Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa
File: EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa (raw, json)
Hash identifier: 6Za0LpirtMkr1W1FS+msJJ0aWJ7QuNPWNejT9fg3T0Q=
Subject key identifier: A6:8E:6F:54:1E:7C:CD:49:D4:09:06:62:EA:1E:B6:D1:B0:C3:CD:D4
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0642
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa
Signing time: Sun 12 Jul 2026 20:26:15 +0000
ROA not before: Sun 12 Jul 2026 20:26:11 +0000
ROA not after: Sun 11 Jul 2027 20:26:11 +0000
asID: 174
IP address blocks: 66.251.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 20:26:11 2026 GMT
Not After : Jul 11 20:26:11 2027 GMT
Subject: CN=6a53f867-8a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:60:17:9d:63:9e:cf:a0:f7:4d:53:6c:f3:
46:1b:dd:a6:3e:1b:3e:47:0e:61:66:5d:15:9b:f7:
e0:43:38:e7:f0:0c:64:67:d8:92:02:48:08:d5:93:
0f:ff:b6:29:44:c3:86:36:77:ba:26:00:3a:9e:8a:
18:38:a7:00:e9:8f:2b:d2:8a:20:ca:ca:01:25:72:
6d:d5:20:73:a7:e4:f5:ed:79:3a:54:fd:6c:1c:e1:
42:b2:ec:40:6b:9a:d8:a8:b1:28:96:71:e5:20:85:
5f:88:7e:15:f8:04:59:fb:14:8b:e2:64:52:2a:2c:
9e:5f:2d:2f:75:76:ab:35:2b:36:9c:cb:ee:d2:c9:
fa:2d:b6:23:bb:25:fb:56:37:83:5e:3e:10:82:b9:
24:05:3d:45:fb:95:d2:b0:58:94:75:21:58:a3:72:
76:f1:53:50:39:fb:8b:2d:3a:cc:0a:3f:24:b8:84:
1d:e6:4c:c2:9b:e6:26:f4:00:76:4a:2f:2b:ac:65:
8d:65:90:8f:66:55:a1:65:a9:fe:84:cc:dc:b6:65:
58:d6:65:33:28:3d:7f:9a:42:fe:b0:4f:ee:46:45:
22:5a:38:96:55:bb:d6:56:fe:d8:8c:35:a4:67:ae:
ad:59:15:61:11:7f:ba:7a:f4:10:07:33:28:8a:be:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:6F:54:1E:7C:CD:49:D4:09:06:62:EA:1E:B6:D1:B0:C3:CD:D4
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.178.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6d:da:27:8f:61:22:09:35:e8:a2:cc:89:59:07:58:1a:9e:
50:26:42:58:df:24:62:7e:fa:7c:37:d7:3c:ab:a5:4f:0d:c4:
db:f4:7c:fe:06:a3:cb:f0:ff:b1:c1:ba:d8:48:a3:b5:57:9a:
22:da:e1:bf:61:b3:26:9f:ca:ba:a7:ac:20:33:0f:0a:a6:d3:
ae:d7:64:76:57:06:00:06:da:f5:81:c4:24:9b:c3:d4:61:f3:
4c:2a:83:ea:a4:a3:3a:b2:04:a9:bd:b4:e2:01:54:35:38:b2:
81:f2:a5:d2:fe:cd:8e:6c:2c:8a:80:11:3f:bc:06:9d:4e:1b:
f1:ff:82:dd:d0:c3:9a:37:d1:aa:89:cc:7a:90:94:d0:85:82:
de:38:3d:0c:05:67:ca:f6:97:40:e7:76:bd:26:1f:a9:f8:43:
32:fd:e9:e0:c2:a0:6f:15:66:0f:3c:7f:fc:1b:3f:0f:b2:7e:
f7:7e:7f:6b:98:5c:33:23:7e:5a:3c:9b:12:14:e4:d3:d7:d8:
52:e2:d3:c5:93:fd:70:ec:6c:3d:26:12:4b:78:4b:e4:14:ea:
47:03:b3:a3:f8:81:96:27:66:a6:74:0a:35:38:1d:2e:4e:a7:
ff:4d:1a:23:2b:51:4d:a7:f2:75:3f:84:b3:ed:69:d8:4a:ae:
64:0f:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:30 2026 by rpki-client