Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/ECE516527E3011F190D646AACE1D38B0.roa
File: ECE516527E3011F190D646AACE1D38B0.roa (raw, json)
Hash identifier: OoWGktBOhUONH0OmAm4vSQkEZZW+eN/qB+Ia0BErvBg=
Subject key identifier: 64:9C:00:6A:63:CF:63:13:14:99:AF:64:65:79:14:24:A6:74:40:4C
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0650
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/ECE516527E3011F190D646AACE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:33:23 +0000
ROA not before: Sun 12 Jul 2026 20:33:18 +0000
ROA not after: Sun 11 Jul 2027 20:33:18 +0000
asID: 174
IP address blocks: 66.251.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616 (0x650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:33:18 2026 GMT
Not After : Jul 11 20:33:18 2027 GMT
Subject: CN=6a53fa12-b077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:c1:18:f2:22:2d:7c:70:65:b4:9a:ad:e5:
6d:42:56:d8:0f:4f:49:68:3d:8a:ba:98:78:c3:d8:
ad:38:70:53:e3:a0:4f:7e:78:a4:19:10:1e:0e:09:
0f:80:35:28:b1:c8:6f:e0:66:7f:8f:33:8a:b0:42:
c8:78:f5:08:f9:15:a8:ed:7a:f1:c3:45:ed:1f:8e:
f0:f6:c9:9c:68:d4:9b:bd:13:09:a3:15:9a:b9:1a:
4a:16:06:0f:66:f2:e2:7c:39:df:74:58:43:f4:26:
e2:f5:ac:7d:a0:4b:7c:22:91:b9:3f:10:7c:b8:d8:
31:ef:3a:fa:da:04:51:89:17:67:ba:f1:5a:58:2d:
5c:4f:5b:3d:2f:21:4c:4b:87:0b:a1:29:01:4b:db:
9c:b7:f0:df:9f:1a:3a:58:5b:5e:92:78:b9:1f:37:
da:f1:65:af:18:cb:82:65:87:62:9c:99:de:36:a0:
4f:22:e9:ef:76:50:67:23:79:b5:a4:42:18:ba:fe:
d6:c5:6f:38:29:c2:36:8e:a9:e5:e5:51:99:8d:26:
9e:04:8a:bb:45:b0:a9:c1:a3:e8:81:2f:7d:87:17:
9b:06:40:3f:8c:a5:09:40:63:00:62:2f:07:3a:fb:
23:d8:ed:8b:2d:1c:9f:d7:a6:04:d0:ce:60:85:0e:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:00:6A:63:CF:63:13:14:99:AF:64:65:79:14:24:A6:74:40:4C
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/ECE516527E3011F190D646AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c1:ef:c6:35:ba:68:84:bb:57:ec:14:6f:f4:e9:63:8e:f5:
49:ed:6b:76:47:07:9c:11:92:b5:03:e3:f3:cc:21:d4:2f:d3:
7a:7f:21:09:dc:7c:4f:95:16:7d:1a:4c:50:60:de:c9:d5:60:
09:ed:c8:94:63:73:f0:98:a8:05:16:63:e3:6a:46:96:b3:ea:
0e:4a:72:7b:b0:d9:d5:12:68:5e:9e:34:10:fd:b9:63:36:ce:
ad:4e:9c:6c:b2:6c:4d:44:e3:ca:7b:ea:2c:f9:75:a1:38:e7:
ca:13:4c:4e:26:7b:33:2f:cc:73:79:62:d1:8b:ee:20:54:f3:
0a:27:3b:71:50:77:88:cb:9b:39:0a:48:08:8b:ba:4b:0b:a7:
88:7e:26:34:ca:e3:f3:3c:66:81:ef:a2:8b:60:49:24:fa:79:
1b:0a:65:68:fa:8c:da:5c:de:e0:8f:c1:a9:57:f4:5f:85:52:
1a:07:7e:2a:24:fb:35:31:e3:07:a3:81:28:e3:2d:94:94:ce:
6a:8c:48:e1:f9:4b:55:44:89:5c:d8:48:d2:51:82:de:a3:1e:
3c:85:f1:58:95:20:2a:ec:90:42:8e:de:b2:39:79:a3:ed:94:
c2:f4:e9:b4:20:4e:8f:4c:f8:eb:68:a9:77:d2:8a:19:39:97:
6f:7d:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:31 2026 by rpki-client