Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2888788A987F11F1A290370ECF1D38B0.roa
File: 2888788A987F11F1A290370ECF1D38B0.roa (raw, json)
Hash identifier: PAFhX1xMNsNnr+IXWZBdqZkz1ia17o+KDAAKjG8rfbM=
Subject key identifier: 5C:5E:2A:E2:64:35:87:0C:FC:93:D2:B1:87:09:DC:F9:ED:FC:5A:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2103
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2888788A987F11F1A290370ECF1D38B0.roa
Signing time: Sat 15 Aug 2026 07:58:54 +0000
ROA not before: Sat 15 Aug 2026 07:58:50 +0000
ROA not after: Tue 15 Aug 2028 07:58:50 +0000
asID: 198566
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8451 (0x2103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 15 07:58:50 2026 GMT
Not After : Aug 15 07:58:50 2028 GMT
Subject: CN=6a801c3d-0328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a1:29:1a:54:fc:e8:55:f2:9b:a4:c0:61:f2:
25:9d:46:1b:4d:4f:30:21:c5:ff:e3:59:a7:f9:39:
2f:a6:ff:55:7b:86:90:83:23:c7:23:a3:89:41:3d:
49:b1:9f:18:22:34:b8:49:27:8a:14:7c:2f:16:d4:
cc:d7:96:2a:41:1c:cd:07:f8:d4:64:92:38:fc:15:
1a:4e:7a:8e:17:ac:38:8a:27:75:a7:57:ad:d6:6c:
c1:a6:81:dc:8b:23:b8:fb:6e:ee:a8:96:67:ae:e0:
48:fa:ae:aa:18:6c:ac:58:5d:d2:9a:5d:12:15:78:
f1:5f:27:98:8c:0e:6f:06:88:bd:a6:70:4c:46:cf:
c9:e7:80:f1:8c:18:a4:be:98:62:15:b3:cc:ac:65:
d6:40:db:b8:08:09:25:84:41:6e:b4:37:03:db:a7:
0c:2b:d2:d2:4a:75:98:21:2d:fb:92:8c:bb:72:65:
b7:69:5c:36:8c:19:1b:f9:c8:c1:da:a0:74:2b:d1:
ce:ac:d3:f6:13:5a:6b:df:04:48:4c:1a:59:61:5d:
70:ae:79:a4:36:3e:8e:ce:26:8d:bd:48:e0:c3:f1:
b9:31:f0:0e:f9:db:62:75:d4:b7:e2:56:ba:48:75:
c9:c0:9f:af:9f:ff:59:bd:df:7e:c4:f9:40:24:be:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:2A:E2:64:35:87:0C:FC:93:D2:B1:87:09:DC:F9:ED:FC:5A:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2888788A987F11F1A290370ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:77:8e:71:fa:55:04:29:15:12:71:de:d9:02:41:1c:ce:46:
29:92:bc:24:0e:70:32:92:85:8e:e3:2a:e0:7d:0a:28:90:0d:
d9:30:1c:23:68:fc:fe:f1:26:54:45:b2:0b:0c:99:87:1d:14:
d0:16:e7:f3:b4:62:cc:57:dc:8a:4d:64:2c:6d:f2:77:b8:a7:
ec:10:78:81:b4:7e:30:7d:c5:ca:f7:4e:02:33:28:24:18:2f:
89:83:c9:d9:96:47:05:ab:5a:1a:ef:7e:8e:d1:3a:be:34:14:
88:f2:b6:6b:ff:3d:a6:50:4f:c5:de:2f:f8:43:39:80:9c:23:
ef:47:71:c9:72:08:77:c0:51:13:00:f4:f2:a9:6d:81:7f:9c:
b6:80:9a:6f:e0:3d:14:48:a9:4c:2a:61:07:d9:c3:a4:37:46:
f8:e7:38:47:44:36:8a:62:bd:0c:e8:84:bd:16:bb:63:23:8b:
af:c9:58:ae:0d:ff:11:ad:19:b0:b0:d6:59:f8:2b:ed:d3:50:
4f:7f:67:0d:95:14:f9:42:b5:2c:34:2d:99:37:5f:4e:a8:28:
47:78:a2:57:75:e3:63:84:20:9c:1c:43:0c:2b:7d:4f:95:2f:
0a:71:d3:1d:8f:1e:2f:0e:f5:27:2e:cf:5a:36:a3:8b:6f:f7:
31:dc:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:25:33 2026 by rpki-client