Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/CFF7610289D511F1BB657AE8CE1D38B0.roa
File: CFF7610289D511F1BB657AE8CE1D38B0.roa (raw, json)
Hash identifier: WV9x2VI1s6Dp52p1mAl/nv0lnXkxmuZLfjrdawVPNEE=
Subject key identifier: BC:FA:0D:C3:53:04:F1:03:4D:EB:22:91:F2:84:67:FE:91:87:15:9B
Certificate issuer: /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial: 0656
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Authority info access: rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/CFF7610289D511F1BB657AE8CE1D38B0.roa
Signing time: Mon 27 Jul 2026 16:11:24 +0000
ROA not before: Mon 27 Jul 2026 16:11:20 +0000
ROA not after: Fri 30 Apr 2032 16:11:20 +0000
asID: 37121
IP address blocks: 147.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Validity
Not Before: Jul 27 16:11:20 2026 GMT
Not After : Apr 30 16:11:20 2032 GMT
Subject: CN=6a67832c-adaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:95:6f:41:9b:b3:39:17:c9:3c:9f:8f:99:
e0:41:9f:db:0f:cc:e2:bd:be:97:26:4e:23:06:6a:
56:34:1a:bf:26:9c:31:af:24:17:c4:0e:42:ac:d5:
79:c2:52:68:0f:18:7e:c3:26:e1:90:83:9e:ed:a1:
7a:4c:43:6a:ae:55:39:be:ab:cd:ba:2a:f8:7a:24:
63:d8:a3:b5:93:e7:ed:21:5b:3e:32:b9:2e:19:4b:
33:66:35:c6:70:05:6e:92:c8:eb:b8:36:8b:6a:df:
ca:90:ca:ae:ab:97:87:e2:ce:66:c8:b4:98:51:3b:
04:97:2c:56:49:b8:81:73:2f:31:bc:b2:9f:ad:e2:
ce:58:da:fe:67:f9:b0:96:42:9d:81:ba:4c:90:70:
51:64:a9:d0:c3:e5:b6:f8:79:6b:e1:67:25:37:5b:
9f:c9:e7:ec:25:81:63:e8:76:2a:48:5b:60:0f:50:
30:b1:54:e9:63:bf:b5:af:af:f2:91:a7:c6:3e:34:
f2:70:be:66:e4:b3:04:19:08:0e:78:69:da:03:4b:
7b:3d:d0:1f:bd:28:bd:0b:b1:9b:78:72:3d:8a:62:
3b:db:74:57:5e:ec:49:ee:b8:df:33:6f:7c:49:ff:
c9:41:82:da:91:be:50:29:f9:9f:f5:d7:aa:7d:93:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:0D:C3:53:04:F1:03:4D:EB:22:91:F2:84:67:FE:91:87:15:9B
X509v3 Authority Key Identifier:
keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/CFF7610289D511F1BB657AE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:3d:67:5a:9c:6b:ef:a8:86:4a:02:ca:59:ae:d5:4f:21:5e:
02:80:31:8a:41:6d:29:13:8c:ee:ad:fc:a8:c1:c6:ed:1b:f5:
1c:f0:ec:1e:04:3c:3f:dc:fd:eb:f7:36:ea:29:ea:c1:45:30:
b6:dd:7c:94:e8:f9:db:11:24:cf:48:8a:d2:50:58:43:36:c3:
58:9c:a3:1e:1e:2c:92:bf:c1:25:03:43:0a:d3:41:db:75:b2:
3b:6c:eb:43:7d:d0:c5:e0:db:33:7c:6c:aa:39:2d:15:f0:59:
e7:f8:0f:14:d3:4d:29:14:4d:82:99:26:85:97:3f:f8:f1:01:
5c:40:b1:5e:46:50:ae:39:28:3e:20:7b:58:f3:46:cc:fb:d4:
d6:84:2a:57:ca:cd:57:71:cd:c0:4e:a6:ed:d0:cd:fc:32:99:
fa:ba:75:13:e2:8a:a3:e7:e3:ed:b5:da:7e:93:83:4f:38:b0:
fc:dc:4b:e4:33:ef:d2:4d:a5:bd:77:28:f4:42:98:55:50:bd:
fc:d0:a3:34:46:e0:b1:a6:97:a8:d3:49:35:c9:b1:95:e6:be:
33:65:23:1a:14:84:be:05:59:9d:58:c9:f6:65:ea:87:fb:48:
a1:79:5d:bf:5f:c2:b5:0a:cc:76:72:48:10:25:46:57:b0:b2:
d1:01:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:30 2026 by rpki-client