Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E77C5C227E2E11F18C2F0A1CCF1D38B0.roa
File: E77C5C227E2E11F18C2F0A1CCF1D38B0.roa (raw, json)
Hash identifier: XLugb+ewySxCjGyLpAA8rZeHG0XeiKI6hnWqmfdgYAk=
Subject key identifier: 08:AD:D7:E9:0C:AE:47:33:21:0E:90:A6:64:41:50:B9:72:A1:7A:AF
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0634
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E77C5C227E2E11F18C2F0A1CCF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:18:54 +0000
ROA not before: Sun 12 Jul 2026 20:18:50 +0000
ROA not after: Sun 11 Jul 2027 20:18:50 +0000
asID: 174
IP address blocks: 66.251.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:18:50 2026 GMT
Not After : Jul 11 20:18:50 2027 GMT
Subject: CN=6a53f6ae-8946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:eb:95:da:de:bf:7c:7e:2f:c9:54:0a:bd:
8d:29:1e:e6:46:a0:a1:82:96:d7:08:af:0d:1b:f8:
4c:dc:40:34:10:8a:65:ae:72:44:f2:72:0f:3f:f0:
8e:a3:e4:7d:16:dc:53:f2:62:eb:cf:b9:3f:58:d3:
82:47:8c:95:98:44:bc:91:38:64:20:46:a0:02:95:
40:78:94:d0:4f:d1:c3:97:14:6d:0a:fd:b1:fe:ce:
e7:8c:c4:b6:66:70:f0:a0:9c:30:37:34:9a:b0:3d:
9d:8b:22:07:a9:08:5d:32:60:64:89:c5:9c:f5:22:
55:50:0b:a3:5c:64:27:fb:cc:99:47:52:27:8b:ee:
1b:44:9a:7e:7f:bc:88:3a:90:d6:b4:07:c2:1f:4f:
f7:ea:e7:af:d0:72:bf:40:76:c0:2d:5f:99:8c:69:
15:32:54:90:02:79:e7:ba:25:d8:75:51:71:87:3c:
b4:6f:c4:ad:47:a9:82:22:c8:4e:ab:6e:2b:8e:ad:
f8:94:e3:fa:88:ea:70:d9:13:98:a9:c2:0f:0b:78:
87:c5:68:8c:1e:01:03:c2:6a:66:a3:47:d7:06:67:
3a:af:2e:30:51:59:1f:71:5d:ca:43:77:f9:8d:6f:
d0:66:d1:fe:5c:81:df:5d:9d:78:d1:57:c9:45:97:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:D7:E9:0C:AE:47:33:21:0E:90:A6:64:41:50:B9:72:A1:7A:AF
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E77C5C227E2E11F18C2F0A1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:29:bf:9c:e4:76:d6:3b:9c:96:9f:df:c2:34:ef:7a:ff:5a:
90:92:82:7b:a6:38:27:6f:90:97:0b:5c:7e:98:35:b0:3f:19:
c9:d9:69:27:90:78:af:c2:3d:27:eb:1d:7f:81:63:4f:8e:2b:
28:8f:c1:06:ff:d7:2f:65:98:8b:7a:ab:8a:ae:f1:11:fa:b8:
d0:7c:6b:05:19:96:ad:2c:14:08:e9:94:4f:64:23:b2:c5:ef:
55:df:77:9d:0b:d7:75:b5:a4:63:ed:1a:11:fd:00:48:df:63:
90:8c:63:1c:56:56:dc:d1:4a:78:1f:7a:36:e6:57:03:eb:50:
c2:aa:26:50:25:3c:98:2c:38:dc:e8:3c:13:bd:fa:e5:16:92:
e0:c5:2e:d1:4d:21:2a:e2:a6:17:b1:bb:ba:cc:9c:d5:d1:2f:
19:e2:e9:f2:10:14:75:27:b0:9b:84:4d:2b:84:40:67:34:4b:
36:5d:b7:19:48:71:be:f3:bf:00:3f:02:51:33:24:86:11:af:
12:11:1d:ef:c5:7a:0c:89:07:80:ee:23:9d:fc:10:c6:20:26:
d6:c5:ff:79:50:3b:2b:12:bf:41:53:75:b1:14:4b:a5:b0:30:
d8:f2:06:3a:1c:bc:91:e9:f0:bc:b2:6a:85:d2:30:ff:7a:82:
2c:bd:f5:a7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA3MTIyMDE4NTBaFw0yNzA3MTEyMDE4NTBaMBgxFjAU
BgNVBAMTDTZhNTNmNmFlLTg5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDunuuV2t6/fH4vyVQKvY0pHuZGoKGCltcIrw0b+EzcQDQQimWuckTycg8/
8I6j5H0W3FPyYuvPuT9Y04JHjJWYRLyROGQgRqAClUB4lNBP0cOXFG0K/bH+zueM
xLZmcPCgnDA3NJqwPZ2LIgepCF0yYGSJxZz1IlVQC6NcZCf7zJlHUieL7htEmn5/
vIg6kNa0B8IfT/fq56/Qcr9AdsAtX5mMaRUyVJACeee6Jdh1UXGHPLRvxK1HqYIi
yE6rbiuOrfiU4/qI6nDZE5ipwg8LeIfFaIweAQPCamajR9cGZzqvLjBRWR9xXcpD
d/mNb9Bm0f5cgd9dnXjRV8lFl+dzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCK3X
6QyuRzMhDpCmZEFQuXKheq8wHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4L0U3N0M1QzIyN0UyRTExRjE4QzJGMEExQ0NGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+6YwDQYJKoZIhvcNAQELBQAD
ggEBAHopv5zkdtY7nJaf38I073r/WpCSgnumOCdvkJcLXH6YNbA/GcnZaSeQeK/C
PSfrHX+BY0+OKyiPwQb/1y9lmIt6q4qu8RH6uNB8awUZlq0sFAjplE9kI7LF71Xf
d50L13W1pGPtGhH9AEjfY5CMYxxWVtzRSngfejbmVwPrUMKqJlAlPJgsONzoPBO9
+uUWkuDFLtFNISriphexu7rMnNXRLxni6fIQFHUnsJuETSuEQGc0SzZdtxlIcb7z
vwA/AlEzJIYRrxIRHe/FegyJB4DuI538EMYgJtbF/3lQOysSv0FTdbEUS6WwMNjy
BjocvJHp8LyyaoXSMP96giy99ac=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:02 2026 by rpki-client