Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/170279AC47E011F1BCEC8EE5CE1D38B0.roa
File: 170279AC47E011F1BCEC8EE5CE1D38B0.roa (raw, json)
Hash identifier: ntgvCGnD6WtWSloceXFasNrRJni2xVmH2z26VzNXEYg=
Subject key identifier: A6:01:60:3A:AA:9B:41:9E:E3:F2:D9:09:E2:D0:C6:C7:A8:4C:C7:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F03
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/170279AC47E011F1BCEC8EE5CE1D38B0.roa
Signing time: Mon 04 May 2026 17:38:41 +0000
ROA not before: Mon 04 May 2026 17:38:37 +0000
ROA not after: Thu 04 May 2028 17:38:37 +0000
asID: 400529
IP address blocks: 154.16.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7939 (0x1f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 4 17:38:37 2026 GMT
Not After : May 4 17:38:37 2028 GMT
Subject: CN=69f8d9a1-3483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:39:54:e9:8a:44:c1:13:67:9e:50:34:d8:
08:da:26:d2:d2:a4:8d:32:da:a1:bc:b5:c4:a3:9c:
54:42:62:a1:1a:31:87:82:7e:d3:43:42:6c:37:d0:
04:74:da:46:4f:a6:94:f4:ed:4c:62:49:2b:d8:e8:
43:6f:36:90:e8:14:78:78:2f:90:79:ba:cb:91:38:
7f:9f:75:c4:7c:7a:71:da:e9:37:79:49:4f:85:4c:
eb:47:53:44:45:df:6f:0f:8b:4e:ad:45:2e:47:68:
5a:f4:47:57:cf:0c:f1:56:c5:1b:e6:d8:6c:42:2d:
df:16:71:80:1c:2d:49:ec:5d:9c:3e:df:40:d4:50:
6f:d5:c1:8e:4d:11:61:d3:4a:ab:c7:79:53:80:5d:
0e:fe:f8:df:ff:4d:5f:49:30:47:e5:e6:0a:c6:fd:
90:8d:e3:ff:fa:e0:be:2e:ba:0b:34:ed:34:ea:aa:
61:4b:57:ed:84:1d:18:89:07:ee:c1:51:9d:7b:f6:
a9:5d:60:f9:ba:4d:84:55:c7:cf:ba:cf:d9:de:e8:
fe:c5:ae:d5:60:dd:41:50:94:fa:47:fe:49:d8:51:
be:86:a5:c1:4b:7b:48:2a:af:ae:61:e4:c3:59:84:
27:9b:b7:0c:bd:32:c4:38:f4:bb:22:37:a1:61:6f:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:60:3A:AA:9B:41:9E:E3:F2:D9:09:E2:D0:C6:C7:A8:4C:C7:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/170279AC47E011F1BCEC8EE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3c:b3:32:1c:0a:c0:a3:be:65:2e:fe:b4:9d:29:85:84:bc:
97:82:0d:3c:61:fa:78:8a:fd:dc:de:1d:bd:20:16:07:78:13:
cf:06:51:16:09:3f:19:db:f9:93:7f:8e:35:fc:a0:09:10:8c:
d7:95:15:cd:2e:f6:51:84:c6:b9:37:d8:3d:f3:20:3d:d6:99:
f2:0b:df:b8:33:d5:0f:0d:ea:fa:2c:d7:38:94:4d:78:35:3c:
f8:66:9e:ac:42:76:2b:aa:ba:45:fa:97:4f:d8:61:d8:06:5b:
c4:2e:96:a0:f3:8e:82:ca:b6:31:5d:a9:ed:40:34:64:2f:28:
c4:95:82:8a:2b:98:a8:a7:58:92:92:98:0d:50:d6:e9:c4:d8:
8c:6e:5e:26:fd:90:47:09:8f:3d:91:0c:12:17:4b:67:fe:7d:
1c:93:d5:91:ad:64:25:99:a1:b9:c1:4d:c6:d1:5b:c6:48:cc:
d1:7d:62:10:0c:6e:94:0b:fa:ed:64:df:9e:b0:ad:33:b8:c5:
ea:77:55:23:a1:15:72:09:f2:fb:58:d1:7e:df:9d:73:3b:c5:
60:0e:bc:93:8b:c4:4e:50:02:e8:2b:8d:a2:97:83:35:f8:ed:
04:81:8d:bd:56:c1:2e:c0:a9:fb:e6:47:07:38:f2:51:21:3b:
0e:e7:15:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 03:49:17 2026 by rpki-client