Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/018FB81E709411F1959214B5CE1D38B0.roa
File: 018FB81E709411F1959214B5CE1D38B0.roa (raw, json)
Hash identifier: efUExD7VeUsJKiX0MWY+ttG1Hc2sImKZL9/snR+hUCE=
Subject key identifier: 4A:57:C2:3F:08:37:39:3C:ED:CF:1E:E2:41:88:9A:69:1C:87:37:5B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FFF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/018FB81E709411F1959214B5CE1D38B0.roa
Signing time: Thu 25 Jun 2026 12:47:21 +0000
ROA not before: Thu 25 Jun 2026 12:47:16 +0000
ROA not after: Sun 25 Jun 2028 12:47:16 +0000
asID: 141806
IP address blocks: 154.16.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Jun 2026 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8191 (0x1fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 25 12:47:16 2026 GMT
Not After : Jun 25 12:47:16 2028 GMT
Subject: CN=6a3d2359-7c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:9d:47:d3:89:97:8d:0f:ea:e8:e0:26:e2:
74:87:05:c3:6e:8b:32:c0:4c:a0:2a:7c:b0:7b:a7:
35:7c:4c:a3:6a:80:3f:67:0c:5e:df:3a:35:3e:f3:
d5:69:b9:74:1a:79:1d:f3:11:8a:5d:70:47:62:0b:
cd:70:2d:cc:bf:32:3e:2e:0a:80:7f:f3:a6:bf:b4:
17:5d:89:9b:35:8c:56:d7:5a:ae:5c:d9:dc:e5:cc:
7e:a1:5d:ca:74:83:6f:70:75:d3:9f:ee:33:4a:21:
20:5e:95:46:b4:71:e9:5d:e7:7f:44:e1:12:de:a1:
15:87:7f:90:ce:cf:e7:18:40:23:30:7c:c0:e8:30:
55:60:2a:f0:0c:4d:09:d0:b8:39:26:14:ee:ee:fa:
38:99:d1:1b:4a:dd:19:f2:d6:82:ce:ca:77:62:d3:
8d:8a:23:f2:e2:bf:26:a8:f2:d6:73:de:ff:25:a0:
d2:9e:9d:46:b9:c0:84:33:2a:bf:b6:84:99:71:fd:
4f:61:26:e3:88:2f:1b:d1:93:38:b3:96:6a:1f:ec:
f2:69:86:27:f2:3d:57:63:9a:2e:8a:3a:bf:2c:e2:
f4:a0:d1:f1:b3:2d:aa:93:2a:aa:e0:01:14:98:83:
36:3c:1a:69:48:a5:5b:1d:20:7d:25:9e:dd:69:ca:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:C2:3F:08:37:39:3C:ED:CF:1E:E2:41:88:9A:69:1C:87:37:5B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/018FB81E709411F1959214B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fa:a0:d4:1f:79:de:ec:2c:3d:5a:d0:28:35:eb:de:5d:95:
80:2b:7d:ee:b1:fa:29:27:91:2d:a6:df:33:73:38:f4:2d:d4:
e7:18:8a:9d:9f:30:55:d7:dd:c3:ce:44:0c:c0:f2:98:92:ab:
8c:20:36:90:e1:f9:52:95:ed:9d:16:1a:2e:c4:e8:58:65:1c:
ad:30:1f:3c:3f:00:3f:48:12:63:6c:20:56:16:13:a3:b3:82:
8a:62:17:35:86:69:44:5d:58:1c:a7:6b:cf:99:77:fa:4c:81:
6a:20:5d:f4:ea:f7:a7:12:b7:d3:7c:d5:17:f9:d4:2f:54:74:
01:b6:5b:cb:43:36:dd:e4:13:97:5c:f1:ee:34:79:43:07:1b:
d1:eb:a0:1b:25:c5:68:a6:70:e2:d5:8b:4d:96:58:86:df:b5:
65:49:27:10:b0:35:3e:64:0e:cd:f6:d0:a7:54:be:87:91:0b:
bb:82:f7:af:a9:88:57:b1:47:e6:eb:23:51:61:93:04:12:a2:
7e:bc:dc:fc:ab:01:57:06:84:8d:99:f4:09:e1:28:56:cb:5c:
ec:10:bb:cc:44:44:00:37:64:19:9d:16:79:60:c6:f1:c2:2f:
84:64:d9:1a:11:06:22:a3:32:18:67:a4:0e:25:3e:54:77:b3:
ad:4d:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 21:25:28 2026 by rpki-client