Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DC5F4E20414411F1AF8953C1CE1D38B0.roa
File: DC5F4E20414411F1AF8953C1CE1D38B0.roa (raw, json)
Hash identifier: Dbhg+sjCOCUJKp8QkallMbNJaqPIHHmXRpeIRqrgaqQ=
Subject key identifier: 9E:71:B1:E7:10:24:3F:83:C0:28:54:EC:DB:66:2D:E0:C6:D8:EB:18
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 05CA
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DC5F4E20414411F1AF8953C1CE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:52:24 +0000
ROA not before: Sun 26 Apr 2026 07:52:19 +0000
ROA not after: Sun 25 Apr 2027 07:52:19 +0000
asID: 395222
IP address blocks: 66.251.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Apr 26 07:52:19 2026 GMT
Not After : Apr 25 07:52:19 2027 GMT
Subject: CN=69edc438-d0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:b0:16:99:83:73:ad:53:e2:73:80:94:e1:
c1:03:2a:46:81:29:e4:bb:a9:df:32:a1:23:f6:b1:
6d:b3:a8:4d:14:88:73:68:1e:aa:52:00:ff:32:b8:
ec:c2:21:2a:b4:6f:5e:8f:86:cf:b3:24:d3:a3:ec:
cd:eb:27:66:27:d5:2e:a9:04:fa:26:9a:b3:bd:97:
8f:7a:1c:5f:94:5e:be:18:20:75:ef:b6:b8:48:a9:
79:df:b7:75:4b:28:34:b9:3d:29:78:f8:1d:f3:a3:
b3:0e:4f:7f:2f:7f:c0:66:c4:73:2a:f1:5d:76:81:
b9:19:6a:be:c0:a6:3c:fc:72:3f:99:20:9d:99:be:
e6:ac:f3:a4:6e:ac:c5:86:6f:10:b7:4d:1e:a6:c8:
91:b7:d2:b1:78:e9:9d:78:2d:83:ce:42:dc:d9:9b:
7d:51:10:74:42:d0:52:ea:91:f8:a8:10:ff:2c:87:
38:a0:3b:6d:63:7b:9a:f5:ea:ad:38:6e:66:25:b5:
5f:81:c0:dc:1c:f2:d1:b8:1e:47:cc:40:a0:77:c5:
71:c7:38:04:12:56:05:18:31:18:39:c6:5f:5d:a0:
69:b2:97:22:1e:f5:11:45:b8:4a:8c:2e:61:5e:7f:
63:ff:45:77:aa:94:8b:a1:33:36:31:6c:f0:00:77:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:71:B1:E7:10:24:3F:83:C0:28:54:EC:DB:66:2D:E0:C6:D8:EB:18
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DC5F4E20414411F1AF8953C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7e:28:14:b2:73:f9:e0:cb:be:c4:c5:be:5c:ee:f1:2b:ea:
f4:91:2a:0d:ad:60:3f:6e:36:13:dd:ff:fc:f9:9b:d6:46:b8:
d1:f0:9e:10:16:a5:b0:f0:33:d2:85:a6:1c:8b:fc:4d:98:dd:
1a:92:39:97:0f:9b:03:da:e1:5c:76:01:2d:86:8c:0c:ab:87:
22:dd:70:40:2d:b3:b7:f2:bf:f4:04:94:36:31:c9:91:5a:be:
e0:a9:6c:03:e1:f9:e9:fd:b8:33:a4:6f:46:0f:50:07:ec:de:
e8:56:36:7d:3a:c8:5b:20:0c:62:c1:24:88:0d:b1:69:30:f4:
14:09:a0:d1:f7:d9:04:6c:67:73:6d:82:89:36:30:8b:95:ab:
a7:82:0b:6d:5a:64:19:00:c9:01:c0:92:bd:85:a3:f1:af:4e:
76:b3:6e:30:82:7c:d9:c2:ec:c1:7f:c4:c5:98:25:df:67:3a:
2a:ff:44:57:da:00:48:f3:d7:a8:5c:48:d9:18:c0:78:99:1f:
0c:a8:2c:ed:be:9f:e9:95:84:9c:bf:ea:a8:4b:59:13:fe:a1:
80:d1:4d:78:8c:7d:d4:cb:03:8c:be:ed:3f:f0:3c:f5:13:75:
8c:1e:b8:6b:80:a7:e3:34:92:9d:63:96:06:61:e5:a5:22:1d:
cc:82:bd:e5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBcowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA0MjYwNzUyMTlaFw0yNzA0MjUwNzUyMTlaMBgxFjAU
BgNVBAMTDTY5ZWRjNDM4LWQwZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUm7AWmYNzrVPic4CU4cEDKkaBKeS7qd8yoSP2sW2zqE0UiHNoHqpSAP8y
uOzCISq0b16Phs+zJNOj7M3rJ2Yn1S6pBPommrO9l496HF+UXr4YIHXvtrhIqXnf
t3VLKDS5PSl4+B3zo7MOT38vf8BmxHMq8V12gbkZar7Apjz8cj+ZIJ2Zvuas86Ru
rMWGbxC3TR6myJG30rF46Z14LYPOQtzZm31REHRC0FLqkfioEP8shzigO21je5r1
6q04bmYltV+BwNwc8tG4HkfMQKB3xXHHOAQSVgUYMRg5xl9doGmylyIe9RFFuEqM
LmFef2P/RXeqlIuhMzYxbPAAdxkzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUnnGx
5xAkP4PAKFTs22Yt4MbY6xgwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4L0RDNUY0RTIwNDE0NDExRjFBRjg5NTNDMUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+50wDQYJKoZIhvcNAQELBQAD
ggEBACx+KBSyc/ngy77Exb5c7vEr6vSRKg2tYD9uNhPd//z5m9ZGuNHwnhAWpbDw
M9KFphyL/E2Y3RqSOZcPmwPa4Vx2AS2GjAyrhyLdcEAts7fyv/QElDYxyZFavuCp
bAPh+en9uDOkb0YPUAfs3uhWNn06yFsgDGLBJIgNsWkw9BQJoNH32QRsZ3Ntgok2
MIuVq6eCC21aZBkAyQHAkr2Fo/GvTnazbjCCfNnC7MF/xMWYJd9nOir/RFfaAEjz
16hcSNkYwHiZHwyoLO2+n+mVhJy/6qhLWRP+oYDRTXiMfdTLA4y+7T/wPPUTdYwe
uGuAp+M0kp1jlgZh5aUiHcyCveU=
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:57 2026 by rpki-client