Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C90158C27E3011F1A42C28AACE1D38B0.roa
File: C90158C27E3011F1A42C28AACE1D38B0.roa (raw, json)
Hash identifier: m37ozqGBclmMtWZutuE+QOnY9ewZNLKPVysEuj18YUk=
Subject key identifier: B7:A9:D8:7F:1E:75:5A:CB:E8:74:98:B2:74:1A:5E:F6:C8:B3:4C:E9
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 064E
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C90158C27E3011F1A42C28AACE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:32:22 +0000
ROA not before: Sun 12 Jul 2026 20:32:18 +0000
ROA not after: Sun 11 Jul 2027 20:32:18 +0000
asID: 174
IP address blocks: 66.251.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:32:18 2026 GMT
Not After : Jul 11 20:32:18 2027 GMT
Subject: CN=6a53f9d6-b455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:b5:9a:38:33:b0:f5:d4:97:c5:e3:e8:f5:
b4:09:b8:a2:1d:43:f9:23:ca:e9:47:91:2e:75:68:
32:fa:d3:5c:e8:7f:09:d2:c5:3b:91:0f:dc:47:06:
3a:83:20:30:4d:54:39:eb:a8:eb:98:1b:5f:04:7d:
37:d0:02:73:ea:8f:b3:d1:31:0f:98:33:32:59:31:
fe:95:2f:37:8b:44:69:a1:09:f9:f8:8d:8f:d8:4a:
cf:b2:0c:47:b3:04:1c:ab:45:1e:c2:9d:57:33:5d:
a4:f5:2c:70:58:78:37:a9:1d:e3:82:bd:44:f3:bb:
ab:b2:5f:e4:6c:a6:f2:62:21:01:10:b0:d0:ae:67:
04:e4:6f:b9:b8:0c:14:1d:17:6d:a0:20:9e:a9:4e:
95:d4:10:c2:94:91:3e:db:3f:49:c6:ce:40:18:2f:
03:58:1a:b4:47:b9:b1:16:ee:39:d6:e7:71:f6:2b:
5a:c1:a2:06:6f:5b:e4:ec:91:36:1f:69:ee:90:f3:
9a:81:65:a6:62:97:d9:f4:07:c9:29:2b:7c:c7:37:
98:23:d5:c3:1a:42:3c:a5:bd:31:e4:ab:48:71:89:
dd:a9:64:d0:e1:56:5a:e4:ee:9b:47:97:30:4f:a0:
11:6c:7c:b3:a4:2b:2e:9d:ff:53:c0:93:93:3a:a0:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:D8:7F:1E:75:5A:CB:E8:74:98:B2:74:1A:5E:F6:C8:B3:4C:E9
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C90158C27E3011F1A42C28AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:55:42:55:41:ab:ae:ee:f1:1b:97:c7:37:0b:86:87:f9:16:
88:a3:00:b9:ad:23:74:b2:a8:9e:0a:2a:71:29:74:b0:06:e2:
78:13:16:fc:5c:6c:ed:75:26:25:fd:eb:cf:b0:70:60:31:64:
67:55:2e:df:d2:d9:b0:d3:8f:8f:d1:65:fb:50:09:6f:e2:14:
33:0e:0d:76:de:a5:de:2b:ec:a4:58:e2:a8:ba:55:29:fb:61:
74:e5:63:a8:7b:a2:a2:e7:15:39:ce:52:db:6d:38:a8:e4:93:
7b:e0:67:46:bf:41:51:70:90:1f:be:f1:d3:92:bb:7c:f6:f5:
3c:e7:8d:c5:75:62:36:66:c4:06:0b:61:cd:ae:33:ff:5a:18:
45:27:68:3d:90:ae:7f:d1:af:16:c4:7f:7d:d2:3b:84:c9:28:
94:2b:cf:95:3b:68:13:10:ae:85:24:d6:35:5e:6c:80:c1:dc:
3e:47:16:c5:8e:23:47:49:b7:a7:1e:4b:46:20:1a:7b:bd:6b:
f1:aa:39:c4:b2:53:88:8c:73:30:4a:2f:74:7e:ba:cc:3f:9d:
36:b2:c2:b1:80:68:09:bc:3b:09:14:ff:b2:82:b8:f6:c4:8d:
4b:2b:66:84:8c:23:c3:71:e2:fb:4c:05:51:a9:89:35:8f:9b:
ec:8b:de:82
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA3MTIyMDMyMThaFw0yNzA3MTEyMDMyMThaMBgxFjAU
BgNVBAMTDTZhNTNmOWQ2LWI0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD7rWaODOw9dSXxePo9bQJuKIdQ/kjyulHkS51aDL601zofwnSxTuRD9xH
BjqDIDBNVDnrqOuYG18EfTfQAnPqj7PRMQ+YMzJZMf6VLzeLRGmhCfn4jY/YSs+y
DEezBByrRR7CnVczXaT1LHBYeDepHeOCvUTzu6uyX+RspvJiIQEQsNCuZwTkb7m4
DBQdF22gIJ6pTpXUEMKUkT7bP0nGzkAYLwNYGrRHubEW7jnW53H2K1rBogZvW+Ts
kTYfae6Q85qBZaZil9n0B8kpK3zHN5gj1cMaQjylvTHkq0hxid2pZNDhVlrk7ptH
lzBPoBFsfLOkKy6d/1PAk5M6oJq9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUt6nY
fx51WsvodJiydBpe9sizTOkwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4L0M5MDE1OEMyN0UzMDExRjFBNDJDMjhBQUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+7owDQYJKoZIhvcNAQELBQAD
ggEBAD9VQlVBq67u8RuXxzcLhof5FoijALmtI3SyqJ4KKnEpdLAG4ngTFvxcbO11
JiX968+wcGAxZGdVLt/S2bDTj4/RZftQCW/iFDMODXbepd4r7KRY4qi6VSn7YXTl
Y6h7oqLnFTnOUtttOKjkk3vgZ0a/QVFwkB++8dOSu3z29TznjcV1YjZmxAYLYc2u
M/9aGEUnaD2Qrn/RrxbEf33SO4TJKJQrz5U7aBMQroUk1jVebIDB3D5HFsWOI0dJ
t6ceS0YgGnu9a/GqOcSyU4iMczBKL3R+usw/nTaywrGAaAm8OwkU/7KCuPbEjUsr
ZoSMI8Nx4vtMBVGpiTWPm+yL3oI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:34 2026 by rpki-client