Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/70C67A1C414411F1AC2C25BFCE1D38B0.roa
File: 70C67A1C414411F1AC2C25BFCE1D38B0.roa (raw, json)
Hash identifier: pVvqCth+pldb5aKJXaW4cjCwqqFCFtgpnyzwqX0KUAQ=
Subject key identifier: 0F:F6:30:0A:54:96:AB:EF:49:60:2D:6B:75:ED:CD:F0:93:39:C0:C9
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 05C6
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/70C67A1C414411F1AC2C25BFCE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:49:23 +0000
ROA not before: Sun 26 Apr 2026 07:49:19 +0000
ROA not after: Sun 25 Apr 2027 07:49:19 +0000
asID: 395222
IP address blocks: 66.251.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Apr 26 07:49:19 2026 GMT
Not After : Apr 25 07:49:19 2027 GMT
Subject: CN=69edc383-3409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:fb:31:21:60:79:2a:71:69:7f:67:06:ec:
70:fc:7e:fe:c4:a4:1d:57:55:76:a4:a6:cd:ea:fd:
da:b3:c4:96:5e:63:bf:fb:af:47:12:ad:d6:4a:fd:
71:46:b2:4f:b9:dc:35:4c:be:d2:99:b3:4d:4c:04:
a8:67:d1:fe:d5:70:37:ca:d4:7b:c9:c0:de:51:e8:
bf:bf:18:65:d2:06:23:19:17:29:c3:05:82:44:cf:
cb:c2:3c:28:7e:eb:8a:f9:39:f1:c1:70:38:3c:f6:
7e:96:04:68:3c:c7:84:3f:52:60:58:e4:67:64:34:
29:8c:ac:4c:b7:e3:15:6f:f6:8a:38:3b:5e:57:06:
f2:ea:1d:48:17:1e:d9:33:9d:e4:ab:3c:a0:1c:99:
93:03:09:92:fc:20:0a:e9:5d:c8:7d:7f:ea:a8:09:
e6:f1:99:f2:9b:f1:01:87:6a:72:dc:20:e2:d3:55:
e1:62:94:89:b5:57:2a:5d:57:9f:95:76:62:65:4c:
db:48:ce:04:f1:60:97:24:f8:16:c8:da:3d:13:86:
3e:19:0a:ce:d5:1a:c3:9c:b7:55:57:5b:30:8c:c6:
4d:ea:16:d0:16:c2:4b:06:6b:8e:a3:c1:c5:84:6c:
06:91:16:52:6b:79:26:d7:a7:73:b9:a1:7d:2b:97:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:30:0A:54:96:AB:EF:49:60:2D:6B:75:ED:CD:F0:93:39:C0:C9
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/70C67A1C414411F1AC2C25BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.147.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cd:a2:38:3e:fe:ac:a5:e6:98:1a:9c:e1:60:b5:e2:ec:bb:
34:57:97:8f:43:23:92:42:10:c3:c7:32:d0:41:36:d3:d0:78:
87:f4:d9:27:01:8f:c0:73:ce:45:d8:d3:0f:e5:a0:4f:82:ef:
8a:10:a4:c4:04:16:f1:3b:af:8c:b7:fb:0a:7d:2f:3c:c0:6e:
f1:74:df:0e:1f:d0:71:ee:83:fb:b0:6c:c1:26:a9:7a:3f:0a:
e6:9c:39:43:e8:ae:dd:6b:93:28:75:fe:87:3e:44:ec:47:7f:
86:3c:f7:f0:52:1f:6f:5b:be:3a:69:5e:ad:f6:9b:4a:94:d0:
0b:58:a9:b5:69:c8:38:52:61:a7:93:a1:2c:b6:a8:35:84:4a:
30:1f:e4:e7:5a:19:c4:ff:fc:bd:86:7f:5a:9d:20:8c:0f:29:
50:34:f2:f3:1f:13:37:b8:08:3b:45:9a:46:84:0c:70:9f:60:
06:4d:f8:64:97:3c:fb:a8:bb:b3:5d:07:20:1b:20:2a:dc:39:
e8:22:94:6a:2c:30:61:e6:10:b7:77:0e:41:1e:94:7c:5e:b6:
48:b5:8a:2b:ad:26:bb:5f:33:db:1b:b8:f0:66:f6:e2:c8:c4:
40:db:67:78:24:e0:a3:72:af:c0:91:37:4e:86:97:3a:0a:e3:
c7:1c:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:55 2026 by rpki-client