Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/344F376094B211F1B31505F7CE1D38B0.roa
File: 344F376094B211F1B31505F7CE1D38B0.roa (raw, json)
Hash identifier: 01RY9nO82Vk5/5ZUGs9etg28x7mfFpp1t9edv9QqGYU=
Subject key identifier: F2:93:8E:84:2A:6B:2A:D8:B9:46:AD:4B:6A:31:8D:07:84:EF:88:DC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20F3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/344F376094B211F1B31505F7CE1D38B0.roa
Signing time: Mon 10 Aug 2026 11:54:15 +0000
ROA not before: Mon 10 Aug 2026 11:54:07 +0000
ROA not after: Thu 10 Aug 2028 11:54:07 +0000
asID: 834
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 12 Aug 2026 12:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8435 (0x20f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 10 11:54:07 2026 GMT
Not After : Aug 10 11:54:07 2028 GMT
Subject: CN=6a79bbe7-086e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:e0:af:b1:50:64:d6:fc:b9:34:17:ac:83:
39:b4:21:2d:9e:99:cd:22:04:c5:86:0b:7c:e7:f4:
0f:dd:5a:d3:93:3c:69:85:42:b8:4b:0b:39:9a:18:
1f:b4:88:65:05:9b:ca:3f:be:55:a3:c3:6d:74:75:
c3:36:1a:99:59:92:53:e2:34:8f:8f:15:9a:91:12:
f0:fb:c9:0f:33:f9:6b:97:a3:81:e3:4a:c4:c8:b5:
a7:ca:e9:2f:f2:96:97:75:e7:88:4d:fd:9b:f5:db:
20:9d:77:02:6b:82:33:a2:7f:3f:fc:aa:bb:49:03:
4f:c8:3f:6e:35:47:64:ed:78:65:30:91:28:15:31:
ee:a7:e3:cf:df:76:d9:b6:ab:4d:ba:5d:84:1d:a1:
94:d5:9d:96:f1:44:55:01:15:1b:07:75:ce:0f:87:
f6:da:3f:56:3f:79:a2:de:f1:05:b8:20:18:d7:54:
eb:fe:b2:7b:dd:3b:60:9b:ef:de:98:f1:4c:22:2f:
71:85:01:49:55:cd:59:53:02:bf:5c:b4:af:93:08:
b1:95:6d:55:58:14:f2:79:f4:4c:88:4d:05:dc:8b:
e8:1d:b8:9b:94:8f:95:2e:e8:8f:85:49:27:aa:e7:
57:c6:3d:d9:87:57:17:30:ea:d5:24:93:e4:0d:cf:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:93:8E:84:2A:6B:2A:D8:B9:46:AD:4B:6A:31:8D:07:84:EF:88:DC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/344F376094B211F1B31505F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:8f:a4:37:78:9d:16:ef:1d:74:36:50:a3:ad:31:ad:fb:54:
f0:48:c0:4b:5e:e3:ae:9c:64:4c:7f:f6:df:73:2b:88:78:28:
f0:29:c5:e3:69:68:22:7d:c2:26:5f:c9:17:ef:1c:1b:65:bc:
2e:88:66:d4:98:42:d3:10:7c:24:d4:09:93:c9:e0:06:bb:76:
77:f6:96:43:eb:4e:74:3d:be:0b:f9:c0:30:f0:a8:86:c4:62:
4f:a1:b1:74:bc:46:20:fd:89:fb:df:93:6c:be:4f:6c:c3:ab:
51:82:61:d2:52:94:17:87:32:7b:a7:1e:8d:17:8b:c4:bd:cd:
f4:24:31:c3:0d:96:6f:8f:08:c9:9e:97:7b:27:c2:bf:6d:59:
ad:0e:17:fb:aa:da:b0:be:a8:1c:b6:b5:a2:bb:a3:1b:a2:26:
e7:cf:04:81:d7:04:0b:1c:09:9e:7f:21:a6:e1:9c:94:66:4c:
8e:48:d0:d7:f0:e6:40:91:0e:42:b3:85:f4:18:d7:14:8f:c1:
b5:48:cb:a3:a0:fa:2b:54:07:b5:a2:2d:c3:48:ad:8b:e8:2c:
38:d3:56:4d:de:ba:7c:09:0e:99:fb:0d:2d:7e:1f:a9:df:44:
43:df:f6:02:bc:0f:d5:9b:5b:7c:b4:53:ec:85:78:d2:9e:cc:
6b:5d:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 19:03:31 2026 by rpki-client