Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1ACB742E901C11F18EA195ABCE1D38B0.roa
File: 1ACB742E901C11F18EA195ABCE1D38B0.roa (raw, json)
Hash identifier: fGpmx4utEWgKs/R9QKlSGOTZUXlFEBy/YOA64+5aaBA=
Subject key identifier: CB:CE:67:31:51:C0:CC:C2:7F:C6:AD:1A:54:65:F7:5F:26:06:E1:F3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20B9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1ACB742E901C11F18EA195ABCE1D38B0.roa
Signing time: Tue 04 Aug 2026 15:49:41 +0000
ROA not before: Tue 04 Aug 2026 15:49:37 +0000
ROA not after: Fri 04 Aug 2028 15:49:37 +0000
asID: 134494
IP address blocks: 154.127.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8377 (0x20b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 15:49:37 2026 GMT
Not After : Aug 4 15:49:37 2028 GMT
Subject: CN=6a720a15-f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:6a:6e:4c:e9:24:1f:aa:a2:36:39:57:92:
79:e9:ef:5f:fc:2d:b4:66:37:16:b8:53:07:b5:82:
ac:b5:dd:20:ee:ee:a1:bc:a8:bf:60:c7:0a:e0:01:
e8:d9:8e:ab:d0:31:f3:d8:af:38:af:2a:37:9f:ca:
79:81:41:4c:a7:ad:5f:03:2b:ca:7c:25:86:aa:e6:
62:c2:87:75:fe:08:7a:a5:bb:a0:56:b3:17:6d:05:
e5:4a:53:1b:c9:3d:70:cc:de:ae:bb:18:b9:4a:d8:
17:dc:26:0e:e0:a8:5a:24:13:a2:61:b0:74:bf:05:
02:83:94:2e:a2:65:85:08:d5:b4:81:6b:ee:c7:be:
7f:79:b5:78:54:ad:0b:23:7c:28:ad:22:69:61:04:
d3:e1:70:e9:17:1c:fd:a7:e7:8a:16:51:16:6c:62:
3a:8c:e1:ce:d3:86:3a:79:fa:d3:c9:21:9c:da:bb:
1a:34:9b:13:96:63:c6:75:73:f9:0d:2f:8f:09:0d:
1a:18:64:97:7a:18:c9:db:00:ed:ee:36:6a:33:c5:
af:f0:67:2a:0a:81:05:bb:c7:f8:a4:a1:53:df:dc:
f5:77:d1:ac:fe:dd:7e:f3:d8:c8:85:d0:f8:7a:72:
4a:49:78:82:b2:19:28:1b:90:aa:b1:39:bc:b2:f3:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:67:31:51:C0:CC:C2:7F:C6:AD:1A:54:65:F7:5F:26:06:E1:F3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1ACB742E901C11F18EA195ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.51.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4a:5a:d4:93:06:ad:3b:63:8e:73:c0:e2:9e:9b:f0:b5:28:
d0:f5:5b:df:ef:ab:69:86:7b:bf:f2:38:56:5b:37:9a:80:85:
20:79:c3:89:33:17:16:02:ca:98:1b:13:eb:b6:63:29:b3:32:
1a:78:6b:36:4e:e2:ed:7c:a2:f9:16:10:db:e3:65:8c:a1:33:
d8:9a:87:6e:3e:b6:cf:9f:17:16:a1:ec:e9:9a:e9:f2:fc:0e:
85:d1:ea:31:50:02:85:4b:e9:d7:47:b4:93:83:74:e4:f3:cc:
8e:0b:df:fc:c4:91:a0:26:38:f2:96:a9:2a:6f:71:91:cb:23:
56:47:d3:8c:a6:b3:58:4e:19:96:57:72:54:2c:b0:eb:e6:c0:
be:61:7d:b4:f1:ad:8e:36:b2:b9:79:99:65:51:e5:7b:a9:67:
1a:e6:31:02:2c:31:48:df:ad:e5:cb:33:5e:bb:b8:64:ac:ef:
14:3a:31:ac:5d:d9:73:de:7f:46:e1:2b:40:c4:a7:37:ef:66:
0c:7c:00:73:23:15:47:4a:34:87:c0:43:06:a5:60:59:b3:19:
c3:74:ba:df:b3:57:3b:30:4e:d7:d2:3e:84:f9:e8:5b:e4:78:
23:db:2a:d2:b6:b4:ac:8c:df:9f:d3:e3:3c:28:f6:9c:e2:93:
34:0f:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:26:30 2026 by rpki-client