Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B319D2463E211F18CD9FECFCE1D38B0.roa
File: 0B319D2463E211F18CD9FECFCE1D38B0.roa (raw, json)
Hash identifier: doDS4D685eapETpWurWr7wne5T/HqcrLv6S7uW0Bsyc=
Subject key identifier: 9E:08:A9:F6:E2:D2:52:62:C1:55:CF:C1:FB:98:B9:FA:E8:F4:F7:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FBE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B319D2463E211F18CD9FECFCE1D38B0.roa
Signing time: Tue 09 Jun 2026 09:03:13 +0000
ROA not before: Tue 09 Jun 2026 09:03:08 +0000
ROA not after: Fri 09 Jun 2028 09:03:08 +0000
asID: 834
IP address blocks: 154.16.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Jun 2026 08:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8126 (0x1fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 9 09:03:08 2026 GMT
Not After : Jun 9 09:03:08 2028 GMT
Subject: CN=6a27d6d1-f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:2a:69:2d:ad:2f:c8:40:f4:13:a9:ff:8e:
28:c5:96:a4:93:62:96:0e:18:b1:37:99:cb:23:de:
28:e6:c0:20:29:b1:16:e3:25:2a:2b:a7:05:e3:da:
5f:3e:dc:b3:5e:52:f1:93:cc:53:2b:b1:76:27:75:
d0:b4:cc:1d:df:6a:7a:d3:de:30:a9:3a:be:c6:a3:
73:12:c3:db:f7:6f:e1:1d:c3:78:45:a9:3c:44:d5:
c9:13:11:19:39:8f:b8:42:7e:0e:e9:80:3f:da:bf:
b6:8d:07:d8:a7:5f:63:c1:a7:07:c3:1e:94:8b:fd:
91:ba:1e:73:f5:75:73:1b:43:aa:1b:a0:d9:4f:44:
aa:5e:1e:90:61:e3:d5:69:ed:11:93:1d:ae:e5:34:
a5:25:82:50:f7:35:ac:64:ad:1e:ad:dd:41:59:58:
4e:38:56:5f:57:96:86:cd:1e:e0:50:ee:f2:db:04:
19:71:fa:fc:9a:9d:f8:fd:46:07:65:46:d0:a7:ce:
52:bc:9c:d6:57:98:a2:23:47:ed:a6:37:5b:ab:9f:
3b:cd:f9:83:f5:af:bf:1e:0b:9c:2f:66:7a:2d:06:
8a:59:d1:06:92:b9:bb:5e:45:0f:17:5d:dc:b6:60:
b7:22:5c:7f:fa:00:9a:2b:18:79:06:b8:7c:74:e2:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:A9:F6:E2:D2:52:62:C1:55:CF:C1:FB:98:B9:FA:E8:F4:F7:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B319D2463E211F18CD9FECFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a2:60:b0:b7:dc:a2:86:2e:71:36:71:e6:0a:cb:0b:ca:01:
f7:16:b8:20:23:1a:66:1e:ea:52:e3:7f:05:39:0b:6f:46:79:
4e:32:42:d5:35:64:bc:e1:7f:06:54:26:31:9c:ce:a2:04:28:
ec:fd:d4:b2:42:4f:61:18:0d:cd:d4:3c:f3:46:3f:19:bb:b0:
7e:75:63:13:49:a3:12:f9:b5:bf:f2:ea:85:37:1d:6e:cd:16:
93:55:82:e8:ee:3c:e9:bb:fe:fd:2c:cd:e5:04:f3:a5:a6:6d:
cf:cd:dd:ba:14:c6:5f:c3:2f:2d:8b:91:11:96:5e:cd:1a:ee:
37:41:31:bd:84:2f:41:48:27:68:36:76:b2:6e:b2:f2:34:c5:
8f:6b:3f:40:81:d1:0e:47:fc:e4:7b:d2:d4:9b:bb:26:e2:1a:
f5:02:65:ab:a6:a7:93:53:6b:5d:2b:00:92:53:04:b3:3d:42:
f2:e7:1f:28:eb:a4:a6:82:80:70:d2:52:37:22:37:0c:11:f8:
ee:5e:f0:57:ce:36:5c:8c:83:2f:ce:1f:3e:94:5d:2a:d2:d1:
0a:22:5a:aa:03:ab:4e:61:73:c4:10:e1:ed:50:6f:7a:98:0f:
c2:37:f9:cc:ef:ad:88:ae:79:ca:78:07:b5:82:c4:6e:3a:6d:
7f:9c:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 12:57:07 2026 by rpki-client