Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa
File: ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa (raw, json)
Hash identifier: z0x2yJJ+yAojdrKAg7NLloTHQmOrtUMDv1pC3BKiJ2o=
Subject key identifier: 35:9B:E0:3C:AF:20:A6:08:6B:EC:45:12:D2:2D:09:90:89:A1:0B:2A
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0627
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa
Signing time: Sun 12 Jul 2026 20:04:45 +0000
ROA not before: Sun 12 Jul 2026 20:04:39 +0000
ROA not after: Sun 11 Jul 2027 20:04:39 +0000
asID: 174
IP address blocks: 66.251.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:04:39 2026 GMT
Not After : Jul 11 20:04:39 2027 GMT
Subject: CN=6a53f35d-c29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:8f:62:8f:76:38:da:c4:24:38:a9:5a:11:
fd:ff:20:4f:25:59:db:80:41:20:0c:98:4a:e7:13:
57:81:e5:c3:f7:b3:71:18:b5:c3:75:4b:bb:5e:c4:
3a:7b:eb:2b:ee:d9:bb:3a:f3:34:b0:3c:b4:17:bb:
13:f5:95:11:71:f4:a8:6a:19:56:9b:55:7e:8a:9d:
0a:ab:d0:00:04:09:5e:85:43:b7:01:30:a3:55:fe:
76:44:12:66:56:69:99:a9:09:64:e6:6f:a2:ac:68:
31:0c:14:fa:9b:b4:dd:50:e8:fa:50:8c:8f:2e:2e:
7c:df:2d:6c:f3:68:ef:ef:dd:8a:e4:73:02:1d:65:
89:67:11:69:0f:dd:aa:a3:de:ff:48:44:1a:bc:44:
86:1c:cd:2e:d8:70:5c:92:3d:06:6a:c9:b4:2e:ff:
fb:dc:09:55:e4:2d:69:c1:84:76:1a:92:a7:fc:72:
f2:08:db:bb:66:dd:84:68:6b:bc:db:df:01:2b:d5:
e8:3b:47:d8:d7:de:8f:e8:44:ec:79:8b:1e:37:19:
1d:f5:c7:76:dd:bd:6e:22:02:f6:bb:2f:b3:6e:1c:
a2:f7:68:ae:d3:b4:12:2b:b1:22:79:75:c9:11:b4:
1f:fc:a7:0f:ec:2f:2d:c4:f1:a8:49:73:de:23:33:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9B:E0:3C:AF:20:A6:08:6B:EC:45:12:D2:2D:09:90:89:A1:0B:2A
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.160.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e3:bd:74:91:6c:3b:a0:9b:36:fd:bf:88:3e:fc:63:a0:54:
7f:ea:0a:82:77:8f:82:25:cf:c5:4d:46:c0:2e:3a:6d:d5:95:
da:54:f1:0a:ab:7f:c7:eb:a1:0e:7c:25:2e:48:ad:05:4c:e1:
fb:43:7e:aa:eb:76:b0:9b:1a:47:ef:58:5b:a4:9c:cc:83:d1:
f8:a2:c6:4b:5a:d7:c7:d1:e6:3b:0d:ae:1e:6b:c3:1b:0d:56:
3d:84:2e:ad:e9:25:01:5b:c6:07:9d:e7:f7:d2:60:0b:be:e8:
20:e5:99:ab:16:a1:5a:26:b8:fe:70:06:21:3c:ed:03:7c:58:
67:fc:3b:13:e8:ff:50:4a:b8:cb:b4:1c:e7:a0:71:be:09:74:
ba:d2:88:2b:13:70:be:87:5a:03:43:3e:61:2a:dd:ba:d6:76:
5b:1e:19:36:b2:82:b8:46:23:42:7d:0f:58:f7:65:04:6d:76:
e7:13:0e:70:73:d3:90:ae:bd:50:ca:6b:90:dc:fb:54:e3:22:
f0:2a:22:50:da:20:50:30:df:a4:7f:59:2c:86:50:ec:59:88:
47:0b:1b:d6:e8:d4:83:fe:7c:d0:8d:a3:99:c2:9f:56:b5:88:
18:5c:ef:7c:d1:c8:bc:40:1e:68:97:3f:3e:03:ec:6e:73:ef:
44:50:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:18 2026 by rpki-client