Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/191458E69BAA11F19C9021C0CE1D38B0.roa
File: 191458E69BAA11F19C9021C0CE1D38B0.roa (raw, json)
Hash identifier: wzXTwIsWmgvpoCDZeI9asgzEKkFM3h7lUBzpBVFVTv8=
Subject key identifier: 16:39:46:98:76:49:C3:48:B2:50:04:69:C1:F0:32:E9:C4:88:EE:EF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2110
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/191458E69BAA11F19C9021C0CE1D38B0.roa
Signing time: Wed 19 Aug 2026 08:43:50 +0000
ROA not before: Wed 19 Aug 2026 08:43:46 +0000
ROA not after: Sat 19 Aug 2028 08:43:46 +0000
asID: 5065
IP address blocks: 154.16.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 08:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8464 (0x2110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 19 08:43:46 2026 GMT
Not After : Aug 19 08:43:46 2028 GMT
Subject: CN=6a856cc5-dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:25:37:26:56:c6:1b:fb:fc:af:ca:3d:73:
3a:76:4e:06:39:7a:35:e4:76:02:28:28:ac:b6:76:
0b:08:0f:75:d7:6e:ae:49:e8:cb:b5:af:e8:19:b9:
88:d8:76:44:ef:82:e2:66:6c:5b:d7:0b:22:07:85:
91:a1:4a:31:94:29:dd:fa:26:58:ef:5c:46:7d:1b:
bf:7a:51:5e:20:7b:f1:2b:91:5e:2d:4e:0a:37:99:
ed:5d:b3:ec:27:b2:60:77:97:e0:a9:35:36:6b:f2:
be:81:95:e1:0c:41:21:89:79:49:d2:d2:5e:ee:d7:
1a:91:75:ce:f8:5e:fa:52:c3:0d:6e:c5:75:0c:16:
e8:9f:2d:aa:36:8e:c0:42:9e:2e:a6:0b:dd:92:b5:
6c:76:db:35:73:90:3d:34:d0:c2:62:89:55:f4:2b:
df:fc:01:6b:1b:56:9d:a4:29:6a:83:0e:67:f3:b3:
3c:bd:c3:e1:7f:a2:e5:0c:f6:7a:15:c1:03:7d:fc:
a0:d4:7c:32:1e:e5:ff:15:36:fa:50:7b:8b:df:8d:
3a:ae:49:69:10:48:4e:ba:05:ac:f6:9f:99:14:40:
1c:eb:6f:55:8d:29:c4:fe:e7:6a:fe:0f:bc:a2:7c:
8c:87:c8:87:17:18:a7:72:27:77:55:64:d3:f1:ab:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:39:46:98:76:49:C3:48:B2:50:04:69:C1:F0:32:E9:C4:88:EE:EF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/191458E69BAA11F19C9021C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3f:d4:9c:71:e5:5e:8b:df:12:ce:c5:cd:2e:6e:f9:47:de:
a8:42:23:98:e4:78:71:fb:17:c0:22:a7:15:8b:33:15:3e:97:
38:19:1a:14:1d:11:a8:eb:51:9d:8f:7a:8c:5c:6b:e6:60:0b:
64:25:06:be:36:be:fd:4a:ad:08:0b:80:67:b6:2a:d1:86:0d:
dd:76:a8:85:90:e6:5e:40:e0:87:ea:34:81:1f:92:eb:8f:ea:
05:c3:5f:85:b3:3d:57:b0:33:65:a4:16:1d:64:13:68:18:88:
73:2e:a3:9c:32:02:2a:01:a0:b0:be:74:1e:26:98:a4:3a:4e:
55:d2:4c:42:fd:db:13:b3:e0:3a:de:72:b7:a4:f2:4e:5c:f0:
0f:39:09:6b:28:6e:c7:2a:cd:fd:ee:e4:94:73:ac:b1:4f:66:
90:8b:56:97:b7:f9:a3:05:79:11:f5:e3:d7:f7:0b:5e:11:de:
a8:be:db:68:77:b6:d3:42:e4:a2:ca:94:7c:95:42:fd:e6:7d:
89:1b:65:b9:ef:e8:af:6d:fd:b5:a4:d7:a5:5a:18:d8:45:52:
78:b1:e6:5e:98:41:d8:5f:49:59:a4:5e:09:89:b7:12:c1:95:
40:ad:75:49:e5:44:ba:3d:fb:a3:bb:60:e7:6f:60:1c:fd:38:
78:79:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:08 2026 by rpki-client