Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2EFE730E743F11F19B60E307CF1D38B0.roa
File: 2EFE730E743F11F19B60E307CF1D38B0.roa (raw, json)
Hash identifier: JhVM1L7b5j3VUkv2foUHZ1rOkrE0kmvQUu9doBIEr9Y=
Subject key identifier: 39:92:E6:CC:EB:10:68:84:09:D9:FC:D7:11:11:3A:95:08:A2:45:D3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2011
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2EFE730E743F11F19B60E307CF1D38B0.roa
Signing time: Tue 30 Jun 2026 04:50:15 +0000
ROA not before: Tue 30 Jun 2026 04:50:10 +0000
ROA not after: Fri 30 Jun 2028 04:50:10 +0000
asID: 834
IP address blocks: 154.16.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8209 (0x2011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 30 04:50:10 2026 GMT
Not After : Jun 30 04:50:10 2028 GMT
Subject: CN=6a434b07-a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:f5:fd:07:34:57:7f:04:b1:7e:89:dc:f0:
a6:06:51:27:e1:56:62:0f:d8:7f:1a:97:42:78:3f:
90:9c:9a:a0:8f:14:b1:d1:2a:a1:7b:83:44:30:15:
41:a0:4d:ef:8f:29:1e:02:7c:d7:b0:2b:9b:9d:f6:
30:cb:ee:3d:96:bb:e7:b8:35:77:0c:2b:af:78:0a:
e0:0a:15:72:d2:53:fb:3c:1b:ab:ba:27:12:22:7a:
d2:0a:93:3c:54:26:14:6f:8d:c1:dc:7b:2b:56:f3:
6e:91:c5:b2:f1:d0:7c:a8:60:6f:0e:e3:53:1b:fc:
b3:40:1d:c4:de:a7:c5:02:51:93:58:8f:02:6f:92:
c3:bd:db:35:cc:bc:6b:be:0e:92:5b:42:b0:36:18:
13:2b:b3:b8:c6:79:f8:a3:3b:56:6e:55:1b:eb:85:
37:13:be:0c:0b:7f:6a:c0:20:86:20:f9:7e:b5:ee:
8d:a8:74:06:1f:34:4b:dc:0e:7f:30:0f:83:2b:dc:
26:58:f9:9c:cb:33:00:f7:ba:c3:f3:bd:dc:5b:5a:
7e:77:ac:10:11:19:bf:57:a6:a9:41:0c:f3:4e:f9:
e8:87:d5:24:b8:d5:88:a2:47:e6:7a:a1:51:d8:31:
87:6e:50:c7:c2:89:c1:a1:5f:76:85:e6:24:5c:85:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:E6:CC:EB:10:68:84:09:D9:FC:D7:11:11:3A:95:08:A2:45:D3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2EFE730E743F11F19B60E307CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.48.0/24
Signature Algorithm: sha256WithRSAEncryption
71:30:9c:7e:00:ee:9e:81:2c:25:fe:39:c3:4e:d0:96:c8:81:
e5:13:8e:a6:53:20:66:cc:8b:f9:85:a3:55:df:13:fa:0b:ce:
d8:f2:62:69:3b:d3:46:4f:a3:bc:3b:5c:7f:55:a0:91:7f:55:
53:c5:bb:fa:ae:1a:15:fd:2c:48:08:c1:d4:df:59:c3:dd:b6:
05:7b:0c:b7:41:d1:96:81:60:1a:4b:98:20:78:b3:c3:bd:e6:
0a:1d:ce:2c:ed:4b:c2:f2:cc:00:c5:73:5c:ed:45:09:6d:92:
2b:b5:7d:d2:09:33:5c:df:4f:53:79:13:11:be:dd:34:42:32:
9d:70:10:96:74:f7:a8:aa:75:a3:c7:73:62:c7:c2:60:48:74:
27:ed:ad:5a:c0:72:b2:11:3c:ea:1e:2f:fd:ed:3c:7d:1c:d9:
35:df:37:34:e3:c3:84:79:c8:3f:a8:35:bb:1d:bb:87:95:80:
ab:1f:31:f8:f5:59:6a:eb:0b:3f:c6:c6:9e:f6:5f:b7:db:2e:
66:2c:47:23:bc:1f:dc:e4:af:28:ee:7a:85:9c:c3:a1:c3:47:
93:f2:b4:32:f2:51:43:d4:fe:f6:cb:94:c3:bd:70:e0:ff:98:
6a:45:c2:43:d2:13:af:96:84:e9:2a:a3:fb:95:fa:45:aa:79:
29:f9:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:33:46 2026 by rpki-client