Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FA491FB47E2B11F1AA23710BCF1D38B0.roa
File: FA491FB47E2B11F1AA23710BCF1D38B0.roa (raw, json)
Hash identifier: YwuLni5xYVgslLLIMW/8r5dsr7/o2nw39a6iQKFwzQ0=
Subject key identifier: 58:BE:85:14:A8:11:EC:29:03:B0:C5:5E:6F:68:D7:4B:06:3A:C3:3D
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 061F
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FA491FB47E2B11F1AA23710BCF1D38B0.roa
Signing time: Sun 12 Jul 2026 19:57:58 +0000
ROA not before: Sun 12 Jul 2026 19:57:52 +0000
ROA not after: Sun 11 Jul 2027 19:57:52 +0000
asID: 174
IP address blocks: 66.251.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1567 (0x61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 12 19:57:52 2026 GMT
Not After : Jul 11 19:57:52 2027 GMT
Subject: CN=6a53f1c5-38d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:5e:2b:56:bf:aa:92:f6:02:6d:18:f2:c1:
ce:16:e9:4f:82:ec:82:9a:3a:c8:a8:b7:46:f1:70:
64:50:c5:b8:67:00:24:03:30:75:f4:b1:58:a4:dd:
a1:26:97:d8:c2:d3:44:70:5a:6a:cf:93:d8:01:25:
1a:e2:f6:4a:9f:11:cd:39:56:a1:d5:57:17:b9:48:
7a:fc:5d:25:88:25:23:97:4a:a4:33:1f:3b:22:f0:
d5:4e:87:bc:7f:28:9d:17:0a:6b:d6:e0:2f:99:8d:
08:8b:4f:81:4a:2c:bf:cd:2b:52:a0:b7:1a:2f:fd:
d2:be:73:74:f1:cf:ce:08:5e:c9:4f:d9:fc:a0:b9:
f1:e3:76:9b:71:09:bf:15:8f:a0:16:03:03:ab:cc:
f1:5b:a1:c6:d6:36:26:8c:90:21:e0:ed:3f:93:da:
c4:9b:f4:c0:f6:77:0b:cc:74:73:98:d6:81:58:6a:
7f:32:24:6e:00:03:da:ac:93:58:3e:88:94:b2:1e:
69:7f:79:d4:84:7a:b8:55:dd:8d:fa:a2:b2:32:74:
87:6a:50:d1:b8:15:73:b6:25:6a:ec:7c:38:73:fb:
6e:19:f4:d9:17:ab:93:91:1e:c4:1a:e3:e7:b8:4f:
ff:71:26:83:cc:e1:01:8e:64:bc:98:bc:ec:2c:fc:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:85:14:A8:11:EC:29:03:B0:C5:5E:6F:68:D7:4B:06:3A:C3:3D
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FA491FB47E2B11F1AA23710BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:7f:2c:cf:a8:e8:ab:66:83:b6:ea:55:78:2f:0f:f2:9b:b1:
91:35:c8:9f:82:44:ab:50:36:24:b6:63:9d:58:06:ba:c7:2c:
1c:a9:61:bf:0c:07:38:29:7d:35:7c:57:b6:6d:1f:b3:2c:09:
96:87:be:94:45:56:c0:6c:f8:2b:84:29:79:5b:cd:b8:5e:93:
a5:86:50:f9:9a:48:c4:2b:ec:99:09:90:65:64:b5:fe:fc:25:
27:a9:95:13:56:2f:a8:61:45:26:c2:c8:fa:ac:ce:fe:f2:43:
73:aa:8f:5a:3a:e6:0f:72:83:05:0c:7e:eb:35:33:55:5f:b1:
46:6b:de:90:ff:0c:98:20:d5:43:cb:d4:13:94:5f:11:6c:96:
21:45:89:13:16:76:d2:f2:bc:ca:ee:83:58:3f:5e:db:d4:fb:
f1:25:e5:ff:fd:f3:62:83:2b:38:2b:da:8a:89:c8:22:b9:32:
86:e7:81:0b:9b:6a:06:c4:2a:cf:d5:0a:62:b3:a7:10:7c:d0:
a7:de:0d:a4:f5:45:c4:57:bc:be:e4:19:2a:4c:6e:5c:c1:b0:
ea:1b:b9:98:00:53:24:72:ed:ca:07:50:5e:96:cb:01:ac:1d:
bf:58:a0:c2:54:3a:58:45:57:cd:85:82:9e:db:50:80:b5:73:
a5:31:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:22 2026 by rpki-client