Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05B4434C34D011F1B843EDF5CE1D38B0.roa
File: 05B4434C34D011F1B843EDF5CE1D38B0.roa (raw, json)
Hash identifier: J/AKgYOXnQPUJorUF+B8p4ngFcfviiLP2f7/4NH1X0k=
Subject key identifier: 16:B3:A4:14:C9:90:FD:D3:8A:6E:21:E8:7D:30:AF:6C:5C:ED:F3:64
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EC7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05B4434C34D011F1B843EDF5CE1D38B0.roa
Signing time: Fri 10 Apr 2026 11:25:48 +0000
ROA not before: Fri 10 Apr 2026 11:25:43 +0000
ROA not after: Mon 10 Apr 2028 11:25:43 +0000
asID: 834
IP address blocks: 154.16.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7879 (0x1ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 10 11:25:43 2026 GMT
Not After : Apr 10 11:25:43 2028 GMT
Subject: CN=69d8de3c-82d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:2a:83:18:9e:93:f3:05:f3:9c:49:5f:e5:
85:37:65:2b:9e:76:5c:35:fb:ab:2c:cd:65:e9:3f:
b0:a2:83:2e:da:02:ed:50:63:db:22:33:0a:f1:1c:
f3:aa:21:1a:ce:3e:85:43:2f:fb:18:fa:64:c7:b8:
ed:38:63:7b:b2:d2:96:18:21:c4:c2:29:59:a8:9a:
79:17:29:34:cd:77:eb:16:5f:cb:51:f4:a4:42:32:
19:62:b5:e8:40:29:58:74:e6:27:b4:64:00:f7:03:
d6:34:67:17:4a:bc:fc:17:5d:a4:c8:e4:2b:6f:3a:
bc:b5:ae:22:61:01:d9:aa:62:0a:75:fc:60:1f:5f:
aa:b3:1f:c2:8d:3d:ac:dc:26:6c:a7:54:db:a1:90:
51:84:81:28:93:b1:e1:2e:78:be:fa:a9:fc:4a:e8:
10:89:ac:b7:97:a0:5c:ed:e8:7b:f7:ac:6e:a8:e5:
e1:ca:24:22:60:9c:10:03:5d:a2:54:bd:52:4b:d9:
ca:7a:fb:2f:11:a0:21:93:85:71:07:ec:e8:56:6e:
5c:39:0f:07:d8:ff:07:75:ee:5c:d8:84:e2:6d:82:
13:59:8a:12:7a:d5:27:da:4e:b6:16:ba:d3:d9:7d:
47:23:17:69:3b:84:3b:31:e6:b9:50:3d:aa:a4:5b:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B3:A4:14:C9:90:FD:D3:8A:6E:21:E8:7D:30:AF:6C:5C:ED:F3:64
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05B4434C34D011F1B843EDF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.43.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5d:33:17:87:a7:9f:c6:0a:fe:5c:b6:de:a5:5e:eb:f7:88:
33:07:25:79:10:cd:eb:e7:57:33:59:a4:d3:17:c4:bf:f6:7f:
90:7f:95:8f:7e:45:b7:aa:dc:88:0f:a3:ae:65:a8:ed:3a:2f:
06:e6:9a:7d:95:25:4c:8d:2d:41:6e:b9:b9:64:bd:96:99:ea:
d1:d7:e7:b8:8e:ba:40:34:11:1a:c1:3f:2b:64:ad:5e:76:b2:
c1:9f:cf:bb:a7:76:03:7e:87:24:72:59:13:75:5f:82:fd:f0:
86:89:9e:d7:20:05:8a:0e:d5:74:d9:c6:d9:1d:1c:a7:b6:fe:
cb:fc:31:c4:3d:49:e7:71:eb:f6:f5:d1:47:cb:53:96:9a:57:
a9:99:d0:54:3b:8f:0d:5b:c8:f1:c0:12:55:5e:53:ad:23:c2:
a8:19:24:ab:cb:77:4b:fc:e8:c4:bb:e4:73:03:30:c4:9d:f8:
b1:57:a2:95:aa:46:fa:c1:b8:77:54:5a:f4:c0:d0:fc:03:52:
5b:11:10:ef:5f:32:9f:1b:71:43:bc:5e:a0:d8:03:4f:b8:01:
35:6d:03:cd:57:b8:8e:37:5e:e7:a0:f2:54:80:72:14:26:eb:
37:ba:5f:9a:27:2f:4d:9a:43:6b:e6:67:bb:dd:d2:13:a6:0a:
b9:fd:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 13:34:03 2026 by rpki-client