Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D919A6407E2D11F1A051C317CF1D38B0.roa
File: D919A6407E2D11F1A051C317CF1D38B0.roa (raw, json)
Hash identifier: e5ge7hY54JAZ4ZhJ4t2XQo6wq5JaLcniIddSVYTp1Ac=
Subject key identifier: 35:FC:07:EF:44:15:2A:32:E0:FF:35:60:7A:E8:C3:72:F7:C4:A5:06
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 062A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D919A6407E2D11F1A051C317CF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:11:21 +0000
ROA not before: Sun 12 Jul 2026 20:11:16 +0000
ROA not after: Sun 11 Jul 2027 20:11:16 +0000
asID: 174
IP address blocks: 66.251.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:11:16 2026 GMT
Not After : Jul 11 20:11:16 2027 GMT
Subject: CN=6a53f4e9-9c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:59:0f:65:28:6e:1b:79:bf:1d:69:6e:d3:
55:5d:ba:37:30:18:82:73:93:7d:cc:66:1b:7f:3c:
80:e2:d3:38:62:eb:a4:5d:51:c3:45:e9:0b:91:e9:
3f:3d:25:96:01:d5:c2:9b:62:45:54:65:de:f0:da:
de:3e:1d:7b:9f:3e:3b:6f:6c:84:69:68:18:21:a4:
3a:e0:40:17:e3:3d:f3:53:4f:0b:2e:bd:53:ef:96:
68:f6:d3:3c:4d:70:67:fd:2d:3a:ce:0b:9d:47:a6:
f4:2f:7c:5a:01:0f:9d:8f:77:8b:fb:51:a3:ad:08:
79:d5:aa:4e:23:9a:0a:c0:27:4b:ca:b2:64:31:54:
ba:fa:e9:cb:4a:82:1c:29:85:de:f5:f7:3d:21:a4:
80:c3:ec:60:d3:0c:ea:fe:31:1a:84:9a:53:c0:54:
71:d6:36:f9:c6:2c:1e:6d:25:71:20:74:71:15:bd:
66:08:66:66:63:ac:8f:81:b2:6b:39:5d:30:be:a6:
af:83:11:08:09:86:81:9c:be:dc:38:59:62:56:c5:
2f:68:0e:24:9a:e2:e1:22:8a:d3:1a:03:dd:52:6e:
59:0f:51:c1:db:85:a3:9a:ea:13:e9:52:e9:87:aa:
6a:61:9b:e0:06:20:ad:23:4d:9b:4b:ef:2a:9b:94:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:07:EF:44:15:2A:32:E0:FF:35:60:7A:E8:C3:72:F7:C4:A5:06
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D919A6407E2D11F1A051C317CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.161.0/24
Signature Algorithm: sha256WithRSAEncryption
23:82:fa:56:3b:1e:b7:3c:09:fc:15:da:2e:72:c3:37:41:45:
37:4b:7d:f2:64:6f:69:1f:64:63:bb:cb:ad:a8:c5:c7:73:ac:
b1:5a:80:f7:05:ab:a6:b3:9c:6c:7d:b2:9b:cb:73:f3:5a:28:
1b:3d:9a:0a:cf:c3:49:19:cd:e5:87:7b:09:53:88:b1:d5:09:
3b:57:9e:d3:01:95:38:0b:72:d2:b1:97:72:a2:e2:d7:aa:94:
50:64:aa:f5:ce:dc:95:d3:bc:20:68:1b:59:fb:6e:d2:cc:7f:
7b:3e:cd:3b:d6:c8:e1:46:3a:71:8a:5a:5c:cf:3a:9f:59:b7:
ce:7a:e6:86:cc:2b:ca:db:a1:2b:a4:a9:74:b5:47:6b:31:ad:
66:15:a0:55:d4:ba:85:80:df:93:3c:d4:53:7f:ec:e6:b9:49:
dc:7b:a7:44:ae:4d:08:cd:f1:5a:85:60:49:95:e9:4d:4d:d1:
1b:40:7c:b3:b6:85:6e:8b:ed:12:da:c7:c8:ca:a0:cc:f3:72:
d7:fc:cc:d9:1f:57:87:b0:8e:8b:07:59:39:b1:a9:cc:29:cf:
ee:1e:d4:db:76:44:5b:6c:71:b5:ec:6b:b8:2d:3b:cc:17:f3:
2c:75:cc:00:4c:f3:f2:d6:12:40:c0:65:e6:e5:b3:6c:2a:13:
94:20:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:54 2026 by rpki-client