Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E684858E414211F1A3CDCEB6CE1D38B0.roa
File: E684858E414211F1A3CDCEB6CE1D38B0.roa (raw, json)
Hash identifier: trSZRMDESmLqpeuxtkhZM3kKOXj5AdcD0bd/niQbcss=
Subject key identifier: 94:E8:D1:C2:0C:B2:07:01:29:0C:3F:61:77:D2:F3:E3:FD:0A:0E:C0
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 05BE
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E684858E414211F1A3CDCEB6CE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:38:22 +0000
ROA not before: Sun 26 Apr 2026 07:38:17 +0000
ROA not after: Sun 25 Apr 2027 07:38:17 +0000
asID: 395222
IP address blocks: 66.251.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1470 (0x5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Apr 26 07:38:17 2026 GMT
Not After : Apr 25 07:38:17 2027 GMT
Subject: CN=69edc0ee-e946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:af:f2:e9:7e:2c:57:3f:7f:ba:19:2f:45:
6e:dd:a7:32:a0:15:13:6d:89:38:19:bd:ea:05:be:
ec:05:7a:66:76:1a:59:5e:6c:ee:24:66:fd:0a:99:
3f:38:8d:e9:51:28:91:7d:ec:1a:74:16:0b:4d:14:
5e:9c:85:2a:50:70:ab:48:ff:8f:e8:e4:11:c6:12:
4d:11:a2:83:4d:5c:39:e3:7b:8c:e7:41:5a:be:f2:
ee:35:f1:cf:71:c2:2b:cd:18:15:09:19:7c:26:c8:
8d:20:8c:37:02:dd:35:46:c6:0d:2f:95:cc:8a:04:
ce:cc:ff:52:39:dc:4d:f0:46:59:0b:a8:f7:18:88:
9d:aa:ff:51:17:da:4d:ec:52:12:40:2b:ba:ae:5d:
38:83:0b:2c:ab:cc:ce:b9:73:a5:1c:0a:3f:76:7b:
3c:d8:cf:1f:bf:fe:9c:2a:a2:2c:75:b9:52:d0:eb:
93:2a:62:1b:47:39:bb:99:cc:f5:e6:31:ff:8d:9c:
6d:5c:75:99:0f:4f:11:bb:b2:3b:14:7b:35:2d:a3:
ce:61:57:44:00:3f:3c:a9:d8:21:6d:37:eb:2c:62:
7e:c0:77:09:de:bf:14:80:d5:34:ce:2e:cb:41:56:
16:7a:b4:8e:99:3d:bd:22:28:5a:87:df:87:d0:cb:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:D1:C2:0C:B2:07:01:29:0C:3F:61:77:D2:F3:E3:FD:0A:0E:C0
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E684858E414211F1A3CDCEB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:12:a7:fa:ba:ea:ba:b8:60:e1:b7:68:86:55:dd:15:7d:57:
65:a3:29:4d:d7:18:45:ab:6e:f4:14:af:dc:61:19:5f:c0:1c:
43:8b:19:f3:8b:c5:84:95:c7:1d:d6:92:81:18:fd:3f:d8:20:
52:5d:0c:32:67:ea:82:9b:17:80:28:b4:5a:d9:73:f5:51:af:
62:1a:04:3c:51:7c:fb:d0:05:61:35:d7:6d:c3:22:c7:4e:cc:
e7:31:d6:45:0a:ce:bc:76:08:94:28:af:a2:51:e7:f9:28:1f:
ba:02:8e:54:af:0a:ec:24:c2:b3:78:96:61:11:69:99:9e:9a:
5a:6f:bb:1e:f1:58:a5:94:17:a8:9e:8a:a6:b2:cc:4c:bb:d9:
b5:8e:4a:80:df:a2:0b:7d:5b:7f:cb:4b:13:2a:ee:cc:b9:f6:
d0:ac:e0:9c:90:f6:b0:50:d8:cc:8e:c8:50:3a:b0:e2:25:f4:
74:a3:81:5e:12:65:06:11:62:80:05:b7:1f:f0:b8:cf:cb:f0:
b0:51:20:a6:e8:8a:e2:ae:c4:3d:93:7f:6f:e6:52:54:b3:d9:
f0:32:f7:0a:69:b7:b1:ba:e4:bb:a0:d5:af:67:d7:48:fb:30:
d4:20:2d:58:f1:59:8e:22:3e:7a:68:86:10:7b:e7:41:9e:8b:
93:27:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:56 2026 by rpki-client