Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E7E3026494711F19BBECDF2CE1D38B0.roa
File: 3E7E3026494711F19BBECDF2CE1D38B0.roa (raw, json)
Hash identifier: Vm6tswM82VBTyFBi4gQEaXt6EuDXvHN5ktZ0kIKJ0KU=
Subject key identifier: BE:2D:03:89:4D:AB:CC:A0:F1:36:F5:1F:96:0C:15:B6:BC:B7:10:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F18
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E7E3026494711F19BBECDF2CE1D38B0.roa
Signing time: Wed 06 May 2026 12:29:37 +0000
ROA not before: Wed 06 May 2026 12:29:32 +0000
ROA not after: Sat 06 May 2028 12:29:32 +0000
asID: 9009
IP address blocks: 154.16.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7960 (0x1f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 6 12:29:32 2026 GMT
Not After : May 6 12:29:32 2028 GMT
Subject: CN=69fb3431-85b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:1b:ec:3e:b9:e0:5b:4f:23:26:d6:21:f6:
55:c2:fd:15:82:01:6c:3b:8c:d7:ad:82:90:3d:1a:
76:44:1e:d3:a9:d0:fb:b2:38:18:26:46:fa:7f:cc:
e4:7b:97:b5:8d:bb:0e:89:e0:4c:07:43:5f:30:69:
3d:dd:24:3d:be:d3:d9:fd:59:4a:bc:a5:4e:d3:25:
e5:c9:83:42:ec:09:44:3f:f9:7d:c0:95:59:1e:cd:
a5:ca:9d:26:8f:d9:d2:08:4b:b3:2c:dc:e9:ae:63:
5b:e6:95:1c:db:df:d0:72:7e:e3:46:b9:e7:db:da:
86:50:b5:5e:5c:61:b8:d4:11:d9:f3:8b:73:84:85:
8f:01:5e:fd:57:1c:05:1e:2a:2c:6a:84:a7:ea:83:
e7:4f:82:41:bd:d3:51:fd:5e:2c:da:2b:56:4f:2f:
63:6f:a4:37:80:6c:35:9f:16:79:f9:50:dd:ed:92:
e2:72:53:e6:52:9d:f4:9e:d0:0e:3b:01:e1:5c:19:
7a:1d:b8:44:20:85:a5:58:5c:1b:86:9c:0a:1a:36:
7e:19:f1:ed:b5:e4:cc:ca:01:39:23:10:80:f2:d4:
8e:d9:c4:13:62:8f:20:8c:2c:7b:3c:a1:90:c1:10:
06:b4:cd:f7:f2:8b:8a:34:f9:82:ba:31:03:d1:26:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:03:89:4D:AB:CC:A0:F1:36:F5:1F:96:0C:15:B6:BC:B7:10:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E7E3026494711F19BBECDF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:56:ca:6d:2f:f4:4a:9e:b8:c5:a3:a7:2a:5f:d8:4c:c5:af:
db:0b:d7:6b:c8:76:a4:b0:72:fe:20:a7:be:b3:c8:fb:41:7f:
c9:d7:d4:9a:8a:b0:9a:89:c7:7e:b6:9a:41:44:4b:ea:a3:e8:
14:4c:62:8d:3c:45:c3:f1:7a:8c:a3:b3:13:49:30:38:cf:ec:
36:83:e1:fd:70:96:2d:19:7e:11:86:71:2c:ae:69:97:16:0a:
ba:03:53:5b:3f:35:ff:ee:b4:ca:e8:20:8c:bc:41:ff:ef:1f:
72:fe:9e:e0:cc:f9:44:de:33:8c:23:8a:cf:67:2b:ed:05:6c:
4e:ce:83:f9:fa:49:2b:5c:16:c8:bc:09:01:7d:a5:24:cf:d0:
77:4e:1d:c9:c5:d5:22:ee:d0:60:be:07:6e:7c:60:f4:46:ca:
69:7f:12:5c:f0:79:87:b4:a5:d3:b9:57:df:a9:4f:3b:a5:64:
1b:c6:2b:8f:a5:99:ab:79:ee:b2:fa:88:be:fd:ef:45:d9:99:
d5:71:d7:ca:fe:c1:fa:22:03:35:d7:2c:2c:67:a5:67:5c:bc:
df:9d:ef:f3:c0:a0:27:6d:fe:df:d0:8a:2d:44:ec:fd:87:d6:
08:01:9c:52:da:fd:13:b3:da:a7:ff:4a:90:3c:0e:7f:b2:c2:
c5:f4:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 04:54:43 2026 by rpki-client