Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A24D20907E2F11F1BEDCC4A1CE1D38B0.roa
File: A24D20907E2F11F1BEDCC4A1CE1D38B0.roa (raw, json)
Hash identifier: qmBWpFsSlfzNnJuEa1VYKxig2bfInifSAqE34JzwVlc=
Subject key identifier: 0A:4A:E3:67:FB:17:C9:9C:6A:41:B9:B4:D9:52:41:83:65:9D:DF:D8
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 063E
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A24D20907E2F11F1BEDCC4A1CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:24:08 +0000
ROA not before: Sun 12 Jul 2026 20:24:03 +0000
ROA not after: Sun 11 Jul 2027 20:24:03 +0000
asID: 174
IP address blocks: 66.251.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:24:03 2026 GMT
Not After : Jul 11 20:24:03 2027 GMT
Subject: CN=6a53f7e8-026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:79:74:59:3b:10:8d:53:cc:2f:aa:9f:9d:
8a:0f:93:64:30:51:97:0b:01:de:b8:c3:4b:52:30:
48:ac:27:e0:7b:ae:bb:8a:1e:10:b3:d3:14:86:2d:
fe:72:76:85:b4:86:22:fd:f7:a2:8a:70:95:1e:44:
b2:55:ca:9a:3e:2e:d8:af:5d:e8:a6:71:79:9a:7e:
16:e6:9f:d1:58:d5:5b:51:96:b2:44:6b:83:37:3f:
d5:85:ce:54:f8:e5:7a:ba:98:8d:03:c9:58:d8:27:
24:dc:ef:ba:bb:80:18:a8:72:77:fe:5e:7a:3f:e4:
67:6d:c0:0d:dc:8f:e0:5d:f1:46:67:bd:34:3a:49:
e7:62:2c:25:d1:92:20:1f:cd:41:17:23:f3:3b:9c:
3f:d8:c2:a6:72:56:d3:d7:1d:68:ba:38:06:96:e8:
6a:9a:d0:95:74:fc:5b:56:54:c5:88:49:3f:09:02:
79:0e:37:ce:0f:1d:6e:a3:55:4a:16:b1:5f:63:98:
13:bf:bc:de:5f:db:f6:3e:22:b3:fa:3c:b5:ff:30:
db:b0:66:3c:d4:bf:27:14:42:cc:b6:7b:c1:47:b2:
ca:12:80:41:21:d0:c0:a0:ce:4e:68:8d:c3:2a:11:
95:c0:b6:82:ae:97:a6:2e:f8:57:b7:52:f0:f9:de:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:E3:67:FB:17:C9:9C:6A:41:B9:B4:D9:52:41:83:65:9D:DF:D8
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A24D20907E2F11F1BEDCC4A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.176.0/24
Signature Algorithm: sha256WithRSAEncryption
38:03:76:05:f5:20:1d:ad:0a:02:a3:15:ce:33:48:a6:31:79:
5b:3b:bc:d3:91:81:2e:81:00:ea:28:7f:ad:37:21:9f:8a:87:
cd:d0:e0:79:29:7d:4b:26:19:94:ce:0e:d9:de:bd:3e:2a:54:
fe:b4:b2:bf:e3:c2:bf:91:5c:25:37:34:d6:ab:6f:f4:03:b1:
e0:30:8b:27:3c:fc:74:5a:99:a3:40:f0:70:21:0f:29:23:41:
70:5f:e0:38:24:b8:0c:20:28:e8:35:a4:94:e4:d4:61:64:60:
3e:f2:f1:94:42:3c:11:6e:af:d6:18:11:b1:86:df:f9:58:aa:
a1:77:4c:c7:f1:40:f0:e5:ef:e7:e3:a0:52:e5:29:40:ad:53:
71:1a:76:f4:67:2a:09:09:03:5c:2d:97:85:09:35:2c:de:82:
3d:f3:fe:f0:37:b2:08:7d:bc:bf:0e:56:4a:4c:83:32:88:bf:
4c:93:f5:68:50:9b:77:5b:31:35:b1:da:50:da:dc:26:34:42:
d1:c9:6f:dc:4f:12:89:78:da:b3:59:c1:73:2c:2d:fc:12:fb:
67:5c:c3:ff:d7:1d:2e:a9:c8:ab:80:c8:cc:92:4b:cc:d0:82:
51:45:da:a1:d4:03:dc:c0:7c:30:c6:9e:fc:5c:27:7b:cd:56:
36:95:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:02 2026 by rpki-client