Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/FA488F2084E511F1ACE5B8D1CE1D38B0.roa
File: FA488F2084E511F1ACE5B8D1CE1D38B0.roa (raw, json)
Hash identifier: Pd+84KPhPBsNkpBN1hVe9FHlx1CumYc3oDhGGRlaBgg=
Subject key identifier: D0:D6:7C:A4:23:6B:75:E5:CC:92:C5:EF:65:54:DE:71:95:4B:85:C8
Certificate issuer: /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial: 069B
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/FA488F2084E511F1ACE5B8D1CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:24:31 +0000
ROA not before: Tue 21 Jul 2026 09:24:27 +0000
ROA not after: Thu 31 Jul 2036 09:24:27 +0000
asID: 327979
IP address blocks: 156.155.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Validity
Not Before: Jul 21 09:24:27 2026 GMT
Not After : Jul 31 09:24:27 2036 GMT
Subject: CN=6a5f3acf-d416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:16:da:ba:0d:e6:25:c6:4a:95:d7:ed:b1:
3a:eb:ef:3c:b1:74:0b:45:6f:6f:ac:0c:ca:07:bd:
08:24:bc:4b:25:5c:f3:a9:17:1a:31:97:3b:2c:72:
e0:05:b5:ba:9d:03:12:c3:1e:5b:55:2f:21:19:ae:
a4:51:6a:f2:7f:90:52:4b:d3:6f:01:4c:82:e8:ea:
1d:b3:db:2c:2e:8b:c2:92:1c:95:61:0b:6f:4b:16:
bf:94:a6:47:c3:0a:ef:03:89:34:06:12:bc:11:d7:
40:78:0f:a7:f8:80:b1:8e:b8:07:e9:a4:4a:42:ff:
a0:20:da:7b:d6:35:71:6c:7d:f8:88:f5:25:68:54:
81:ec:15:6c:65:50:c1:d3:1b:1c:4f:38:db:7d:f2:
df:9a:60:7c:fb:5d:fd:09:b8:ce:e6:94:9e:88:ac:
54:dc:0e:39:ea:f9:a2:7a:97:3b:e6:bf:d4:42:13:
25:58:1a:9d:47:cf:72:39:6f:28:06:0e:ae:e3:86:
62:50:26:25:64:f3:cd:c8:78:4d:da:ce:dd:43:f4:
00:a1:51:92:e5:e7:ff:be:59:30:28:b1:49:10:a6:
c7:06:90:1a:28:b9:fb:b8:09:d1:73:e9:8d:fe:9f:
b7:4a:ca:e8:6f:6e:1f:73:03:b6:e6:26:cb:7e:44:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:7C:A4:23:6B:75:E5:CC:92:C5:EF:65:54:DE:71:95:4B:85:C8
X509v3 Authority Key Identifier:
keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/FA488F2084E511F1ACE5B8D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.155.252.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d7:83:b1:86:64:fd:c3:84:fc:48:d1:a7:70:22:c7:97:cc:
de:64:a0:a1:cd:35:dc:31:ea:e9:83:07:5e:98:6f:33:97:22:
e5:55:22:0b:64:5c:e5:28:53:08:b2:e7:b7:5f:47:4e:ec:ab:
0f:eb:21:c7:3e:aa:ba:d5:9b:91:26:33:1e:1e:34:fb:08:f5:
26:b6:bc:af:0c:5a:f5:69:fd:ad:14:0b:ec:8b:1c:da:b0:29:
e2:fe:bb:ef:8c:6c:e7:11:ee:54:d0:49:2b:4d:96:f9:19:ee:
af:d7:4c:86:13:f7:e6:13:33:a1:a7:c8:c0:4c:ef:e2:38:a4:
1c:79:78:0e:ec:c9:35:79:16:b5:3c:c5:7f:c9:e9:4e:a4:3c:
ef:ff:e1:c7:02:0a:e9:95:f2:3e:d0:24:87:43:8d:f1:07:0b:
10:ad:c9:38:1e:df:b0:53:6f:a6:2a:3c:cc:f8:c9:d3:2a:69:
82:f1:5a:2c:7f:37:51:43:46:ea:38:14:13:0f:41:24:86:94:
14:bb:61:04:d3:2f:28:c1:26:3e:68:fe:d5:8c:ab:b2:ca:cd:
25:74:d7:73:b9:7e:ae:0d:41:ca:94:37:49:14:97:e8:0e:46:
da:fb:02:5c:93:9d:48:15:1a:d6:35:8c:2e:5a:4f:4d:c3:9a:
82:e7:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:23 2026 by rpki-client