Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/21D44BBC84E411F18E2463C9CE1D38B0.roa
File: 21D44BBC84E411F18E2463C9CE1D38B0.roa (raw, json)
Hash identifier: jDnx1indIkDwunZ9ph6KdkPGssyjEwErnQBnZhWts44=
Subject key identifier: 74:89:C4:09:3D:26:7F:5B:DF:D5:29:3A:4B:AB:95:61:B4:4E:03:99
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 206C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/21D44BBC84E411F18E2463C9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:11:18 +0000
ROA not before: Tue 21 Jul 2026 09:11:14 +0000
ROA not after: Fri 21 Jul 2028 09:11:14 +0000
asID: 211484
IP address blocks: 154.16.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 09:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8300 (0x206c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 09:11:14 2026 GMT
Not After : Jul 21 09:11:14 2028 GMT
Subject: CN=6a5f37b6-af0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:c6:bf:fb:f7:55:f6:d4:3d:f2:56:dc:88:
5e:75:85:6a:8b:f5:29:24:7b:aa:cc:6a:c0:66:4d:
ed:1e:d5:56:b5:47:76:e7:95:59:a3:bd:0b:92:52:
8d:15:b1:05:6b:b8:e9:88:12:ac:5e:ec:fd:72:97:
2b:7e:1b:e3:f3:ca:6f:80:92:cb:25:f6:3b:38:b5:
a9:8f:e2:7a:d0:20:84:f5:8e:1c:2c:17:e8:cd:d2:
8f:6e:79:0b:f3:fc:75:33:9f:4a:ee:2a:af:30:67:
ff:ff:9f:71:d2:ff:5c:65:b4:7e:36:27:c7:d6:58:
61:7f:d6:f1:1a:6c:27:6e:be:cf:10:f8:1b:de:7f:
26:3c:4b:53:ee:4c:ca:69:29:42:53:ea:bf:20:47:
54:78:b3:6f:14:e7:52:4c:4f:77:79:3c:a3:89:22:
35:08:f8:20:2f:0c:3c:d5:db:3d:3a:4e:f0:92:c8:
cb:29:54:95:65:57:68:76:d0:89:00:bb:c6:57:28:
7d:1f:5a:c7:4e:a8:8c:f6:2e:02:78:ce:d4:df:6c:
c9:27:52:41:f2:a2:e8:43:51:a5:0e:42:3d:a3:c5:
d8:52:78:c8:06:95:20:7a:39:f5:3c:f9:f7:e9:eb:
4b:5f:cc:86:fe:53:44:0a:ba:a0:8a:eb:1f:92:30:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:C4:09:3D:26:7F:5B:DF:D5:29:3A:4B:AB:95:61:B4:4E:03:99
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/21D44BBC84E411F18E2463C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.180.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1f:49:49:c1:63:e5:02:78:13:a6:87:f4:18:0f:b5:6c:4b:
a3:fa:5f:20:14:98:4c:57:06:c8:96:56:cc:60:6a:85:c9:d4:
a9:50:5d:50:0c:44:a0:59:cd:c2:52:ee:76:03:87:d0:b3:be:
09:14:80:61:c2:85:1e:ca:f3:67:14:d4:a8:02:02:0e:6d:2e:
53:4c:d0:86:06:43:7d:ac:70:5e:e6:e9:07:4c:54:25:30:f5:
58:ed:bd:91:e0:2a:bd:56:55:4f:47:32:88:ee:f7:d9:21:3b:
05:a3:3a:d2:c6:2c:f1:a2:ee:da:d9:10:5f:d1:ee:f2:e8:95:
d1:75:ff:47:77:b3:1d:e9:c7:f8:c7:ae:ea:26:4e:8e:75:f3:
5d:01:28:1c:65:3a:87:33:de:53:fc:dc:19:8a:54:71:8f:56:
4a:ea:0d:40:d2:7c:9d:37:bd:5c:85:91:f4:95:72:31:d9:83:
17:86:f2:3c:5e:eb:85:f7:f1:13:ec:5c:0b:98:09:71:23:82:
74:26:d0:b5:3a:42:03:c3:d0:92:cb:00:5f:36:09:1a:cb:72:
0a:15:d3:bf:dd:5c:84:7c:92:54:cd:a3:0f:8d:32:ed:1e:23:
f6:af:c9:d1:70:6b:8e:fb:50:f6:8f:fc:ea:ec:72:f5:33:25:
0e:be:44:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIGwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MjEwOTExMTRaFw0yODA3MjEwOTExMTRaMBgxFjAU
BgNVBAMTDTZhNWYzN2I2LWFmMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfp8a/+/dV9tQ98lbciF51hWqL9Skke6rMasBmTe0e1Va1R3bnlVmjvQuS
Uo0VsQVruOmIEqxe7P1ylyt+G+Pzym+Akssl9js4tamP4nrQIIT1jhwsF+jN0o9u
eQvz/HUzn0ruKq8wZ///n3HS/1xltH42J8fWWGF/1vEabCduvs8Q+BvefyY8S1Pu
TMppKUJT6r8gR1R4s28U51JMT3d5PKOJIjUI+CAvDDzV2z06TvCSyMspVJVlV2h2
0IkAu8ZXKH0fWsdOqIz2LgJ4ztTfbMknUkHyouhDUaUOQj2jxdhSeMgGlSB6OfU8
+ffp60tfzIb+U0QKuqCK6x+SMCGrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdInE
CT0mf1vf1Sk6S6uVYbROA5kwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzIxRDQ0QkJDODRFNDExRjE4RTI0NjNDOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELQwDQYJKoZIhvcNAQEL
BQADggEBAGEfSUnBY+UCeBOmh/QYD7VsS6P6XyAUmExXBsiWVsxgaoXJ1KlQXVAM
RKBZzcJS7nYDh9CzvgkUgGHChR7K82cU1KgCAg5tLlNM0IYGQ32scF7m6QdMVCUw
9VjtvZHgKr1WVU9HMoju99khOwWjOtLGLPGi7trZEF/R7vLoldF1/0d3sx3px/jH
ruomTo51810BKBxlOocz3lP83BmKVHGPVkrqDUDSfJ03vVyFkfSVcjHZgxeG8jxe
64X38RPsXAuYCXEjgnQm0LU6QgPD0JLLAF82CRrLcgoV07/dXIR8klTNow+NMu0e
I/avydFwa477UPaP/OrscvUzJQ6+RL4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:59 2026 by rpki-client