Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/367393EA7AC911F19497D1C1CE1D38B0.roa
File: 367393EA7AC911F19497D1C1CE1D38B0.roa (raw, json)
Hash identifier: YdOGK9Ny9PpsOGoGrzZXcFWn9XiXokagSeLV7dVEIok=
Subject key identifier: 31:4F:07:32:BD:8A:82:1C:1C:3A:C3:AE:E5:A0:30:D9:2B:96:F4:0A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2034
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/367393EA7AC911F19497D1C1CE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:33:25 +0000
ROA not before: Wed 08 Jul 2026 12:33:20 +0000
ROA not after: Sat 08 Jul 2028 12:33:20 +0000
asID: 16611
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8244 (0x2034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:33:20 2026 GMT
Not After : Jul 8 12:33:20 2028 GMT
Subject: CN=6a4e4395-4f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:8c:d2:48:e7:53:34:c7:b3:c2:c3:8b:fe:
70:c7:35:d1:9a:f3:21:db:48:3b:bc:6b:9d:6c:b1:
e6:9a:9c:7e:05:a2:b9:ee:64:5e:30:09:1e:c3:be:
22:ae:e0:90:5f:4d:af:10:2f:56:1b:d8:e8:08:4a:
11:95:04:27:8a:9a:d0:c2:da:7b:ac:9e:a0:c0:63:
01:7a:7c:7c:dd:c7:d4:2e:db:4b:2a:af:d4:09:28:
d9:19:f7:31:a6:3b:3c:fa:dd:d3:26:d6:38:54:c9:
c8:37:57:d7:53:b9:ca:43:8f:9f:61:cc:ac:77:6e:
cc:cb:d7:b3:6d:4b:89:d0:f6:ee:2c:7f:e3:a4:ce:
be:8d:01:a1:0d:f8:63:e0:67:57:e0:f5:88:81:fb:
0d:95:02:c7:4c:db:a3:db:30:28:60:25:c3:17:ee:
5c:6c:65:b5:2e:b4:8a:16:14:59:15:ee:31:19:68:
4a:b5:b2:14:46:ac:1b:30:68:ce:41:98:e1:5b:f9:
ec:b7:c9:07:46:b9:e3:2b:be:eb:11:74:d3:3f:56:
b0:19:2e:a8:cb:2e:12:48:b2:8e:ab:cf:ad:e8:b0:
96:5d:c9:12:a6:a2:e5:bb:63:0d:5f:e3:a1:d1:e9:
03:7f:85:10:94:3d:72:17:f6:85:41:0a:2d:4b:b6:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:07:32:BD:8A:82:1C:1C:3A:C3:AE:E5:A0:30:D9:2B:96:F4:0A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/367393EA7AC911F19497D1C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
08:71:73:c2:67:19:da:9b:ca:8d:5a:14:40:03:30:70:40:9c:
59:2e:84:8d:37:19:6f:e8:cb:e5:01:32:da:43:04:56:a7:5e:
18:b1:a7:48:c4:61:5e:72:23:8f:00:fc:a0:f4:9c:9c:73:bd:
0f:2c:86:18:78:10:2a:79:7a:6b:51:a8:19:de:a9:05:19:85:
88:f6:26:51:ea:e7:2a:e7:e0:da:8f:74:c9:7f:32:51:19:69:
50:df:ae:6f:ee:95:5c:52:11:55:d4:03:85:38:fa:5e:a2:93:
f6:62:e3:5b:ea:38:e3:12:b3:1f:a8:3a:2b:19:03:74:1b:70:
e7:29:33:cb:78:03:69:39:8f:29:20:a3:7e:68:0b:f3:5d:06:
2c:14:e9:8d:3d:33:76:ec:8e:ce:de:59:0e:14:41:1b:93:b8:
f6:c7:52:64:8d:98:82:d3:ee:f2:e5:00:dc:79:30:74:bf:d1:
b5:e9:b5:23:38:55:d4:57:9e:88:17:5b:c4:a9:ba:32:71:15:
99:a5:20:4f:50:d2:06:f7:05:b3:fb:cb:7d:a9:db:89:e2:57:
ce:89:59:be:a6:56:0f:9e:97:8e:f0:0f:55:4c:cb:ec:e6:64:
04:15:c6:0c:8a:44:36:33:52:7b:bd:c3:e8:3d:6a:df:ac:f8:
dd:33:30:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIDQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MDgxMjMzMjBaFw0yODA3MDgxMjMzMjBaMBgxFjAU
BgNVBAMTDTZhNGU0Mzk1LTRmMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXB4zSSOdTNMezwsOL/nDHNdGa8yHbSDu8a51sseaanH4FornuZF4wCR7D
viKu4JBfTa8QL1Yb2OgIShGVBCeKmtDC2nusnqDAYwF6fHzdx9Qu20sqr9QJKNkZ
9zGmOzz63dMm1jhUycg3V9dTucpDj59hzKx3bszL17NtS4nQ9u4sf+Okzr6NAaEN
+GPgZ1fg9YiB+w2VAsdM26PbMChgJcMX7lxsZbUutIoWFFkV7jEZaEq1shRGrBsw
aM5BmOFb+ey3yQdGueMrvusRdNM/VrAZLqjLLhJIso6rz63osJZdyRKmouW7Yw1f
46HR6QN/hRCUPXIX9oVBCi1Lto+TAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMU8H
Mr2KghwcOsOu5aAw2SuW9AowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM2NzM5M0VBN0FDOTExRjE5NDk3RDFDMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECkwDQYJKoZIhvcNAQEL
BQADggEBAAhxc8JnGdqbyo1aFEADMHBAnFkuhI03GW/oy+UBMtpDBFanXhixp0jE
YV5yI48A/KD0nJxzvQ8shhh4ECp5emtRqBneqQUZhYj2JlHq5yrn4NqPdMl/MlEZ
aVDfrm/ulVxSEVXUA4U4+l6ik/Zi41vqOOMSsx+oOisZA3QbcOcpM8t4A2k5jykg
o35oC/NdBiwU6Y09M3bsjs7eWQ4UQRuTuPbHUmSNmILT7vLlANx5MHS/0bXptSM4
VdRXnogXW8SpujJxFZmlIE9Q0gb3BbP7y32p24niV86JWb6mVg+el47wD1VMy+zm
ZAQVxgyKRDYzUnu9w+g9at+s+N0zMBc=
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:01 2026 by rpki-client