Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/352220249BA811F19BB746B4CE1D38B0.roa
File: 352220249BA811F19BB746B4CE1D38B0.roa (raw, json)
Hash identifier: 68QhSDVWiqMUwUblWwe30+Rp4S6H4V/lxU6/U4yyWmQ=
Subject key identifier: EB:9D:D9:D8:E5:8F:DC:EB:02:EA:37:D0:4C:72:C5:5B:B7:35:7D:59
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 210C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/352220249BA811F19BB746B4CE1D38B0.roa
Signing time: Wed 19 Aug 2026 08:30:18 +0000
ROA not before: Wed 19 Aug 2026 08:30:14 +0000
ROA not after: Sat 19 Aug 2028 08:30:14 +0000
asID: 61317
IP address blocks: 154.70.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 08:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8460 (0x210c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 19 08:30:14 2026 GMT
Not After : Aug 19 08:30:14 2028 GMT
Subject: CN=6a856999-43e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:8a:b1:06:5d:b3:a2:20:49:7f:2c:58:ad:
50:b4:e6:ea:e4:d3:c3:1d:85:85:1d:43:1c:4c:28:
3d:fb:3f:1c:97:9c:82:75:45:8a:4d:03:05:3a:ea:
36:73:60:59:13:d8:56:cb:e2:60:02:96:de:58:9c:
89:bf:fd:c7:39:18:32:54:d9:e5:77:47:90:43:e7:
d4:82:da:46:34:2d:1c:28:39:c6:1f:84:2e:18:57:
2f:ed:4b:af:3c:6f:b6:a5:9d:ca:17:35:b8:8c:f3:
18:b3:dd:10:5d:a1:d7:2c:6b:09:cd:d9:b3:6f:de:
74:2d:18:af:65:9f:aa:e7:3d:0d:58:3f:a6:02:43:
6a:92:de:f4:83:ec:8a:6e:47:e3:b6:f1:7e:c8:b4:
b2:79:e9:ad:31:f7:d8:7e:03:7f:ca:e8:c2:35:06:
3d:a0:f6:8e:3e:a4:f4:7e:bc:d4:a1:e2:6d:ee:a8:
3c:03:5b:f9:df:0f:ba:56:91:26:ec:55:06:11:f5:
a9:31:e5:20:9f:1f:0f:78:7f:8f:cf:e9:94:f2:3c:
c4:78:f4:ca:4e:34:f9:4c:79:a2:b2:09:e9:b5:fe:
c8:69:2f:7c:6f:8d:55:20:fc:83:16:80:eb:4b:c5:
98:24:9d:25:f6:66:1d:e0:01:18:6f:02:08:78:44:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9D:D9:D8:E5:8F:DC:EB:02:EA:37:D0:4C:72:C5:5B:B7:35:7D:59
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/352220249BA811F19BB746B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7d:c5:c0:46:86:67:b0:d6:67:7c:11:ed:04:80:b5:12:00:
23:d2:e1:87:4d:26:11:d7:8a:7c:8c:79:4d:df:70:ba:c0:92:
8f:90:e2:e0:b7:21:3c:1c:78:da:4a:8d:46:a9:81:a5:5c:83:
40:51:82:0f:2e:2f:35:ec:91:fd:85:8d:76:d5:55:04:40:2d:
b5:cd:ec:2e:46:6f:2d:e4:61:50:46:13:c7:75:f5:96:7e:fd:
c8:b6:e3:b5:ec:63:7a:fd:c1:0f:62:a7:f6:2e:59:70:bf:05:
a7:10:69:a2:bf:fe:a3:7b:42:a3:7d:6f:7c:89:8c:0f:5a:86:
7c:a6:68:11:fd:58:56:f2:68:e1:92:f9:ec:f2:16:4d:91:1e:
56:4e:fc:bd:23:21:12:35:62:f1:3a:2b:2a:f7:c2:c6:8d:78:
29:50:23:e7:b6:bf:27:c9:d9:dd:31:b6:d7:7f:b2:e0:3b:32:
6d:d5:51:da:01:82:26:9e:71:f6:83:21:83:99:55:f0:2f:af:
5b:bf:8f:a4:ed:36:28:12:14:1c:d4:e1:27:81:ee:9f:0e:1c:
15:3b:49:ed:2c:1e:12:9b:65:82:06:da:8c:34:f1:a0:f3:3d:
19:e7:4d:82:2d:30:9c:a2:df:df:44:d0:f4:fb:65:b2:e9:b7:
11:ba:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:13 2026 by rpki-client