Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31A8E58E96DC11F1A7458CA3CE1D38B0.roa
File: 31A8E58E96DC11F1A7458CA3CE1D38B0.roa (raw, json)
Hash identifier: u/TyHrShN9j7KQVnlHSexk6umerUsqXEFmnuKq+MrPM=
Subject key identifier: 64:36:A2:50:DB:EE:73:6E:9B:F0:24:E6:8E:59:21:BA:9A:71:F0:96
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20FC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31A8E58E96DC11F1A7458CA3CE1D38B0.roa
Signing time: Thu 13 Aug 2026 05:59:50 +0000
ROA not before: Thu 13 Aug 2026 05:59:46 +0000
ROA not after: Sun 13 Aug 2028 05:59:46 +0000
asID: 205489
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Aug 2026 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8444 (0x20fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 13 05:59:46 2026 GMT
Not After : Aug 13 05:59:46 2028 GMT
Subject: CN=6a7d5d56-3c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:41:21:59:06:ba:c4:79:33:a3:07:a7:fa:
8f:4a:09:39:fd:f6:11:ab:8f:54:1a:12:60:38:b5:
5a:66:8c:23:a1:66:14:13:ae:9b:07:a2:03:de:d8:
19:ae:3a:0e:43:e6:7a:9b:23:96:ed:0d:e9:26:99:
92:4b:6c:f1:b3:12:e8:c2:75:c2:ce:19:23:9a:41:
1c:60:d2:06:4d:b9:ad:af:0e:21:6b:d9:ad:2e:3b:
bb:4a:1d:fc:e5:d7:92:f4:9e:b2:7f:fc:d9:8d:b6:
5d:ec:ce:85:80:4b:07:ad:24:5c:af:a6:f0:95:ea:
f3:fd:69:b2:c1:73:4f:68:8c:0f:26:84:5b:33:57:
06:90:0f:0d:3a:72:39:91:dd:7a:92:cf:02:20:76:
93:a1:8a:32:15:f7:09:f1:3a:66:c4:f8:25:c5:d0:
e4:09:ce:db:7a:b0:17:d8:82:84:e9:1a:f1:09:bf:
6f:e4:78:22:42:c2:eb:53:12:2f:17:33:8d:81:08:
b9:fb:2b:b1:af:a2:ef:25:71:63:c7:72:6e:cc:4a:
79:8f:07:07:e5:00:e6:1b:8e:d9:91:95:8a:b6:9d:
c3:c4:ae:42:89:ea:18:85:91:9e:ce:7f:e6:d1:54:
da:b1:53:b1:cc:01:8e:b2:f9:dc:f6:d1:ca:52:7a:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:A2:50:DB:EE:73:6E:9B:F0:24:E6:8E:59:21:BA:9A:71:F0:96
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31A8E58E96DC11F1A7458CA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:79:8a:5f:b1:12:ff:d7:c8:9d:26:e1:ac:48:3f:fd:5a:88:
1f:b9:06:41:79:19:1c:18:1e:bc:2a:6b:3f:2e:72:f3:a2:32:
f7:66:7c:c2:74:62:ad:99:5f:53:6a:c5:ba:98:d4:c8:64:10:
1e:96:1c:73:0b:e3:35:37:a5:55:3e:ab:17:fa:33:7c:45:ea:
06:e7:e2:45:03:49:20:02:ce:4d:eb:f1:2f:4b:a1:88:10:66:
7f:4d:3c:d5:03:1a:2e:d8:b0:99:df:03:f5:1a:25:86:68:a9:
99:35:f6:f2:92:bb:9a:5a:0e:18:a4:54:95:d6:aa:a9:7c:aa:
58:1b:a9:3f:98:46:f8:50:9b:62:97:00:42:da:bc:b4:dd:8b:
28:ab:1a:bd:1e:91:59:f5:22:5e:b9:d1:6e:eb:68:88:6a:29:
b2:6e:2b:68:c3:25:3a:bf:ae:18:36:30:91:4c:f6:1e:b2:0a:
e3:03:75:ad:ce:bd:45:d8:24:77:6c:88:f8:15:ca:87:c9:fb:
73:22:a1:55:e6:09:fb:27:86:27:d6:9c:03:45:66:ee:d9:f4:
5f:32:7a:42:e8:79:da:8e:fc:a1:41:7c:1a:b9:cf:50:0a:ab:
8c:00:20:ca:de:4c:c1:be:70:b3:6b:a0:e3:68:84:db:ae:85:
9b:ea:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:15:46 2026 by rpki-client