Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B60962867B411F19D48A702CF1D38B0.roa
File: 3B60962867B411F19D48A702CF1D38B0.roa (raw, json)
Hash identifier: cKCi/A8ZwErtPcFRQW+VvvbFoyhJc/1hBzkVzy2slwo=
Subject key identifier: 70:5F:A8:C6:0A:F0:26:9F:9E:8E:AA:C6:21:17:63:45:3B:55:A3:FC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FD6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B60962867B411F19D48A702CF1D38B0.roa
Signing time: Sun 14 Jun 2026 05:45:22 +0000
ROA not before: Sun 14 Jun 2026 05:45:17 +0000
ROA not after: Wed 14 Jun 2028 05:45:17 +0000
asID: 212238
IP address blocks: 154.16.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8150 (0x1fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 05:45:17 2026 GMT
Not After : Jun 14 05:45:17 2028 GMT
Subject: CN=6a2e3ff1-f972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:73:74:8c:db:3e:8f:9a:b0:af:53:d2:c5:
67:18:f0:ac:81:0d:2e:8f:b5:90:4a:4d:da:c1:0f:
8f:77:43:b0:61:b1:19:d3:27:42:dd:43:2e:f7:f4:
dd:5b:ed:2f:f1:7a:50:ea:43:1c:da:2b:0e:b4:ab:
29:66:cd:59:55:68:94:67:e9:b3:09:0b:11:59:50:
70:af:4e:46:9d:13:38:2c:ce:e8:3e:9c:6d:4c:e7:
b0:ed:30:6b:5c:93:b4:d7:b9:56:4d:70:7b:c8:0f:
8c:0b:9e:04:bb:ef:2f:6c:02:b8:3f:41:7f:a1:7f:
b0:e3:76:51:c6:47:65:7c:09:dd:0f:7f:9e:4b:e0:
26:e6:fa:ac:dd:f1:6d:c4:68:3b:13:5d:cc:d0:42:
d8:13:3a:98:4b:53:1a:13:fc:4e:02:d7:87:68:fd:
a7:15:a1:99:75:d3:81:a7:75:66:72:66:87:d2:33:
32:ce:5b:ca:d4:1d:37:5a:77:ce:ec:49:fe:15:f3:
fd:95:36:f6:c6:14:80:29:83:f6:d1:9c:9c:1a:13:
00:64:e3:f0:a7:95:9c:f2:95:a6:78:41:b7:f8:51:
11:a5:d4:67:3f:1e:78:21:55:27:51:fa:42:01:c2:
3d:e7:73:4e:f4:c6:f9:78:57:55:25:bb:18:e9:c4:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5F:A8:C6:0A:F0:26:9F:9E:8E:AA:C6:21:17:63:45:3B:55:A3:FC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B60962867B411F19D48A702CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.175.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e9:44:01:7b:c5:94:1f:fa:39:17:fe:fa:25:26:57:21:46:
38:e2:ad:69:26:cc:b6:c7:ae:42:9e:34:ac:20:bb:31:c8:9c:
48:c9:cf:6e:e2:a6:1c:4e:de:32:3b:58:0f:60:78:b7:7d:79:
f1:e6:f9:fa:68:37:be:1f:67:06:64:47:c1:93:db:bc:88:9d:
74:9f:fb:80:66:46:3c:4f:55:aa:a1:9e:32:a8:d2:e9:9e:81:
84:30:eb:c3:1f:14:6c:ba:93:9b:9e:c6:66:4e:6a:17:60:5a:
c1:b4:0b:5e:d9:21:ed:19:1b:c1:23:5e:05:e0:42:8b:a0:e2:
fc:2b:a0:33:50:bd:b4:fe:2d:c3:49:c6:55:2b:20:16:f0:1c:
06:51:02:e8:5e:0e:93:39:fd:13:bb:45:b9:6b:70:e2:8e:76:
e8:dd:ea:be:1f:0a:12:78:15:93:32:fb:10:0b:eb:d6:51:7a:
f8:dc:18:4f:78:33:04:f3:15:28:d4:ca:a5:bd:4a:e6:e2:1b:
af:fb:06:a4:1a:92:2b:4e:c0:4b:2b:3c:a6:f0:02:b8:e4:35:
4d:8f:57:8c:14:f7:53:ab:3a:9a:16:94:c1:11:4f:e5:dc:c1:
0d:b7:b7:f0:d3:bc:a9:c6:7a:5d:f8:b5:35:a2:e3:0e:6d:08:
b7:3c:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 19:12:41 2026 by rpki-client