Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/382E109A9BAB11F19D2868C6CE1D38B0.roa
File: 382E109A9BAB11F19D2868C6CE1D38B0.roa (raw, json)
Hash identifier: +LPLNAhnMfpsWAX6vohVfIvxo4v/zf/G5VpH+J7ZjHs=
Subject key identifier: B7:DC:AF:E0:A2:68:C3:7D:FC:FA:D2:1D:BD:9A:D1:0F:27:B8:AA:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2114
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/382E109A9BAB11F19D2868C6CE1D38B0.roa
Signing time: Wed 19 Aug 2026 08:51:51 +0000
ROA not before: Wed 19 Aug 2026 08:51:47 +0000
ROA not after: Sat 19 Aug 2028 08:51:47 +0000
asID: 5065
IP address blocks: 154.16.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 08:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8468 (0x2114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 19 08:51:47 2026 GMT
Not After : Aug 19 08:51:47 2028 GMT
Subject: CN=6a856ea7-6b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:08:06:ff:a0:24:31:bb:0c:2c:9d:e8:d7:15:
0c:20:23:cf:dc:d9:a1:9f:f3:06:5f:b2:41:44:54:
97:23:5d:7f:9f:3f:ea:fd:1f:f8:91:49:94:3f:31:
7d:a3:5f:be:87:28:6d:d9:37:e4:24:5c:c7:86:ba:
f6:db:ef:23:d6:c3:59:12:5b:bd:7d:00:14:df:6f:
09:e0:fd:fc:3e:05:ba:c9:25:e2:85:49:7b:b3:3f:
1b:15:55:c9:ea:b1:3d:8f:06:1b:2f:1b:50:bd:b6:
03:ae:42:22:35:43:ef:2b:5e:d8:1c:35:a4:bd:04:
48:e0:cb:65:b1:59:53:46:02:e4:f5:4d:c1:bc:76:
71:80:4e:69:ba:b0:7b:11:57:32:28:51:f5:5f:94:
e4:31:32:fe:81:d0:a0:b2:36:f5:23:c3:7a:38:c5:
72:7c:f7:49:81:32:ec:01:5a:bc:dd:5b:2a:12:f0:
ff:62:c5:5b:03:16:a8:03:5b:b8:c4:45:1e:17:43:
71:3f:76:14:11:b0:86:7d:c0:ad:a2:74:81:90:ab:
6b:7c:da:f6:3d:4f:5e:c3:cb:db:22:a0:c3:ba:0b:
d6:9d:04:d4:2f:f1:10:6c:b5:15:44:4f:ec:59:b4:
05:7a:0e:1c:98:02:5d:6b:48:c3:8f:de:b9:6a:3f:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:AF:E0:A2:68:C3:7D:FC:FA:D2:1D:BD:9A:D1:0F:27:B8:AA:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/382E109A9BAB11F19D2868C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.50.0/24
Signature Algorithm: sha256WithRSAEncryption
25:87:e5:00:a3:9d:3f:ce:50:0c:a9:52:2a:ea:ab:2f:2b:c9:
a9:ec:f8:d3:82:77:0c:c9:d2:ff:74:20:64:46:47:7f:95:89:
fc:02:21:26:43:c9:21:a0:41:ff:7a:cc:52:da:e8:69:00:b5:
70:a3:f1:77:a9:62:c9:95:72:bc:0a:b1:2a:a6:1d:eb:2e:89:
7b:8b:bc:da:a6:91:bf:09:2a:e6:b4:d0:3c:f0:76:ac:c9:88:
60:5a:70:0f:db:a7:90:be:fb:48:08:8a:97:c6:b5:c4:87:68:
55:3b:58:2d:5f:c3:a1:13:d3:a2:e2:19:0e:ae:cb:f7:0b:01:
5d:06:c0:6c:aa:b7:ac:9b:27:3a:88:40:fc:ed:de:05:bb:40:
bf:76:78:f8:b2:59:46:c0:18:a4:17:07:2a:cd:21:a9:18:b8:
48:a8:03:e9:49:24:b8:6a:94:64:a8:d0:47:fb:af:65:93:1c:
91:27:7b:5b:6b:41:42:98:d4:26:24:d9:36:f2:04:fb:79:3b:
10:88:9c:d9:82:83:88:26:6e:bb:0f:86:24:98:59:c4:37:b3:
91:14:64:fc:da:8d:2e:5d:5c:0f:26:ba:6f:78:c2:1f:05:a0:
2d:bb:bc:d1:15:2c:fa:ff:07:f5:6d:d6:bb:8a:16:b2:21:47:
7a:ca:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:08 2026 by rpki-client