Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/BC6ADC6C414211F195B5F5B4CE1D38B0.roa
File: BC6ADC6C414211F195B5F5B4CE1D38B0.roa (raw, json)
Hash identifier: EooyE7KXEKxOMOG6iHsfWMTIbZPqCUhCA05lGPgg8C8=
Subject key identifier: 7B:CB:D8:EB:97:0A:F5:E7:76:F7:45:B9:23:19:DA:01:0E:D1:31:C2
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 05BC
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/BC6ADC6C414211F195B5F5B4CE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:37:11 +0000
ROA not before: Sun 26 Apr 2026 07:37:06 +0000
ROA not after: Sun 25 Apr 2027 07:37:06 +0000
asID: 395222
IP address blocks: 66.251.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Apr 26 07:37:06 2026 GMT
Not After : Apr 25 07:37:06 2027 GMT
Subject: CN=69edc0a7-1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:fa:95:6b:60:35:39:5f:f1:c1:c7:ce:e6:
01:e9:d7:b8:c7:da:8e:12:1a:16:b1:e0:dc:88:35:
e5:22:5b:c1:0f:f4:dc:33:c4:1e:73:09:fe:92:61:
fa:af:9b:74:9c:2d:03:3f:50:d5:10:5e:11:20:a6:
ee:30:5b:2a:89:8d:c6:e1:5e:a0:85:6a:2a:2b:51:
7e:09:e2:7a:df:b7:90:bd:49:a8:9c:19:ae:58:e9:
be:8a:bd:f5:ae:cd:74:90:53:64:6f:c9:c6:d4:8c:
e3:c8:3e:ac:0b:fb:d1:85:a8:d7:73:8b:98:2e:25:
f7:ab:e9:20:84:42:dc:ac:4b:51:96:14:aa:fa:56:
e6:d4:f7:fb:93:90:a8:7c:e6:3a:11:84:16:8a:41:
d2:41:20:e6:3c:d1:9b:ca:fc:04:13:a1:31:56:ea:
d0:1c:e6:50:bd:8e:a0:c8:70:78:a4:15:dc:89:fb:
c1:94:66:b8:40:72:ae:09:dd:df:dd:29:08:cf:a2:
c2:5b:8b:b1:ba:6b:5b:2e:c7:53:d8:58:5d:e3:4c:
86:7e:84:f7:72:0c:ec:0e:a7:1f:ce:f3:1a:bc:2b:
d3:11:73:b1:03:e5:8f:e8:68:d8:fe:07:09:a6:de:
ec:52:4d:e1:45:7e:d8:b2:3b:26:97:75:22:4c:c1:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:D8:EB:97:0A:F5:E7:76:F7:45:B9:23:19:DA:01:0E:D1:31:C2
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/BC6ADC6C414211F195B5F5B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.140.0/24
Signature Algorithm: sha256WithRSAEncryption
48:72:8a:d3:a5:25:e0:63:63:4a:5c:46:77:a9:88:82:35:c7:
4e:f3:06:73:b9:1f:f5:12:75:de:be:45:02:ae:cb:83:be:87:
1e:81:59:c1:5d:d4:a2:14:9e:50:ca:c6:2d:4d:01:9b:12:05:
50:53:b4:1b:9d:6c:ab:e2:c9:b7:72:3e:d6:72:0f:df:4c:76:
42:48:a9:b0:4c:c1:22:c7:b9:b7:35:69:5c:9c:5d:5d:eb:bf:
6a:d0:56:49:e2:cf:b4:3d:2e:d1:be:16:29:3a:f9:be:b5:2c:
b6:ef:15:bb:46:3b:94:fe:a1:54:41:60:9d:36:7c:20:c3:44:
8b:64:17:4a:0d:12:b6:1a:93:fe:c8:c1:2c:b0:96:1e:37:88:
8c:34:4b:e4:bc:4f:a5:5b:b6:46:eb:cd:d6:ca:d5:37:c6:17:
8e:da:ba:0b:17:83:61:68:e4:0e:a3:1a:94:4c:d4:1b:22:ac:
0a:a4:be:59:4f:a7:84:73:3c:ce:b4:be:ce:02:93:53:f6:31:
71:24:ba:40:ef:88:69:19:3b:b9:f0:69:dd:82:b6:f1:64:07:
8c:28:9b:02:62:87:cd:66:a2:13:85:17:ed:ee:d3:d8:96:01:
51:3e:54:11:8a:43:32:a7:71:a0:dd:cd:00:37:1a:5f:60:c6:
5a:fa:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:55 2026 by rpki-client