Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C53C4206BC411F1970F51B1CE1D38B0.roa
File: 2C53C4206BC411F1970F51B1CE1D38B0.roa (raw, json)
Hash identifier: Bw0ovlR2f9T1/Q3rGoxtHH2Bf0UXhoRD2Y2CPrrOR6w=
Subject key identifier: 79:B9:72:0A:74:FD:AC:89:A8:0B:08:85:AD:A4:D5:4D:E1:99:FA:E4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FE7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C53C4206BC411F1970F51B1CE1D38B0.roa
Signing time: Fri 19 Jun 2026 09:49:33 +0000
ROA not before: Fri 19 Jun 2026 09:49:28 +0000
ROA not after: Mon 19 Jun 2028 09:49:28 +0000
asID: 834
IP address blocks: 154.16.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Jun 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8167 (0x1fe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 19 09:49:28 2026 GMT
Not After : Jun 19 09:49:28 2028 GMT
Subject: CN=6a3510ad-d968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:e0:a0:7a:9e:ac:ff:6e:6d:8a:5e:a7:30:
e8:39:08:fc:4a:02:b9:20:58:95:bd:d9:98:89:12:
4e:5f:dc:68:39:d4:10:06:32:a9:9c:62:83:a4:7d:
43:16:95:f5:b9:c2:15:65:65:a1:76:47:e2:b2:4d:
bd:65:30:d2:84:90:6b:8f:d8:35:d6:b2:2e:03:a8:
dc:03:87:3f:69:4d:2b:0f:75:62:b0:9f:d0:3d:05:
73:48:86:5a:62:98:85:11:22:70:1f:92:76:d7:0c:
9b:a6:5c:32:98:ef:5d:64:67:4f:7b:df:45:98:a9:
bd:81:62:24:b9:05:a1:60:1e:f4:dc:04:24:b6:06:
76:f2:66:56:5b:4c:5a:3c:6d:d5:06:6b:58:d0:bd:
9b:25:b2:8c:d2:8d:f8:87:31:ac:0f:36:10:f8:8d:
2f:e8:da:56:9d:e1:c9:d8:d1:ef:72:bc:d6:58:c1:
ee:9a:93:27:7c:2a:c1:92:7f:29:32:77:bf:fb:de:
38:1e:d7:76:5f:51:95:b5:34:aa:a1:ea:5b:ba:2e:
57:53:1d:47:a6:6a:c7:c4:0a:0e:25:97:72:bf:f5:
47:7c:4e:fc:a6:af:a8:7c:62:0e:30:49:3d:a9:61:
6c:2f:b8:7a:26:18:ba:3b:bd:02:ba:7a:ed:e9:e0:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:72:0A:74:FD:AC:89:A8:0B:08:85:AD:A4:D5:4D:E1:99:FA:E4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C53C4206BC411F1970F51B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f1:dd:86:fb:f0:51:19:8c:33:59:8c:a5:45:67:63:9f:0a:
25:06:e5:16:9d:a9:2e:6d:70:46:94:b3:3a:2c:49:37:ad:f5:
d1:8a:ef:5c:48:51:00:53:63:15:38:89:c6:dd:73:a2:42:49:
8e:6c:18:af:5f:3c:37:45:fd:53:ff:63:59:5d:a9:f7:72:3e:
2e:56:52:39:6f:bb:36:e2:52:de:ae:6a:1e:ab:be:86:f7:f1:
2e:5d:91:cf:33:4d:7a:14:47:cc:67:4d:08:2e:98:82:10:08:
f2:b7:5f:fd:9c:18:ec:f0:77:5d:8c:7d:97:39:a0:e1:95:58:
d5:60:0b:4d:fa:72:10:2e:25:50:94:2c:08:32:76:26:41:32:
0f:3f:08:a6:6c:1c:48:ed:01:f4:4e:df:a4:fd:7e:ca:ca:42:
5f:98:1e:19:fe:ce:6f:2a:1b:23:74:0d:ef:8f:81:dd:17:00:
64:6b:aa:c4:12:c9:e3:7a:7a:63:bb:26:b8:25:b2:0a:4d:e7:
b9:7f:c7:bf:31:d7:1e:b6:a3:71:1b:87:d7:74:86:6c:de:d7:
30:a1:ed:33:0d:24:6b:f6:95:e3:8a:5b:3c:3b:71:b8:78:f8:
83:8a:84:4d:d7:9e:f8:b0:12:67:60:c5:23:30:ef:cd:c8:de:
d7:f5:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 13:06:18 2026 by rpki-client