Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C16E39AE7E2B11F18CB65D0BCF1D38B0.roa
File: C16E39AE7E2B11F18CB65D0BCF1D38B0.roa (raw, json)
Hash identifier: 6hdrj1CVtZtpiPX/L7oySM4TmwrCRUJhITvON8iokTQ=
Subject key identifier: 85:5F:E0:E1:98:84:9D:E1:DB:00:24:0D:DD:19:08:A1:5F:C4:82:CE
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 061D
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C16E39AE7E2B11F18CB65D0BCF1D38B0.roa
Signing time: Sun 12 Jul 2026 19:56:22 +0000
ROA not before: Sun 12 Jul 2026 19:56:18 +0000
ROA not after: Sun 11 Jul 2027 19:56:18 +0000
asID: 174
IP address blocks: 66.251.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 19:56:18 2026 GMT
Not After : Jul 11 19:56:18 2027 GMT
Subject: CN=6a53f166-e16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:b5:2f:4e:9b:35:79:f2:14:ca:9f:fb:48:
e1:6b:27:1f:0b:ab:99:be:1f:74:c6:8e:c6:3a:e1:
7d:9c:9f:82:8a:ca:36:11:64:a6:3f:ef:2c:ba:c9:
5e:a0:5b:3e:79:74:2e:e3:a5:a5:bf:63:c0:01:f3:
ea:ff:c3:45:09:1b:78:c7:d8:92:9e:a6:be:41:64:
5e:70:21:42:dc:50:b5:ea:8d:0d:7f:27:51:ca:60:
ae:da:d9:61:7e:e4:5c:81:aa:c7:28:0c:79:a1:2a:
83:6c:e2:29:8c:77:4d:38:bb:8e:10:c9:ac:db:39:
3a:13:c7:ea:c0:92:87:7d:1c:55:31:a4:6d:5e:a1:
83:d7:a9:47:96:a9:a2:d2:46:ef:0a:aa:a0:23:e1:
43:75:84:52:1e:74:a0:15:64:b6:fd:c3:d5:7f:5d:
dd:69:e6:2c:12:f9:93:db:61:55:3d:00:54:12:97:
d5:63:2a:cc:02:53:7c:1c:20:3b:65:d8:04:6f:dc:
e5:bb:80:c8:25:a7:9c:8f:32:47:bb:0e:33:70:35:
e1:c0:cc:45:5e:f8:62:05:e8:61:e1:a0:58:c8:dc:
8c:23:03:ef:e2:8b:5d:e3:a3:e9:0a:9e:3c:ce:04:
16:3d:e4:17:cb:d7:b6:50:1c:0f:af:bd:19:d1:5e:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:E0:E1:98:84:9D:E1:DB:00:24:0D:DD:19:08:A1:5F:C4:82:CE
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C16E39AE7E2B11F18CB65D0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:80:2e:68:a7:3b:cf:93:68:7b:d8:a4:4d:4c:c8:66:01:93:
da:f4:ab:44:50:fb:b0:3b:b7:53:6d:a7:89:03:3e:9d:22:f6:
ed:fb:7e:09:3f:55:08:1f:97:5a:78:21:4f:b4:b1:6d:42:e6:
25:0c:14:e8:60:8f:26:9e:30:a9:5f:17:04:b0:a5:2a:ae:f4:
b7:10:48:a7:15:da:04:b2:b8:68:b6:dd:f9:d7:be:80:83:6c:
20:a7:49:c5:7a:ae:1e:24:fb:2d:d4:89:39:13:70:2f:95:e2:
61:b5:4c:fa:c9:c2:8f:2a:67:c4:5f:4a:d2:48:e0:b9:d0:a5:
e3:92:01:f1:3d:9e:60:ec:59:b0:d2:48:3d:39:14:c6:23:dd:
1a:e9:46:f6:7e:2f:f1:55:77:c2:0e:6d:8e:5b:41:86:63:40:
00:ac:38:3e:f0:a9:1b:fb:41:f3:69:22:4f:58:c2:2e:5f:d8:
ea:22:b0:1d:f9:7d:57:ea:6f:d5:48:8a:f3:c8:de:56:b9:9c:
92:22:29:9f:2d:df:84:df:7b:67:c4:a2:76:64:3b:31:fe:1c:
c4:66:f5:69:f1:c8:7c:97:8a:de:53:85:f6:0f:c2:c9:b3:5a:
f7:a8:97:44:d2:cf:f4:3d:77:e4:b1:07:69:a2:b6:93:5a:ef:
92:16:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:57 2026 by rpki-client