:89:76:20:c5:b1:1a:b5:3f:45:75:8b:a9:29:
84:49:0b:be:19:fb:ff:dd:4e:e8:d6:60:d4:86:b5:
39:6a:0b:20:b8:7a:57:2f:0a:4d:99:3e:ff:ae:be:
a2:06:61:86:43:d5:c0:7c:e6:8a:1e:36:aa:cd:0e:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:F1:0D:4E:C8:E5:D2:5C:AE:B2:4E:64:54:A3:D7:A9:EC:A9:DE
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/7F089C627E3011F191A271A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c4:03:56:13:ab:6f:0f:6d:cf:e1:c3:70:80:33:cd:88:0c:
e2:1e:59:87:6c:62:d8:46:53:cf:04:74:e8:f6:86:43:d1:86:
f1:49:bc:78:bb:c9:09:44:6b:8a:6e:5b:16:d1:78:5f:51:c9:
79:e4:20:ed:98:0f:19:8e:9f:81:f3:b9:06:d6:de:4b:ab:71:
d1:d6:bb:ef:33:ff:6c:ca:8d:0f:2a:56:0d:80:b6:d4:41:8d:
96:fe:55:fb:fb:33:e7:87:fe:b1:08:bc:00:c0:11:35:be:bb:
2f:4f:2f:85:95:09:65:99:a0:20:2d:07:c4:0e:85:9e:88:d3:
ab:b2:36:d3:49:46:df:90:b8:cb:47:41:96:23:1b:27:be:10:
2b:93:d6:36:5a:16:a8:54:80:c8:b3:b4:9b:b4:1a:28:32:a7:
7a:ae:d9:b4:b9:fa:9d:22:63:ff:7d:3d:93:5e:4f:bc:08:de:
cb:04:95:7d:c8:2e:94:29:cf:82:3d:6f:db:71:e2:b4:7b:63:
3f:11:05:23:8d:40:f3:bf:c4:db:1c:f4:7b:d8:72:4c:63:2a:
43:fb:c3:e0:ad:f7:23:f7:67:d6:be:17:0a:e2:7c:3f:06:31:
0b:c5:cc:46:db:8e:96:d5:a1:9f:76:de:61:51:67:28:2e:6a:
2c:5f:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:32 2026 by rpki-client