Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C73E8EE915D11F1AC6FC7CFCE1D38B0.roa
File: 3C73E8EE915D11F1AC6FC7CFCE1D38B0.roa (raw, json)
Hash identifier: hWZDmAYd5VpYHLTel5bvhKznFrjtL2PbwyGAQLhcNHQ=
Subject key identifier: 50:A3:F6:90:59:97:91:AE:8A:5B:B2:1A:33:CB:DE:5B:59:DB:35:49
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20DC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C73E8EE915D11F1AC6FC7CFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 06:08:26 +0000
ROA not before: Thu 06 Aug 2026 06:08:22 +0000
ROA not after: Sun 06 Aug 2028 06:08:22 +0000
asID: 402265
IP address blocks: 154.16.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8412 (0x20dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 06:08:22 2026 GMT
Not After : Aug 6 06:08:22 2028 GMT
Subject: CN=6a7424da-c9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:9c:0a:d4:e8:5a:1a:d8:4e:74:d4:b6:86:
98:d5:f7:12:f6:6a:dc:14:d3:3a:e0:39:ed:b3:0a:
0b:e9:55:69:7f:4e:ee:6e:06:95:c6:4c:fc:60:bc:
79:01:f8:2a:a7:87:3e:bc:cf:4d:40:ae:48:f8:2f:
82:89:3a:ac:6b:4e:b0:85:b4:df:b8:38:c9:15:f6:
96:f7:44:ce:40:ef:cc:f6:a3:78:d0:43:2d:00:67:
c9:23:f4:f4:76:f7:26:ec:b0:84:68:fa:e9:06:c3:
b1:cf:02:4c:54:5a:cb:d0:22:c9:bb:15:fb:c2:f4:
d8:3b:5e:7d:00:9f:38:0b:35:d0:6d:bd:b2:70:03:
0b:10:02:2d:16:bf:be:93:91:56:20:57:8d:c6:f8:
75:ea:07:67:7f:94:2c:7a:0c:0d:81:34:49:f9:9d:
78:0d:a7:2a:c5:92:f7:6a:f4:0a:ee:8b:5d:09:c6:
82:16:2b:88:11:bb:c4:b4:b8:ed:4c:b0:94:0a:47:
d3:50:b1:7f:71:48:d8:50:21:00:62:e3:a9:ab:34:
cc:d6:15:b2:9d:3c:01:d6:6a:0c:ac:c3:85:97:a4:
68:2b:0b:0c:bd:aa:d4:b7:12:7e:6c:39:b3:f3:1b:
39:c1:22:04:b0:0a:0e:96:81:19:95:54:d8:aa:c1:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:F6:90:59:97:91:AE:8A:5B:B2:1A:33:CB:DE:5B:59:DB:35:49
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C73E8EE915D11F1AC6FC7CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ba:dc:7c:e0:5b:15:20:03:4d:22:1b:cf:00:43:c6:a3:3c:
88:b7:6d:03:d3:52:ba:81:7a:a2:1f:a4:60:71:9d:a4:33:72:
14:f6:69:61:e1:5c:e1:50:77:86:c9:aa:70:d7:9c:f5:55:d3:
9f:95:7e:1c:71:fb:62:b3:f6:b0:40:40:7e:a4:5b:91:52:41:
4d:cd:9f:60:66:fd:61:61:12:08:ec:41:cb:0d:c1:df:7a:2f:
38:75:8f:2a:cd:d6:6a:9c:db:ef:6f:16:b5:ba:47:b7:74:83:
5c:0a:82:20:6d:47:57:b1:ad:b0:84:f2:64:04:bd:a3:8d:22:
8b:2a:c6:85:8f:78:50:ce:1a:2a:0a:35:82:6d:40:29:3d:2f:
26:97:fc:47:65:05:c8:fc:6f:57:d8:19:8c:ea:d2:cf:84:7a:
50:ba:06:e6:c4:a7:80:fe:2f:71:42:e2:01:0e:6b:f6:73:fe:
e4:cd:a8:44:af:19:f2:18:de:22:50:7d:8a:5c:53:a3:a8:2b:
33:66:4f:3f:12:e1:fb:25:61:0a:f8:73:36:a5:ae:86:d1:c6:
bf:ac:3c:dd:18:4f:9c:35:fa:cf:a0:de:0b:cb:58:42:e1:36:
b8:c7:b9:49:85:2c:25:0c:05:fd:86:fe:cc:e2:86:50:cd:ad:
e7:d2:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:53 2026 by rpki-client