Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1EE55A6E84CA11F18A0792ABCE1D38B0.roa
File: 1EE55A6E84CA11F18A0792ABCE1D38B0.roa (raw, json)
Hash identifier: 5pfmKOtaeMMYTQYb/cv/Ms1Zjs70KbhEZwOIaLdOqGc=
Subject key identifier: CF:E6:C5:DD:7F:8A:25:63:4A:4B:D8:E6:63:21:CC:8F:89:F1:5E:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2064
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1EE55A6E84CA11F18A0792ABCE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:05:07 +0000
ROA not before: Tue 21 Jul 2026 06:05:01 +0000
ROA not after: Fri 21 Jul 2028 06:05:01 +0000
asID: 14670
IP address blocks: 154.16.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 09:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8292 (0x2064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 06:05:01 2026 GMT
Not After : Jul 21 06:05:01 2028 GMT
Subject: CN=6a5f0c12-377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:8f:ab:8e:c6:84:6d:e4:58:9a:7a:4c:6e:
74:f0:f8:b2:12:64:8e:2b:48:d0:76:fe:7e:de:d1:
b0:64:0d:30:d2:2f:13:55:91:3b:92:8d:0a:74:6c:
5d:34:8b:97:dd:66:86:4b:92:0d:75:2d:d7:8b:ae:
74:b6:aa:d5:f4:06:89:74:c0:f3:c5:4a:85:fc:48:
f3:a5:ac:cb:72:b0:bc:e5:f5:91:58:f4:79:a3:25:
7b:d3:cd:07:e8:ee:df:f0:7b:9b:14:8b:90:ae:85:
da:98:01:9f:a0:43:e4:1a:33:cf:28:1b:44:05:61:
6f:c3:36:61:86:bc:58:44:6f:e4:59:1f:19:84:14:
51:de:22:17:4b:03:06:d3:16:2f:b5:71:d6:57:f4:
92:e8:eb:ac:c5:f7:fb:bf:32:1a:8f:7b:75:46:e8:
d6:0b:cd:4b:6b:b5:a7:df:e3:d1:bd:2f:8d:1f:b1:
7e:ee:85:66:53:53:8c:8a:ff:4d:84:73:dd:89:cd:
3a:bf:b1:bb:ee:6f:05:5c:95:f0:09:56:5a:ad:5e:
9f:f9:2e:c0:85:b8:f2:a0:f2:d2:29:6a:02:77:10:
f8:eb:40:78:bc:f5:d7:1f:12:b4:c3:6e:d2:1f:88:
e7:8c:75:c6:7f:e6:af:94:19:3a:d1:79:70:3c:c9:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:C5:DD:7F:8A:25:63:4A:4B:D8:E6:63:21:CC:8F:89:F1:5E:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1EE55A6E84CA11F18A0792ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:4a:1c:50:38:48:84:8b:9d:39:05:92:e3:e2:bb:19:1c:df:
77:f4:7f:64:48:28:48:bf:8e:d4:7f:e3:af:e1:f2:5a:1c:a0:
b7:e7:f3:f5:81:a7:08:84:28:1e:b8:17:62:79:25:e8:f2:81:
13:4d:24:10:9c:a5:b9:49:5e:97:97:fd:4f:aa:8c:bf:e7:ca:
04:54:4a:f5:56:53:42:6b:8e:26:8b:08:35:f8:46:70:1f:79:
56:f7:76:98:0d:dc:54:83:1c:2d:72:99:ac:21:c2:1f:6f:18:
25:5b:d7:5a:53:24:9d:d5:c4:6f:ab:12:e4:d5:38:11:27:63:
c6:03:46:f3:55:7c:1c:7e:e4:f7:b8:40:fa:02:14:cc:64:0e:
97:b7:ed:42:36:9a:46:05:d3:e4:60:b7:18:2c:f6:4d:db:b3:
68:7f:d3:cd:bd:dd:17:ff:a2:a0:67:4e:c7:14:2f:7a:68:f5:
c2:92:01:03:a2:ab:f3:f2:a8:a4:2c:76:9c:e7:f8:90:ea:98:
bf:d1:68:95:46:00:64:ce:ad:df:e1:91:74:85:fd:03:7c:42:
1b:f9:00:7e:a5:a8:35:d0:0a:50:db:c2:42:c5:99:fc:a3:c1:
37:51:8f:f3:0b:c7:90:f3:eb:31:23:06:1f:b1:9e:80:82:32:
48:23:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:07 2026 by rpki-client