Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/322CE862932A11F1BC6FA0B3CE1D38B0.roa
File: 322CE862932A11F1BC6FA0B3CE1D38B0.roa (raw, json)
Hash identifier: baTux9q/vAcn0GFiANn/PZjMGsXIUcvTbuqnY71+bS0=
Subject key identifier: BE:35:8D:8E:D6:78:BF:A4:1E:DF:D4:80:AE:7A:7C:D3:C1:1E:B9:FD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20EB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/322CE862932A11F1BC6FA0B3CE1D38B0.roa
Signing time: Sat 08 Aug 2026 13:08:07 +0000
ROA not before: Sat 08 Aug 2026 13:08:03 +0000
ROA not after: Tue 08 Aug 2028 13:08:03 +0000
asID: 834
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 10:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8427 (0x20eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 8 13:08:03 2026 GMT
Not After : Aug 8 13:08:03 2028 GMT
Subject: CN=6a772a37-be90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:3d:e7:5b:af:fd:2f:95:5c:bb:38:ec:fb:
85:ae:30:19:ef:4a:08:78:14:d9:63:89:ef:09:61:
da:f5:da:ad:34:9e:14:54:ce:47:bb:3a:0e:4f:e5:
cb:43:d6:d3:f3:76:6d:86:b0:70:66:7f:a5:8b:35:
7c:4e:7e:5b:7b:79:23:d4:8c:94:27:5d:91:2c:4f:
00:9a:1a:9a:d1:8c:63:b4:14:3f:1c:1a:af:fa:ff:
11:81:4c:38:13:5a:09:c3:89:3e:a3:78:f7:a1:1f:
66:ba:37:0a:67:bd:ae:f4:56:18:b9:6c:93:55:57:
12:e2:0d:30:c4:6e:09:ed:8e:14:ae:59:8f:97:36:
6c:74:08:f1:59:cc:53:f0:ab:a5:2b:2b:bb:96:75:
3c:bc:aa:17:e2:2f:6b:9e:d3:c7:e7:ef:57:8a:bb:
e8:0c:8e:fb:a9:f5:a7:1d:e3:6a:14:fe:52:51:79:
30:bd:e9:74:f8:93:8f:0a:99:55:e6:1b:5d:25:83:
5b:c1:54:e3:d6:15:cc:38:9c:02:63:c7:51:33:c0:
cc:fd:23:55:9d:80:a7:de:40:46:70:f0:53:5f:e8:
cc:79:92:a7:44:3b:af:e8:ed:aa:9c:f3:49:77:26:
16:47:25:39:65:cc:0a:bb:76:c6:5b:54:21:76:a6:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:8D:8E:D6:78:BF:A4:1E:DF:D4:80:AE:7A:7C:D3:C1:1E:B9:FD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/322CE862932A11F1BC6FA0B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:db:82:38:8a:c2:db:d9:d2:5d:ce:2b:ac:e6:0e:05:fe:8d:
53:d3:42:3c:5b:71:f9:ec:ea:25:0d:77:f1:08:55:33:74:dd:
56:ce:65:ff:78:a9:0d:37:e8:47:98:bf:64:1f:ff:9d:51:57:
ca:97:c6:6a:4a:2c:8e:ba:7a:62:07:0f:46:1f:45:a5:55:76:
45:4e:b9:05:91:93:e6:96:63:6b:fe:f4:43:ea:d5:7a:89:f3:
35:65:82:dd:d3:e2:23:f0:16:b5:b4:5d:c0:49:81:84:76:23:
e6:c7:17:90:be:7e:3f:d3:cd:5a:31:1f:f6:cf:12:b2:9e:ab:
33:8a:43:ff:36:9d:fa:cd:5f:ae:68:88:9d:fe:a6:9b:05:a5:
7a:3e:a4:37:fa:38:bb:fa:93:34:97:5f:ba:21:0a:ac:e3:74:
b0:8f:73:93:5d:b5:c1:25:4e:16:97:fd:3a:a3:08:ca:60:73:
46:55:d2:67:4f:2f:2c:2f:9d:b9:a2:b1:6e:fc:7d:af:73:b7:
f5:37:8f:59:7f:f7:b9:32:14:4c:4b:ee:82:ea:0d:95:a3:2a:
9a:4e:ed:f9:e4:8d:08:8b:ad:d6:ac:9a:2a:28:02:af:fc:07:
13:b3:e3:bd:9b:27:8c:fa:37:1e:2c:b0:15:bd:cc:18:55:fb:
ee:48:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 16:07:04 2026 by rpki-client