Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A6E945927E3011F1831F23AACE1D38B0.roa
File: A6E945927E3011F1831F23AACE1D38B0.roa (raw, json)
Hash identifier: tMBH4yH/vyaqmyTg5oqoqN2L1sc0SQ7zSXaSeRyPXcU=
Subject key identifier: BC:15:BE:B8:A2:23:45:6D:63:48:3C:DA:5D:F8:7A:E9:FA:A6:67:B0
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 064C
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A6E945927E3011F1831F23AACE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:31:25 +0000
ROA not before: Sun 12 Jul 2026 20:31:20 +0000
ROA not after: Sun 11 Jul 2027 20:31:20 +0000
asID: 174
IP address blocks: 66.251.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:31:20 2026 GMT
Not After : Jul 11 20:31:20 2027 GMT
Subject: CN=6a53f99d-1ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:cd:6e:47:fd:8f:3e:72:97:b1:55:f5:dd:
81:45:c0:40:25:ba:5d:61:fa:44:b2:33:30:1f:f0:
71:8f:8a:e4:f7:b7:5e:96:15:87:26:05:d2:a8:06:
c2:70:c7:99:b6:eb:64:97:a8:4f:ae:ac:37:4a:39:
4c:07:12:64:bc:74:18:ae:08:ad:58:a0:03:5e:6e:
e5:49:80:2c:73:61:1c:27:0f:2a:b1:b9:28:e8:94:
bc:ef:95:93:dc:65:84:77:14:48:79:46:92:1f:93:
a5:76:b1:b1:79:3d:bf:6d:de:14:a3:a1:d8:e1:75:
40:87:87:85:df:06:76:b6:20:c0:14:cf:49:f7:66:
8a:41:db:af:ce:d8:5b:4a:43:4a:c2:13:2d:3b:ba:
e1:3b:c0:00:30:0c:ec:e6:c3:6d:b4:eb:7e:59:bc:
0d:7e:65:79:91:5e:08:18:15:d4:73:34:9f:27:40:
6d:60:9a:68:97:eb:30:ec:3d:a1:91:dc:14:8a:90:
b1:fd:74:61:79:1c:6d:0b:b6:f0:39:d1:97:b3:29:
01:94:dd:0c:0c:35:ff:4b:f3:f0:b2:0b:9d:e3:c2:
4d:c7:3e:8b:86:c3:b6:31:3e:e0:3c:6a:19:99:9f:
61:1f:da:d8:9e:44:f4:5b:3d:01:db:26:fd:31:1b:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:BE:B8:A2:23:45:6D:63:48:3C:DA:5D:F8:7A:E9:FA:A6:67:B0
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A6E945927E3011F1831F23AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c7:95:cd:77:c7:0c:85:cb:d3:6d:62:14:1f:6b:e1:8c:a8:
ac:e1:ee:80:5d:0a:2d:e3:2c:69:80:64:3c:45:80:ef:81:23:
32:ac:ed:7a:0e:2f:e2:26:1a:cb:eb:3c:42:1d:2f:17:5b:0e:
1c:ed:fb:4f:d5:93:c8:21:d8:69:5a:b6:2d:57:37:d0:5e:57:
31:9d:12:ac:3e:bd:e9:cd:c7:1f:c4:ce:74:60:78:4d:84:fa:
77:2f:ca:97:6b:a3:2f:c8:0a:c9:3f:8e:2a:c6:69:c7:a2:b2:
98:e9:30:f0:72:36:05:37:0b:e3:c0:6d:04:a8:83:77:9d:c8:
bf:2d:b3:cc:d8:98:bc:c2:70:56:ab:b5:89:f4:44:f6:01:fd:
fb:ff:8e:3b:4d:3b:95:59:a5:8b:c4:c1:b0:35:da:2c:21:ec:
3a:4e:ef:82:ad:79:42:37:f6:83:77:77:84:50:6c:42:f1:e6:
6e:be:ce:fb:6b:01:f3:0c:2f:f1:d4:e0:02:e4:6f:c7:21:99:
ca:0c:5e:69:4a:82:6a:6c:a5:cd:98:93:47:59:71:e4:97:e7:
5e:0f:d9:b4:3a:06:62:04:e6:2d:09:ee:4f:ec:f9:85:c7:b3:
3a:a1:dc:7b:72:bd:50:81:11:fb:bc:42:74:61:cf:b9:1b:2e:
00:bd:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:45 2026 by rpki-client