Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/261C0F627ACA11F1B5A577C6CE1D38B0.roa
File: 261C0F627ACA11F1B5A577C6CE1D38B0.roa (raw, json)
Hash identifier: r0UeR9kc4GFvOiEIc1Th/TMdnJzNDtyQ1MCXQDICrGM=
Subject key identifier: 73:B3:32:47:60:5E:71:96:4D:35:DC:C5:F1:22:00:1B:BA:31:9E:05
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2043
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/261C0F627ACA11F1B5A577C6CE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:40:07 +0000
ROA not before: Wed 08 Jul 2026 12:40:01 +0000
ROA not after: Sat 08 Jul 2028 12:40:01 +0000
asID: 212238
IP address blocks: 154.16.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8259 (0x2043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:40:01 2026 GMT
Not After : Jul 8 12:40:01 2028 GMT
Subject: CN=6a4e4527-4c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:28:d1:57:d4:d0:15:34:58:2b:dd:f4:67:
c5:23:66:d6:b4:aa:f6:c5:6d:cf:29:43:33:49:a4:
0f:b8:99:dc:f0:0b:0f:d7:33:44:81:08:8e:c6:dc:
34:9a:87:80:1e:cd:97:f8:a8:f8:d8:67:0e:2b:2d:
97:cc:42:26:8e:c7:c8:16:de:d3:65:a0:40:3b:c3:
2f:b9:63:eb:2e:d5:fe:a5:70:81:ec:cb:f2:95:0c:
91:e9:fa:23:15:15:47:3c:87:c6:bb:d7:62:58:62:
44:02:d6:2f:42:f8:6d:ba:99:24:47:58:e2:34:c5:
dd:5c:41:87:88:ac:40:b1:e5:67:08:01:2a:ba:d3:
86:b8:0c:31:9c:0a:06:3e:fb:4e:39:73:d6:3c:b5:
e4:4b:74:c1:94:ff:05:f1:0b:71:9b:ab:1f:4b:2c:
93:92:08:3c:59:a8:79:df:ec:c4:0e:e2:25:e4:18:
9c:73:58:a1:20:fb:0e:a2:ee:5e:94:8e:d8:96:09:
ff:6a:d9:91:47:36:51:d2:3e:ec:12:d0:82:7d:e8:
21:68:4a:14:3f:ce:1f:83:14:d0:2f:c3:ea:17:61:
39:e9:00:d0:f7:7b:0b:b6:60:bc:ae:05:02:30:59:
81:4e:05:6e:b5:42:54:fc:50:e7:b1:c6:55:ce:c3:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:32:47:60:5E:71:96:4D:35:DC:C5:F1:22:00:1B:BA:31:9E:05
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/261C0F627ACA11F1B5A577C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1b:60:9b:5b:00:8d:9d:4c:f3:9b:f1:b4:01:12:90:53:1e:
88:2b:8f:18:a5:d6:61:5c:0d:66:77:b2:59:46:e5:e8:73:b2:
e1:3b:c5:33:66:78:30:e0:db:99:3f:14:59:47:24:c9:1d:66:
97:ca:74:83:3e:26:30:47:7a:a9:f5:9d:7f:4d:00:15:4a:3f:
c0:98:b5:5c:62:a7:9b:a9:e1:84:e5:1c:8d:08:4e:02:a0:e5:
e8:57:6a:c4:1a:eb:89:3f:25:85:41:4c:0c:61:1c:7d:53:c7:
ec:b3:b2:e5:51:0a:f7:35:25:7c:37:67:ec:e5:d4:7f:a9:12:
f5:79:87:16:be:8e:1c:fc:60:a5:7a:95:e6:a3:01:6d:e1:8c:
98:f4:05:0d:c6:04:45:4b:c5:52:9d:71:a1:5f:d2:3e:0e:42:
a3:f0:5a:50:e8:36:f4:05:1c:7a:42:7d:13:95:13:b5:f1:ea:
17:c9:a2:35:21:4e:5c:bf:b8:8a:45:6e:e9:81:9c:9a:cb:d5:
43:ea:21:b2:cb:d3:e1:54:cc:31:ba:81:25:c5:4c:9c:b9:1e:
7b:d2:f4:ba:51:4b:d8:19:bc:ed:dc:3d:b5:66:6e:ff:72:f9:
f6:d3:d1:7f:13:4f:71:98:b4:1a:1a:94:30:cb:df:69:8f:77:
b2:b0:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:04 2026 by rpki-client