Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/F7AB1DA03FEE11F1A41F250CCF1D38B0.roa
File: F7AB1DA03FEE11F1A41F250CCF1D38B0.roa (raw, json)
Hash identifier: PetGAmCkVJggQ+XraG+xVad5hNC+DTd3YsSVvZnJ3No=
Subject key identifier: F3:88:12:81:F7:36:4F:91:32:5C:DC:E5:05:EB:DC:41:75:6B:21:34
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 05B5
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/F7AB1DA03FEE11F1A41F250CCF1D38B0.roa
Signing time: Fri 24 Apr 2026 15:05:02 +0000
ROA not before: Sat 25 Apr 2026 15:04:56 +0000
ROA not after: Sat 24 Apr 2027 15:04:56 +0000
asID: 395222
IP address blocks: 66.251.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Apr 25 15:04:56 2026 GMT
Not After : Apr 24 15:04:56 2027 GMT
Subject: CN=69eb869e-bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:a4:b8:93:52:a8:a9:89:fc:cf:90:c4:59:
a1:0c:9d:ff:3e:c6:bc:14:99:1f:ee:33:dc:4b:e9:
33:ce:d9:d6:5b:bd:85:ce:b1:96:76:05:15:94:2d:
22:d7:22:dc:05:a8:ee:68:f8:40:c6:64:4e:0c:3b:
0b:4b:65:20:6d:78:02:2e:d6:f6:7f:49:37:6f:0d:
01:c1:cb:10:7a:1f:c2:00:ab:46:00:c8:64:cf:e3:
df:da:fd:15:7b:9a:1c:30:65:c8:77:fb:5e:b0:84:
66:af:4b:13:fc:37:84:ba:f5:7d:df:4d:a7:42:c0:
c5:2a:09:14:21:07:cf:f2:f2:84:a5:e5:f6:b1:4d:
2d:42:b3:7d:e4:d8:f1:25:67:30:e0:96:18:6b:0a:
fc:54:ea:41:01:aa:21:4b:1e:d0:a3:ab:19:ce:7b:
2e:fb:bd:5c:3e:ef:7b:69:9c:4a:63:a7:83:b6:12:
eb:92:e0:19:93:4b:fa:b2:57:a4:1e:15:ca:30:b9:
76:78:c6:71:26:9a:b7:e0:13:13:ca:f2:52:91:83:
7f:e0:4c:ed:ab:59:ef:49:29:b3:6a:11:f1:16:e1:
63:a9:fe:c6:f6:82:83:a4:3f:3a:42:d7:17:c0:10:
34:ff:92:50:7a:c4:58:9b:84:80:07:2a:aa:7a:75:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:12:81:F7:36:4F:91:32:5C:DC:E5:05:EB:DC:41:75:6B:21:34
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/F7AB1DA03FEE11F1A41F250CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1a:cf:dc:3e:ce:8c:43:0b:ff:e8:81:1d:41:d0:d7:54:14:
92:01:79:e9:6c:00:c6:4e:7d:1a:22:87:97:28:64:94:ff:47:
0d:d5:8e:57:00:80:d2:c4:43:8b:91:9f:29:a6:e3:4c:f3:f3:
df:c2:dd:84:40:62:54:b8:83:47:4a:ab:dd:33:05:49:88:7f:
96:c7:72:ae:09:3b:36:27:48:18:a8:d3:2e:35:61:f3:51:7d:
45:b6:b7:5d:bc:0f:16:53:19:fd:a7:8c:fa:52:da:fe:0e:02:
09:2e:aa:1d:99:0d:7a:4c:72:e8:fc:dd:b5:cd:de:d5:2d:25:
54:08:9d:69:2a:37:ae:30:97:5c:15:8a:a8:75:83:91:c9:42:
c5:df:ac:fd:ed:41:d2:dd:07:35:f4:bd:7b:c7:a5:6c:f9:a2:
78:04:5e:10:93:9f:52:5a:87:74:5b:b0:1c:fe:37:36:22:67:
fb:51:0a:6f:b1:01:cf:cc:11:b1:19:ef:fb:0c:ed:c1:ba:cd:
f5:48:27:41:44:6c:5a:f6:d0:05:fc:b7:61:68:4a:b0:c1:3b:
f6:09:94:78:b2:94:b5:85:fb:0d:30:16:c8:9d:bd:6c:28:04:
2c:46:b8:ce:9e:dd:32:d4:f2:21:3e:39:c8:42:42:2c:27:b2:
05:88:e8:6d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA0MjUxNTA0NTZaFw0yNzA0MjQxNTA0NTZaMBgxFjAU
BgNVBAMTDTY5ZWI4NjllLWJmYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbU6S4k1KoqYn8z5DEWaEMnf8+xrwUmR/uM9xL6TPO2dZbvYXOsZZ2BRWU
LSLXItwFqO5o+EDGZE4MOwtLZSBteAIu1vZ/STdvDQHByxB6H8IAq0YAyGTP49/a
/RV7mhwwZch3+16whGavSxP8N4S69X3fTadCwMUqCRQhB8/y8oSl5faxTS1Cs33k
2PElZzDglhhrCvxU6kEBqiFLHtCjqxnOey77vVw+73tpnEpjp4O2EuuS4BmTS/qy
V6QeFcowuXZ4xnEmmrfgExPK8lKRg3/gTO2rWe9JKbNqEfEW4WOp/sb2goOkPzpC
1xfAEDT/klB6xFibhIAHKqp6dTLJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU84gS
gfc2T5EyXNzlBevcQXVrITQwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4L0Y3QUIxREEwM0ZFRTExRjFBNDFGMjUwQ0NGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+4IwDQYJKoZIhvcNAQELBQAD
ggEBAKEaz9w+zoxDC//ogR1B0NdUFJIBeelsAMZOfRoih5coZJT/Rw3VjlcAgNLE
Q4uRnymm40zz89/C3YRAYlS4g0dKq90zBUmIf5bHcq4JOzYnSBio0y41YfNRfUW2
t128DxZTGf2njPpS2v4OAgkuqh2ZDXpMcuj83bXN3tUtJVQInWkqN64wl1wViqh1
g5HJQsXfrP3tQdLdBzX0vXvHpWz5ongEXhCTn1Jah3RbsBz+NzYiZ/tRCm+xAc/M
EbEZ7/sM7cG6zfVIJ0FEbFr20AX8t2FoSrDBO/YJlHiylLWF+w0wFsidvWwoBCxG
uM6e3TLU8iE+OchCQiwnsgWI6G0=
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:47 2026 by rpki-client