Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22807F926DFE11F1B0581403CF1D38B0.roa
File: 22807F926DFE11F1B0581403CF1D38B0.roa (raw, json)
Hash identifier: DICr25lolT/DhmuO4oCX74Oh1Z6kNTTT1EgtckpX5mA=
Subject key identifier: B3:1A:C1:0A:AB:18:5E:71:B4:F4:37:74:31:D3:87:CC:13:B4:17:C6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22807F926DFE11F1B0581403CF1D38B0.roa
Signing time: Mon 22 Jun 2026 05:49:30 +0000
ROA not before: Mon 22 Jun 2026 05:49:25 +0000
ROA not after: Thu 22 Jun 2028 05:49:25 +0000
asID: 834
IP address blocks: 154.16.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 24 Jun 2026 05:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8173 (0x1fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 22 05:49:25 2026 GMT
Not After : Jun 22 05:49:25 2028 GMT
Subject: CN=6a38cce9-1cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:77:74:ca:42:14:e1:84:75:b0:91:41:64:
59:71:57:e0:5c:f1:44:70:df:96:02:b5:a8:e3:f2:
98:3f:4b:ab:74:37:85:99:6a:59:46:46:7b:50:9a:
92:1f:eb:ba:d1:2c:d9:5b:9e:ca:0f:d3:bf:94:da:
0c:0f:26:8c:db:60:5e:3f:5e:81:82:54:00:40:45:
c1:64:16:15:e0:76:69:b3:8b:90:dd:de:06:4e:95:
1f:5c:4b:f3:7b:fb:21:0e:73:61:2c:a8:7c:1e:55:
84:cc:bc:83:cb:11:2a:52:af:3a:d0:3d:2d:fa:d6:
f4:a9:26:27:83:d8:a5:ad:8c:ce:e9:16:d8:51:62:
50:52:b8:82:70:58:ac:87:f5:17:56:0e:9a:b7:7f:
37:ef:59:f5:e9:a5:cf:ed:e1:16:19:cc:39:b6:72:
c0:cb:24:6d:9e:54:08:27:1c:c0:c9:5a:02:cc:69:
52:32:eb:9c:0f:a8:32:8b:b7:82:6f:5d:6f:39:3a:
c7:bc:81:98:db:09:11:17:cd:b3:1d:8e:b0:cb:a2:
1e:ac:a0:5e:91:2c:70:39:6c:2a:5f:12:f5:c0:8c:
fc:8a:6f:9c:b1:a2:3e:48:53:60:a8:cb:79:e8:83:
11:27:68:c4:fc:25:43:4c:f7:81:53:3b:a0:f0:59:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:C1:0A:AB:18:5E:71:B4:F4:37:74:31:D3:87:CC:13:B4:17:C6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22807F926DFE11F1B0581403CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
76:74:9d:ff:3d:b3:99:68:43:72:12:ab:c4:f6:9e:7f:61:c2:
0d:a8:79:e8:50:a6:10:40:af:1d:5f:51:ef:9b:cc:48:95:b6:
cc:1e:72:90:a9:6c:be:9a:7a:42:be:4b:51:ef:bc:93:43:b4:
53:d8:1d:42:8b:4d:39:f1:9e:f1:93:26:fe:95:ff:de:b6:9b:
88:37:af:f1:40:d5:14:39:9b:5d:a4:d0:87:fb:90:e7:c5:e3:
7b:12:cc:a9:57:b8:96:d3:a3:49:c4:41:59:42:31:8a:45:d4:
82:d3:8b:80:d5:2a:a7:8e:88:16:6a:cc:3a:99:0d:e0:eb:fd:
1c:8b:d8:31:09:43:14:df:2a:7f:9b:b9:f2:31:20:65:69:56:
5d:a0:2d:b3:26:0b:51:87:dc:3e:e8:a7:03:3e:5f:ca:ff:a2:
7f:5e:ee:e4:af:82:dc:b5:81:24:b0:ce:f4:e8:66:f1:69:a7:
84:34:65:05:de:fe:f7:80:af:31:5c:16:33:9a:91:5e:62:43:
39:c1:4d:0b:56:8e:53:ef:d3:5c:42:5b:3b:e0:f5:ba:92:a1:
3e:d9:cd:ee:d1:b0:dc:6b:2e:ca:6f:b9:5c:55:00:65:26:ae:
4a:ba:36:a6:7c:e0:dc:72:75:e5:ab:ff:a6:65:d2:22:67:92:
f1:c9:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 17:59:13 2026 by rpki-client