Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/8883F6EC7E2B11F18F1F7D07CF1D38B0.roa
File: 8883F6EC7E2B11F18F1F7D07CF1D38B0.roa (raw, json)
Hash identifier: Tr4D5pt4LHUCrCX12+e8T2S6F12WbJfrTGDAIHe/y1w=
Subject key identifier: 0D:4C:B5:CF:FE:F3:AB:C3:F9:2A:90:FB:A6:5F:2E:A5:33:F9:5B:8A
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 061B
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/8883F6EC7E2B11F18F1F7D07CF1D38B0.roa
Signing time: Sun 12 Jul 2026 19:54:48 +0000
ROA not before: Sun 12 Jul 2026 19:54:39 +0000
ROA not after: Sun 11 Jul 2027 19:54:39 +0000
asID: 174
IP address blocks: 66.251.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 19:54:39 2026 GMT
Not After : Jul 11 19:54:39 2027 GMT
Subject: CN=6a53f108-7783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:f0:72:ea:c2:47:92:15:44:de:f8:e4:35:
69:c7:fa:82:73:25:ce:68:c5:83:9c:c9:08:6e:9a:
8a:97:62:81:3e:e4:e7:9c:9c:e9:d5:2c:92:0f:81:
73:76:b5:85:a9:2d:3e:70:c3:55:66:54:a0:aa:68:
d3:30:77:64:5e:a9:38:d3:28:40:83:35:8d:20:dd:
b3:94:fb:ee:fd:7e:5f:17:f9:20:11:15:c1:4f:fc:
69:6c:b9:d5:ab:d1:fb:8d:70:2c:46:32:7a:f4:65:
40:7e:6c:02:a1:9e:57:37:1d:f7:5d:13:e5:6d:ef:
cd:d5:52:54:2d:36:ec:ce:8f:b0:83:8e:f1:5b:4c:
2f:2f:d2:89:72:1f:9b:79:00:c4:18:f7:2e:f9:61:
3e:da:2c:5d:c7:1f:85:03:c7:f7:04:8a:83:70:60:
be:40:25:46:88:43:78:8d:6e:95:46:3c:4e:f4:b5:
eb:33:75:fe:66:8a:3e:d7:49:2d:de:6a:2b:47:75:
de:f5:7f:83:0d:79:da:9f:1f:25:ae:34:c0:05:ae:
38:1e:69:46:47:db:22:0f:65:f6:d5:e0:02:ba:29:
10:84:c8:2e:78:03:0f:b3:83:2b:85:f2:23:d9:3a:
3d:27:aa:45:1f:75:96:79:cd:ca:28:46:62:9a:a3:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:B5:CF:FE:F3:AB:C3:F9:2A:90:FB:A6:5F:2E:A5:33:F9:5B:8A
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/8883F6EC7E2B11F18F1F7D07CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b4:e2:bd:6e:1b:86:d3:0f:f9:a9:ca:8a:9f:b8:e3:3c:f8:
e2:7c:38:fd:76:d0:0d:ec:12:74:a3:58:f1:29:fd:62:87:19:
3b:2b:91:a4:fa:1e:78:49:19:81:91:f1:7d:08:d3:e0:d4:38:
eb:8f:54:7c:4c:31:c7:50:b4:13:07:09:c6:fb:fc:c5:f0:aa:
d3:fe:2d:f1:d3:fe:a0:b9:57:03:f4:1d:10:4f:97:34:d9:ca:
11:53:d1:3e:7e:66:95:bd:a6:24:6e:90:e5:3b:5b:0a:13:a9:
97:47:8e:49:0b:16:6b:7a:30:a0:2e:89:1c:ec:a2:57:b2:77:
25:81:72:8a:48:0c:83:cf:66:e8:87:d1:ff:6e:87:fc:66:1f:
6d:0e:2f:15:76:a4:c8:df:4e:ab:01:4b:78:9a:af:43:f2:47:
00:aa:51:19:26:02:ac:9b:eb:f8:85:4c:a2:bc:ca:e9:25:30:
f1:cb:2d:c8:41:22:e7:37:b4:35:fc:c2:63:06:13:23:45:8b:
a2:c9:b6:4c:bf:2c:b5:7f:e4:7e:ee:fa:cd:10:21:56:6d:d9:
c6:69:31:b8:d8:36:d8:c9:28:4b:53:3f:b6:ac:de:c9:4d:70:
d0:ea:73:73:6b:8f:9c:60:39:6c:1e:e1:68:7e:c8:95:31:0b:
a1:c0:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:10 2026 by rpki-client