Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa
File: CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa (raw, json)
Hash identifier: RIIqMS2K8WI/4vMiOqzeVI78FQ33zf2FyhdAYL4i/0U=
Subject key identifier: 06:4E:41:86:29:2C:55:5A:F8:CE:CE:49:07:71:68:8A:9E:6B:29:06
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0640
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:25:20 +0000
ROA not before: Sun 12 Jul 2026 20:25:15 +0000
ROA not after: Sun 11 Jul 2027 20:25:15 +0000
asID: 174
IP address blocks: 66.251.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:25:15 2026 GMT
Not After : Jul 11 20:25:15 2027 GMT
Subject: CN=6a53f82f-1dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:47:c4:8a:b8:72:73:c5:28:3e:0b:10:7b:
01:dc:d7:10:29:64:67:70:20:e9:7a:8a:95:fb:45:
9f:24:43:07:37:b1:56:63:74:df:b5:c8:8f:0c:22:
45:9d:c8:66:59:e9:4f:4e:53:e5:2e:95:3b:fd:86:
b5:06:8b:70:75:5e:c3:88:b1:7b:9a:17:00:e5:9d:
0a:8c:07:bc:be:b2:b9:3f:7d:e2:ed:b1:ad:17:2f:
df:27:20:55:44:e9:44:39:a2:19:f1:a9:e4:b0:c8:
b1:55:ab:75:89:c8:73:d6:b8:e1:9d:11:ff:14:de:
6c:15:53:b8:37:4d:6f:e2:2b:91:7f:20:66:40:3e:
21:73:69:fa:0e:9f:a9:25:00:60:33:71:a0:07:95:
cd:23:1a:52:13:74:e1:49:e3:85:3b:ad:e6:d0:d2:
03:98:18:f5:ef:98:11:dc:d1:02:2f:55:49:7d:b7:
aa:39:fd:e2:24:1f:d3:c6:89:dd:8c:7b:7c:35:c3:
f8:6c:bb:6e:37:3b:20:93:25:6b:26:98:c3:7b:8a:
e0:d1:70:62:69:57:4c:71:36:8f:dd:4c:b1:d3:cc:
97:01:85:98:0f:ad:40:3a:7f:fd:45:5e:14:94:f4:
34:be:28:a7:ee:23:42:24:27:e8:8c:a4:08:ef:86:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:41:86:29:2C:55:5A:F8:CE:CE:49:07:71:68:8A:9E:6B:29:06
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.177.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3b:d6:19:e9:42:d9:f5:55:e4:79:03:1f:9f:ce:19:ee:45:
51:d5:04:9d:d5:3c:0c:f1:cd:f9:c0:08:81:73:ad:88:03:83:
67:31:1e:be:c0:c4:9b:8d:a7:52:25:63:42:e4:2e:7e:8b:be:
2b:20:96:9f:4f:25:af:bc:4f:1e:e1:27:54:3b:19:11:01:3c:
34:f9:3b:37:da:cf:cf:4e:30:ef:34:6d:f4:64:6b:44:49:ca:
32:e7:4f:b4:10:0f:52:a3:52:b8:07:42:3a:f9:0e:47:8f:51:
70:3d:98:13:4f:84:fe:ae:d5:3d:1d:74:54:8a:14:df:41:2a:
71:3b:bb:31:96:5e:92:39:5f:76:31:13:0e:2b:8f:d1:e6:2a:
be:37:2b:99:b3:08:69:cb:76:be:08:a1:88:e0:47:dd:5a:b7:
44:81:5a:7b:03:90:60:83:a9:97:f2:09:42:9c:12:24:88:f5:
46:ce:aa:50:83:7d:e1:c0:cd:3b:91:02:d4:e3:c2:3d:7b:68:
28:67:ed:d5:50:64:45:07:7e:1f:4b:c5:dc:f3:f2:ac:85:ee:
f3:ed:d9:ad:ea:b3:ad:59:8b:e5:98:85:6c:d0:90:5e:08:5a:
ed:63:d1:33:b0:e5:9e:d2:34:0c:03:da:28:71:14:9d:09:11:
9c:79:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:33 2026 by rpki-client