Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1A167BCE4F6611F188AA77B2CE1D38B0.roa
File: 1A167BCE4F6611F188AA77B2CE1D38B0.roa (raw, json)
Hash identifier: l8r+pEnHrSThxbICub/UfkmDWcZB5mZcMvfcgOn8Yp4=
Subject key identifier: F5:BE:B9:50:7F:C5:33:28:46:32:4D:D0:BD:9B:96:59:0D:4E:C7:E3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F38
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1A167BCE4F6611F188AA77B2CE1D38B0.roa
Signing time: Thu 14 May 2026 07:25:37 +0000
ROA not before: Thu 14 May 2026 07:25:31 +0000
ROA not after: Sun 14 May 2028 07:25:31 +0000
asID: 396356
IP address blocks: 154.16.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 16 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7992 (0x1f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 14 07:25:31 2026 GMT
Not After : May 14 07:25:31 2028 GMT
Subject: CN=6a0578f1-051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:d3:a3:c7:4e:0d:16:dc:5c:84:35:56:b8:
70:d8:2c:95:85:ad:1a:a8:4b:d7:5f:06:b0:c5:a7:
24:6b:a6:c9:92:5f:6d:2d:d9:b0:ef:d1:c1:19:7d:
ad:d6:16:e4:78:66:37:b3:85:d9:be:ac:e2:22:9d:
f2:48:c0:b9:e0:ba:f5:b6:24:72:0f:ca:7c:c6:51:
12:6e:49:c2:29:4c:82:c8:e7:ea:24:c9:c5:cb:87:
fc:9d:4b:1a:2a:c6:d9:91:b6:48:d7:ab:21:16:a3:
69:dd:d3:f7:ad:d5:9c:e9:17:d0:63:13:fd:8a:af:
9f:c4:8f:c9:12:6d:77:02:aa:a0:5b:03:50:66:0c:
e0:14:1d:9a:84:ad:73:32:53:c6:0c:0d:a2:aa:74:
cc:dd:54:f0:2e:83:00:9f:c3:ab:f8:13:d9:84:31:
4e:99:81:d8:bc:ed:90:f2:93:1f:2f:37:c6:d9:5b:
1a:76:40:f2:01:0b:cb:82:6b:61:0e:80:3a:4f:b7:
0e:0c:eb:a6:08:40:e8:1b:65:08:09:33:88:5c:b3:
ef:5b:c1:6c:b1:93:ec:33:39:d2:7a:cd:c4:51:53:
4d:b8:c2:15:34:37:16:17:6a:89:6a:75:f7:1a:be:
01:12:15:1b:0b:88:7f:50:8a:a7:4f:72:be:96:ea:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:B9:50:7F:C5:33:28:46:32:4D:D0:BD:9B:96:59:0D:4E:C7:E3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1A167BCE4F6611F188AA77B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.227.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b8:e7:f8:f5:ee:01:b8:56:6c:17:96:1e:4f:4a:32:50:3a:
c5:58:30:92:ed:a9:15:6d:b6:1d:7c:55:ee:29:bc:17:fd:fd:
f2:b6:76:d9:e4:a7:0e:09:6e:86:d7:d8:01:99:1f:4c:3d:92:
f3:e5:a4:dd:85:f1:1f:4b:6d:05:8f:0e:76:b7:92:b0:04:70:
ba:e2:7f:4d:26:d1:82:7b:6c:b6:8d:97:b2:ee:1f:8d:6c:3e:
b9:b2:d7:b0:a3:d7:92:63:c1:d7:71:6e:e1:fd:94:ac:a0:62:
be:c9:2a:c1:76:3a:98:9f:61:25:db:d9:f6:f0:4d:02:25:ab:
06:e0:d2:13:13:b4:08:26:22:b3:db:25:e4:f8:e1:51:37:1a:
ca:21:0e:c4:2c:1d:90:60:7b:cd:fb:aa:9a:a6:0b:d1:3a:96:
2b:31:da:01:a2:a6:9d:a9:a9:0e:15:73:6e:48:d0:8b:6b:40:
f4:6d:66:12:ab:e1:dd:b5:cb:ad:6b:7d:f3:99:6c:e3:11:b4:
ee:50:c3:a8:e7:db:30:f1:a2:aa:d8:65:04:ad:2e:c5:b6:67:
a5:78:f7:21:5a:97:0a:39:43:62:60:8c:0e:e6:eb:bc:74:2d:
98:4c:6c:2c:be:ff:da:19:30:01:bd:81:28:66:a6:3a:4d:46:
3b:c1:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 18:37:17 2026 by rpki-client