Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31DC5B067A9111F18CEE13F4CE1D38B0.roa
File: 31DC5B067A9111F18CEE13F4CE1D38B0.roa (raw, json)
Hash identifier: eupNGrGofCbBUDBgnoeDp8224MdR+377svVkkHDaegs=
Subject key identifier: 29:47:68:3D:0C:1C:4C:4A:01:4D:A8:62:CE:51:DD:04:BC:D7:68:83
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2026
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31DC5B067A9111F18CEE13F4CE1D38B0.roa
Signing time: Wed 08 Jul 2026 05:52:25 +0000
ROA not before: Wed 08 Jul 2026 05:52:20 +0000
ROA not after: Sat 08 Jul 2028 05:52:20 +0000
asID: 41171
IP address blocks: 154.16.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8230 (0x2026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 05:52:20 2026 GMT
Not After : Jul 8 05:52:20 2028 GMT
Subject: CN=6a4de599-80b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:dd:96:a0:3b:fb:50:f8:54:da:a0:b9:32:
53:90:8e:84:c6:4b:3f:ed:d2:b1:7a:7f:45:b8:18:
f9:25:8c:9a:00:59:4b:c6:00:bd:0b:75:c6:f2:0a:
56:ab:69:22:3c:bc:89:c9:5e:22:0c:0b:62:98:01:
0e:d6:e4:6c:ba:e8:d1:c7:25:64:02:c3:b0:4e:63:
08:65:71:0a:b4:64:bf:7d:76:4b:7d:31:4e:d2:73:
0f:3e:01:d2:86:ed:77:33:bb:00:48:c0:0c:1b:da:
0f:af:04:eb:8f:a5:cb:97:26:b0:e0:ee:0a:3f:29:
30:2b:2a:ec:70:2d:77:4a:c8:67:7f:d3:c6:45:d6:
e3:a1:48:67:43:de:6a:f6:ae:ba:79:b0:25:81:27:
36:09:1a:5d:5d:a0:43:ea:8a:0a:5a:35:ba:c3:dd:
27:d3:b4:5d:3b:b7:07:2b:a0:28:f2:e2:84:fa:1e:
70:4a:70:60:41:48:13:f0:c3:4b:e3:f4:d8:de:13:
10:d0:34:dc:f0:c5:51:7c:61:ce:46:82:5f:bb:ab:
76:ef:42:d0:ed:46:3c:34:52:2b:03:7c:60:7b:89:
46:77:5b:4c:e5:ab:50:f5:17:ab:e5:29:e5:53:b6:
d0:a5:03:2c:84:79:75:14:82:ca:8f:e4:55:e1:dc:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:68:3D:0C:1C:4C:4A:01:4D:A8:62:CE:51:DD:04:BC:D7:68:83
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31DC5B067A9111F18CEE13F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2c:a8:80:e9:b0:36:6f:a1:72:13:c9:aa:26:42:d6:52:45:
b5:f6:98:6c:0f:05:cb:1c:f8:b9:e4:9f:f5:c0:b8:e3:c0:1e:
d0:7c:5a:03:f2:30:02:34:69:5a:10:c4:12:b4:b2:0d:d6:51:
1a:02:bd:dd:78:d5:96:7c:4c:85:ef:27:d3:62:45:0f:fe:5f:
09:cc:4e:77:dd:95:93:27:22:81:bd:5c:ee:04:bf:64:0a:f5:
18:8e:80:21:58:e5:42:73:c2:86:0c:cb:ee:1a:03:8d:cc:20:
46:d9:d0:2d:c1:c3:75:1f:83:a2:e0:5b:8f:0d:7f:ae:6d:e5:
71:4a:50:ea:bd:af:84:f1:20:9d:1c:17:8a:f9:50:05:bf:99:
37:35:ac:e7:2c:1f:47:19:84:9d:34:c1:cd:44:3e:f4:13:bb:
67:81:d6:41:a9:84:27:ef:66:16:43:da:48:13:e7:55:74:2d:
12:c3:93:aa:e9:82:e0:a7:91:51:33:01:8f:9b:b5:ec:6b:65:
37:73:c1:d7:0d:40:b0:96:c9:f5:15:2f:85:49:60:8c:42:e5:
b6:11:13:b1:86:6f:7c:69:eb:94:62:ac:f2:b6:92:5b:2c:18:
c6:f2:77:4b:3b:1d:3c:d1:34:b5:d4:4f:40:f0:8d:70:37:ee:
05:7b:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 08:39:27 2026 by rpki-client