Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3F4550AE85B311F1A2EB09B6CE1D38B0.roa
File: 3F4550AE85B311F1A2EB09B6CE1D38B0.roa (raw, json)
Hash identifier: zi51LoqfNed+6+3Lf2Vzb2uiwsDDrF0UgH19NwaRx1E=
Subject key identifier: 76:04:2C:B9:1A:54:74:C8:B4:8F:8F:59:0A:9E:3C:EE:6D:AD:18:A8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2071
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3F4550AE85B311F1A2EB09B6CE1D38B0.roa
Signing time: Wed 22 Jul 2026 09:53:54 +0000
ROA not before: Wed 22 Jul 2026 09:53:50 +0000
ROA not after: Sat 22 Jul 2028 09:53:50 +0000
asID: 202736
IP address blocks: 154.16.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Jul 2026 12:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8305 (0x2071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 22 09:53:50 2026 GMT
Not After : Jul 22 09:53:50 2028 GMT
Subject: CN=6a609331-b275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:79:fd:ee:46:56:09:26:d7:1f:d8:f9:c6:
e4:fc:be:96:df:b3:dd:d7:5b:a7:10:07:e4:d8:cf:
8a:51:04:21:e1:a8:e9:83:c3:15:23:54:46:0a:db:
4e:f2:f6:2f:a9:38:98:90:46:34:d3:50:50:26:be:
19:83:df:a3:4c:75:b2:e5:e0:54:86:67:24:d2:33:
55:fe:54:c1:c3:0a:99:80:e6:a0:ef:eb:dd:2f:1e:
a6:c5:71:4f:6e:40:1a:70:ba:67:31:f3:80:e9:2d:
0b:1a:87:97:91:a4:56:25:49:19:fb:f2:62:d7:c7:
26:e8:d3:42:f0:49:df:ed:3f:6e:3c:79:a3:5b:34:
0d:bd:61:35:6e:50:39:e8:d9:52:f6:f5:bf:c4:66:
97:91:d7:5f:98:cf:0e:a3:6d:86:bb:1f:4a:2e:d9:
b7:b4:34:be:93:23:4f:4f:49:0b:14:71:36:4e:ef:
85:5f:1c:00:8d:ef:59:6a:55:3f:5c:1b:74:f4:67:
c2:26:50:93:35:01:a8:5f:f8:8d:0c:31:fa:2e:4f:
a6:49:e4:35:f7:8f:8d:69:9d:41:77:84:78:d7:9c:
c4:ee:4b:de:14:c3:c7:c7:d2:28:8e:b7:3f:e7:de:
5c:33:3f:28:f3:ef:2c:b0:d5:a8:6f:bd:70:46:5c:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:2C:B9:1A:54:74:C8:B4:8F:8F:59:0A:9E:3C:EE:6D:AD:18:A8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3F4550AE85B311F1A2EB09B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.150.0/24
Signature Algorithm: sha256WithRSAEncryption
01:21:c1:09:ac:16:7b:65:3a:65:86:f7:5d:50:06:e7:87:e7:
96:59:9c:00:dd:5e:fe:a6:07:ea:fe:c9:f0:46:3f:40:d0:72:
14:98:9e:73:93:a1:15:97:f0:79:bf:ee:e4:c2:ec:6c:f3:d1:
dc:2e:a2:ef:a4:d7:6b:ee:73:66:9b:cd:dc:79:6c:94:31:b4:
a7:aa:d4:59:cd:c5:ec:d7:fc:0d:18:db:1f:54:18:ae:94:dc:
a2:a0:f7:53:8f:73:fa:99:cb:da:b4:6e:7f:88:14:52:a9:18:
c8:7a:f4:39:29:d0:39:bd:07:01:b8:b4:d2:50:36:79:68:fe:
9a:7e:1b:31:47:71:b5:2e:f9:07:95:df:bf:06:93:49:e6:70:
c3:98:97:c9:20:bc:48:87:16:4c:01:a3:53:f9:27:42:b6:f6:
05:d2:f7:e3:8c:e2:a5:21:3e:00:85:5e:ff:5a:cb:69:2c:97:
a8:ae:e1:5e:ad:e8:c2:4c:0c:37:c4:74:e0:ae:34:24:84:2c:
76:38:b9:8e:a8:30:96:6e:b1:cd:f9:a3:42:d9:ff:d4:7e:af:
5c:01:3f:5d:1f:17:54:e8:3b:dc:a2:8f:aa:98:a4:59:c6:83:
19:df:a7:4e:2d:01:c0:6d:e1:40:0f:32:0a:ea:c4:cb:f5:2f:
2f:27:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:41 2026 by rpki-client