Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/20B6D10C60E811F18369CFB0CE1D38B0.roa
File: 20B6D10C60E811F18369CFB0CE1D38B0.roa (raw, json)
Hash identifier: SIVE31bCabB2dSREzNIadn8+CXzfcd7h7WtriHXxwWI=
Subject key identifier: 63:2F:C7:0F:4D:20:A7:DE:FF:01:59:F7:A9:8A:C2:F7:0B:0F:E0:75
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FA6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/20B6D10C60E811F18369CFB0CE1D38B0.roa
Signing time: Fri 05 Jun 2026 14:09:13 +0000
ROA not before: Fri 05 Jun 2026 14:09:08 +0000
ROA not after: Sat 10 Jun 2028 14:09:08 +0000
asID: 834
IP address blocks: 154.16.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8102 (0x1fa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 5 14:09:08 2026 GMT
Not After : Jun 10 14:09:08 2028 GMT
Subject: CN=6a22d888-56d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:b9:c2:7a:a4:f4:f8:ed:fc:be:de:04:92:
df:e9:3c:c1:d6:5d:68:dd:77:8b:dd:54:6c:7c:c2:
06:25:02:6a:07:1f:57:d2:d5:a0:c6:80:8e:7e:30:
e1:50:95:ba:24:50:a1:6c:49:76:db:ef:c8:c9:55:
b4:97:1d:c0:05:84:38:d5:a9:51:d0:37:d8:74:62:
8f:cd:b3:2a:ac:df:e7:af:98:32:f4:47:c9:5f:75:
d0:32:f6:09:a5:8d:90:fd:18:fd:fd:4d:5f:ea:da:
ce:c3:7a:f7:1d:37:7f:fc:83:ab:7e:d7:5f:24:42:
42:09:34:5b:17:82:8a:20:55:18:38:89:d2:97:d1:
06:16:5f:38:a2:37:25:4a:32:e0:72:fb:43:98:63:
28:28:64:2a:54:9c:7a:71:72:53:90:8a:e1:ab:c9:
d5:a0:84:48:ab:cc:b3:d5:58:b0:a5:36:56:2d:1b:
ee:70:3e:6b:e3:27:61:8c:c3:e0:ca:62:a3:0f:94:
c9:c7:e1:82:53:6e:68:3e:0d:09:8c:53:30:22:d1:
72:c9:5a:38:3b:e9:8a:02:50:c7:63:09:ca:62:ca:
c5:e7:07:f8:9c:fb:df:4a:57:c3:20:a8:0d:61:21:
cc:d1:66:4d:93:e7:c9:a8:13:be:fb:19:2e:5c:6f:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2F:C7:0F:4D:20:A7:DE:FF:01:59:F7:A9:8A:C2:F7:0B:0F:E0:75
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/20B6D10C60E811F18369CFB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ec:e2:61:52:31:d5:75:28:6c:06:77:d4:4d:8c:b2:8b:1d:
7c:9d:48:ce:cf:2f:9b:92:11:7d:7b:32:a2:e9:c4:e8:86:94:
b0:ed:2e:3b:fa:4d:6a:23:2b:92:55:89:9d:fd:73:a9:57:6b:
ba:07:13:2b:ed:d6:aa:40:29:2e:7c:03:f2:9c:b9:72:e2:71:
b8:4d:0f:68:5c:6c:99:57:b4:9a:6c:78:89:09:c4:00:1e:20:
fd:b5:e6:2b:b6:21:97:19:4a:c2:d9:13:b4:b7:d3:04:d3:ff:
93:66:ee:4d:b5:ca:a3:a1:4f:f2:1f:a2:a7:e0:e1:8e:8c:19:
6f:c9:e7:5d:1e:35:ed:e4:6a:9b:d8:57:6a:d4:da:0c:d6:66:
f9:cf:99:ff:08:f5:1a:f3:01:48:ab:72:f3:ba:fe:0e:43:6b:
a8:12:d8:18:55:4b:70:53:a8:fe:bc:e1:11:34:8b:ac:bd:3b:
27:fd:d3:14:88:8f:59:fe:4b:c0:5c:6a:ec:9a:a0:7f:a7:bf:
c9:a5:54:f3:c9:49:6a:17:44:e2:43:b7:3d:dd:a4:3e:f0:f1:
83:17:80:12:33:24:e8:cd:eb:98:b9:ba:ac:38:75:c3:9c:0b:
3d:74:1f:12:d7:d2:ff:a6:1b:d8:51:15:ce:c7:64:65:0f:45:
f4:28:4b:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICH6YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA2MDUxNDA5MDhaFw0yODA2MTAxNDA5MDhaMBgxFjAU
BgNVBAMTDTZhMjJkODg4LTU2ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOqbnCeqT0+O38vt4Ekt/pPMHWXWjdd4vdVGx8wgYlAmoHH1fS1aDGgI5+
MOFQlbokUKFsSXbb78jJVbSXHcAFhDjVqVHQN9h0Yo/Nsyqs3+evmDL0R8lfddAy
9gmljZD9GP39TV/q2s7DevcdN3/8g6t+118kQkIJNFsXgoogVRg4idKX0QYWXzii
NyVKMuBy+0OYYygoZCpUnHpxclOQiuGrydWghEirzLPVWLClNlYtG+5wPmvjJ2GM
w+DKYqMPlMnH4YJTbmg+DQmMUzAi0XLJWjg76YoCUMdjCcpiysXnB/ic+99KV8Mg
qA1hIczRZk2T58moE777GS5cb9ltAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYy/H
D00gp97/AVn3qYrC9wsP4HUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzIwQjZEMTBDNjBFODExRjE4MzY5Q0ZCMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIEwDQYJKoZIhvcNAQEL
BQADggEBAKbs4mFSMdV1KGwGd9RNjLKLHXydSM7PL5uSEX17MqLpxOiGlLDtLjv6
TWojK5JViZ39c6lXa7oHEyvt1qpAKS58A/KcuXLicbhND2hcbJlXtJpseIkJxAAe
IP215iu2IZcZSsLZE7S30wTT/5Nm7k21yqOhT/Ifoqfg4Y6MGW/J510eNe3kapvY
V2rU2gzWZvnPmf8I9RrzAUircvO6/g5Da6gS2BhVS3BTqP684RE0i6y9Oyf90xSI
j1n+S8BcauyaoH+nv8mlVPPJSWoXROJDtz3dpD7w8YMXgBIzJOjN65i5uqw4dcOc
Cz10HxLX0v+mG9hRFc7HZGUPRfQoS0g=
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:20:18 2026 by rpki-client