Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/056568B49D2411F1B3466DB8CE1D38B0.roa
File: 056568B49D2411F1B3466DB8CE1D38B0.roa (raw, json)
Hash identifier: WYcTnzLO+zqODLtKwFZ+SMsDKUl3ziDuFBzI1pryHqE=
Subject key identifier: 77:9A:20:FD:BE:6A:B9:31:87:1C:A0:2B:70:AC:4A:50:CA:77:EC:DE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 212A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/056568B49D2411F1B3466DB8CE1D38B0.roa
Signing time: Fri 21 Aug 2026 05:49:06 +0000
ROA not before: Fri 21 Aug 2026 05:49:01 +0000
ROA not after: Mon 21 Aug 2028 05:49:01 +0000
asID: 219068
IP address blocks: 154.16.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Aug 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8490 (0x212a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 21 05:49:01 2026 GMT
Not After : Aug 21 05:49:01 2028 GMT
Subject: CN=6a87e6d2-5deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:28:e9:cb:46:7c:68:fb:73:d1:df:85:47:
77:ee:5a:55:2f:55:cd:e4:b0:56:35:2a:b9:99:8a:
6f:bf:f6:20:8b:65:3a:18:ac:19:e8:ce:68:78:55:
3f:1b:e5:40:42:d2:c4:d2:e0:e4:90:a9:10:07:b8:
0f:7a:fa:15:75:a7:02:ac:ad:20:78:cf:f5:f0:61:
dd:24:75:7c:94:65:06:c5:a1:19:8b:1d:67:4f:35:
6e:7d:95:e1:3c:fd:26:67:20:0f:40:18:01:3c:34:
98:ce:49:86:9f:15:b5:39:e6:d2:2a:31:5b:2f:41:
a2:d8:b0:1b:1e:34:c5:9f:25:bd:71:45:55:87:f2:
50:12:88:2b:71:08:7e:1d:b6:b7:6f:61:48:b3:da:
bf:70:a8:56:ea:c3:ba:62:28:ce:2b:47:d1:f5:ee:
19:13:c4:6a:1a:87:47:7d:84:60:cf:fd:e1:11:46:
1b:63:df:a4:c9:ea:96:96:7c:af:40:ca:0e:7b:cc:
50:5d:00:ac:1e:fc:ca:d9:14:da:6e:75:1f:68:5f:
98:d0:25:21:67:d4:83:b0:78:42:1e:ae:e9:7f:ff:
96:3f:2f:d5:4b:b3:61:13:7e:8f:69:37:c4:0a:48:
8f:c4:55:81:b1:77:ec:1c:47:a5:06:9b:8e:48:1b:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:20:FD:BE:6A:B9:31:87:1C:A0:2B:70:AC:4A:50:CA:77:EC:DE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/056568B49D2411F1B3466DB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.72.0/24
Signature Algorithm: sha256WithRSAEncryption
06:94:16:2d:84:43:1d:d0:89:01:aa:f5:f3:27:99:91:c4:ff:
a9:50:eb:5b:4d:9e:e6:8d:f8:25:c9:08:dc:f2:9a:90:5d:ae:
74:5b:92:07:dd:fd:44:57:31:51:25:21:8a:03:01:6a:5d:51:
80:2f:f2:d4:ad:9b:10:a5:8f:8f:3a:da:87:0a:b5:a6:74:c2:
9e:63:56:74:36:22:1f:70:35:8a:4a:cd:ef:59:c0:82:d7:6a:
1d:0b:ff:7b:79:69:a6:14:05:85:6c:b8:3f:71:13:51:ff:d1:
c7:22:44:bb:d2:8d:7b:91:9c:38:42:a0:4e:3e:17:d8:cb:45:
1b:79:49:f0:f9:de:12:65:3b:e1:e1:f6:0a:f5:b1:b1:5c:b0:
29:45:83:07:3a:f0:dc:e5:47:4e:4f:4c:8b:01:7a:cc:2b:57:
f7:b4:96:b9:78:db:16:6f:cb:77:fd:1e:48:18:5b:71:ce:62:
1c:05:cb:8c:d5:83:65:b2:be:27:b3:60:c1:d5:c9:e0:cb:0c:
53:4e:e9:32:64:50:1f:9f:a7:73:bb:3f:e5:f5:36:25:8d:90:
08:a9:a1:9b:c3:c2:10:eb:ae:d8:d8:de:f7:81:91:9c:b1:8f:
95:01:b8:9a:90:2c:c9:53:35:ce:9a:b7:a9:9b:bf:ea:ed:9e:
c1:95:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 09:00:06 2026 by rpki-client