Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/01E9E57C8FFD11F1B3B111F2CE1D38B0.roa
File: 01E9E57C8FFD11F1B3B111F2CE1D38B0.roa (raw, json)
Hash identifier: WxbOeo7RbnMj7cBfZc7+PwnbKmEU1CJ+WQbOy4jjBgI=
Subject key identifier: 3D:05:F5:EE:99:C7:F2:D5:1E:52:15:43:82:E5:9F:2E:C3:2E:CC:A2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20B6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/01E9E57C8FFD11F1B3B111F2CE1D38B0.roa
Signing time: Tue 04 Aug 2026 12:07:05 +0000
ROA not before: Tue 04 Aug 2026 12:07:01 +0000
ROA not after: Fri 04 Aug 2028 12:07:01 +0000
asID: 14670
IP address blocks: 154.16.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8374 (0x20b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 12:07:01 2026 GMT
Not After : Aug 4 12:07:01 2028 GMT
Subject: CN=6a71d5e9-5df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:01:91:52:3a:c2:30:38:15:72:f7:c9:57:
34:b9:7f:14:b7:6e:70:42:36:91:f0:ac:95:32:45:
11:3d:3f:fb:40:df:03:90:01:ef:11:67:75:d9:b9:
7c:1b:b8:f5:46:16:78:6d:7c:94:f6:8e:55:41:76:
96:49:01:08:d1:71:84:73:7f:47:89:d8:02:75:9d:
50:9a:53:13:87:6e:d5:b8:6e:86:11:df:d2:e5:76:
0a:13:27:86:d4:b3:ad:5c:c8:64:05:6a:7f:d6:ad:
8f:6f:de:6b:d2:0f:e2:e7:fb:a5:72:d8:79:0c:e2:
57:f7:57:e2:9d:6a:ed:0c:de:7e:34:bc:74:c3:ec:
9b:f1:69:c8:26:96:2b:c0:f0:e5:44:2a:8e:18:c8:
ef:bf:64:e9:92:88:af:26:5e:26:3d:a5:80:b5:49:
1b:6a:46:3e:79:b4:2b:ec:d9:e9:ad:3a:77:62:f6:
f1:77:0b:59:b2:88:98:e5:d0:6f:02:d7:4d:6c:51:
c2:22:4d:ff:3b:26:04:1e:7e:96:61:0e:c7:6e:a6:
69:79:b9:ff:83:d1:cb:ed:65:83:9b:ea:0a:04:c5:
0e:bc:de:d6:55:14:8e:2c:3d:f4:18:c7:67:97:b4:
51:d1:1a:9a:0b:e6:4a:29:72:3b:7d:3b:d9:86:1f:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:F5:EE:99:C7:F2:D5:1E:52:15:43:82:E5:9F:2E:C3:2E:CC:A2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/01E9E57C8FFD11F1B3B111F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9b:67:3c:39:cb:fb:57:fb:27:fd:76:b5:57:c2:5b:82:1e:
dd:24:f1:55:ab:fc:10:64:37:70:da:a6:a3:30:4b:97:1b:80:
74:8e:61:db:85:ca:7d:a8:c0:b2:14:93:40:18:6e:3e:e4:59:
e2:b3:6b:c1:cd:58:a7:f3:84:1e:9a:72:f9:de:99:7e:bf:c3:
c2:1d:4e:37:c0:c7:4d:57:c8:31:90:44:2f:2d:95:60:c0:f5:
29:07:b8:9a:c6:2f:f4:5a:a1:e4:ca:03:54:5e:0c:ac:98:23:
31:b7:19:89:95:a0:71:03:c0:61:f6:0f:e9:08:af:7c:09:ee:
e3:e7:1a:ca:9b:1a:38:cf:b0:61:42:ea:3d:3a:ec:16:db:a5:
c9:2e:ab:db:88:19:ed:af:73:e5:73:ba:8d:ae:4a:98:3d:d1:
aa:47:f5:bf:bf:39:f9:7c:1c:57:29:23:cb:aa:28:fe:14:3f:
2b:f2:b4:6d:25:37:23:f4:c2:74:e9:48:f3:77:6f:49:e3:13:
65:41:73:fa:37:fc:82:ef:b3:c9:3f:a7:03:60:6f:ca:f9:82:
eb:4d:87:f0:b3:b9:ef:76:3b:0a:dd:43:80:d5:56:fd:d6:80:
d5:a8:5d:dd:56:d0:18:86:56:17:9a:55:7d:75:4a:3b:43:17:
a9:96:2b:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICILYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA4MDQxMjA3MDFaFw0yODA4MDQxMjA3MDFaMBgxFjAU
BgNVBAMTDTZhNzFkNWU5LTVkZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC47gGRUjrCMDgVcvfJVzS5fxS3bnBCNpHwrJUyRRE9P/tA3wOQAe8RZ3XZ
uXwbuPVGFnhtfJT2jlVBdpZJAQjRcYRzf0eJ2AJ1nVCaUxOHbtW4boYR39LldgoT
J4bUs61cyGQFan/WrY9v3mvSD+Ln+6Vy2HkM4lf3V+Kdau0M3n40vHTD7Jvxacgm
livA8OVEKo4YyO+/ZOmSiK8mXiY9pYC1SRtqRj55tCvs2emtOndi9vF3C1myiJjl
0G8C101sUcIiTf87JgQefpZhDsdupml5uf+D0cvtZYOb6goExQ683tZVFI4sPfQY
x2eXtFHRGpoL5kopcjt9O9mGHy23AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPQX1
7pnH8tUeUhVDguWfLsMuzKIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzAxRTlFNTdDOEZGRDExRjFCM0IxMTFGMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHQwDQYJKoZIhvcNAQEL
BQADggEBADybZzw5y/tX+yf9drVXwluCHt0k8VWr/BBkN3DapqMwS5cbgHSOYduF
yn2owLIUk0AYbj7kWeKza8HNWKfzhB6acvnemX6/w8IdTjfAx01XyDGQRC8tlWDA
9SkHuJrGL/RaoeTKA1ReDKyYIzG3GYmVoHEDwGH2D+kIr3wJ7uPnGsqbGjjPsGFC
6j067Bbbpckuq9uIGe2vc+Vzuo2uSpg90apH9b+/Ofl8HFcpI8uqKP4UPyvytG0l
NyP0wnTpSPN3b0njE2VBc/o3/ILvs8k/pwNgb8r5gutNh/Czue92OwrdQ4DVVv3W
gNWoXd1W0BiGVheaVX11SjtDF6mWKwE=
-----END CERTIFICATE-----
Generated at Tue Aug 4 20:25:05 2026 by rpki-client