Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/490FC88A915C11F1852B96CBCE1D38B0.roa
File: 490FC88A915C11F1852B96CBCE1D38B0.roa (raw, json)
Hash identifier: EQ/Isff8NtexWj2p7keORTfLhFW8DAIlzQkbDzhWzkY=
Subject key identifier: 42:21:39:AA:FF:4C:6A:52:F7:05:D4:53:51:65:FB:7E:FE:68:0F:AD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20D6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/490FC88A915C11F1852B96CBCE1D38B0.roa
Signing time: Thu 06 Aug 2026 06:01:38 +0000
ROA not before: Thu 06 Aug 2026 06:01:34 +0000
ROA not after: Sun 06 Aug 2028 06:01:34 +0000
asID: 402265
IP address blocks: 154.16.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8406 (0x20d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 06:01:34 2026 GMT
Not After : Aug 6 06:01:34 2028 GMT
Subject: CN=6a742342-c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:51:84:40:92:54:9d:01:bb:c8:d7:4b:9e:
1b:81:6d:fb:fc:79:fc:80:ad:3a:c4:05:31:6c:cc:
f5:d2:4a:00:ce:1e:7d:3f:df:81:cc:52:a6:84:a7:
94:4d:dd:69:a0:24:5c:16:4b:f2:47:69:36:dd:34:
25:17:26:be:32:75:85:25:26:44:7c:99:84:e3:ac:
ae:e3:77:10:3d:5c:bd:5a:61:51:45:dc:71:9e:d9:
a3:bd:66:33:bc:31:8b:65:a8:48:f2:b6:7b:91:f5:
d1:0a:a8:db:d4:f8:a4:29:28:4a:37:3f:b4:aa:64:
33:f9:63:f4:12:6a:11:bc:47:50:35:66:b8:d5:d5:
ae:6f:3b:73:c5:85:10:29:18:32:cc:6c:f1:20:f9:
34:d6:7a:e8:42:4e:66:01:87:49:25:52:4d:1d:2e:
24:c0:6c:7c:c9:a8:d1:fd:77:ea:d2:17:c8:b0:e5:
65:31:62:0b:69:e3:69:80:c0:1f:4a:7b:dc:d2:f0:
e0:11:a1:9c:16:4c:63:10:1c:c4:1b:47:0e:80:c0:
3f:3f:8d:09:64:18:55:6d:b6:a1:a5:7a:09:d4:d5:
85:86:84:4a:ed:99:b1:81:67:be:c3:2a:45:ed:23:
40:14:2c:f8:43:36:e9:85:75:f7:1f:e3:ca:81:20:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:39:AA:FF:4C:6A:52:F7:05:D4:53:51:65:FB:7E:FE:68:0F:AD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/490FC88A915C11F1852B96CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.130.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bb:a2:bd:43:09:7d:db:5d:61:ee:d8:16:d7:2f:bb:4f:cb:
1a:98:8e:7e:0c:03:ef:18:d5:46:36:63:46:e8:f3:fd:20:64:
e4:b2:91:61:4c:f2:62:25:0e:1e:9f:2e:b6:30:8a:00:8b:fe:
db:a4:1b:a1:00:6b:4b:70:83:6b:c0:4c:5a:ce:d3:69:d8:f9:
ba:17:4f:70:1e:75:2c:5c:61:b7:60:87:b0:27:d9:ce:a6:65:
13:a2:a1:80:a6:79:9f:83:a7:af:55:b5:0d:54:73:1d:29:07:
6d:91:26:ed:c5:c4:86:bc:a2:37:a9:88:87:a3:19:0c:28:ef:
49:25:41:22:a9:f0:7f:a8:2e:f1:5a:ed:66:b8:67:5d:b4:76:
71:c4:f6:5c:23:c6:a7:c3:1b:2d:3c:cc:d6:b1:ad:8b:d8:46:
21:c6:fd:58:e6:7f:db:41:2d:d1:a3:0a:f2:a2:4c:98:5f:c2:
82:30:21:db:d2:6d:7a:86:2d:f0:92:61:56:cf:e0:f5:e7:d7:
53:36:a1:e9:f9:f1:c1:b5:51:75:dc:54:9c:ba:0a:07:85:91:
32:b3:b5:8a:f9:e6:0a:4b:56:b3:06:6c:d0:bb:bb:9e:ae:dd:
b1:fa:70:88:ef:ee:4e:5c:b7:bd:d6:9f:27:33:ec:0b:a1:3c:
63:90:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:52 2026 by rpki-client