Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4920C044918011F1BB4B391ECF1D38B0.roa
File: 4920C044918011F1BB4B391ECF1D38B0.roa (raw, json)
Hash identifier: HGPWQjE/8X69mEL50oOn9QD5RIZuZLQ4dqfl6d0663g=
Subject key identifier: 53:A5:24:98:52:0A:D2:20:18:B8:75:55:AB:AD:9E:EB:BB:63:6F:4E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4920C044918011F1BB4B391ECF1D38B0.roa
Signing time: Thu 06 Aug 2026 10:19:20 +0000
ROA not before: Thu 06 Aug 2026 10:19:16 +0000
ROA not after: Sun 06 Aug 2028 10:19:16 +0000
asID: 402265
IP address blocks: 154.16.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8417 (0x20e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 10:19:16 2026 GMT
Not After : Aug 6 10:19:16 2028 GMT
Subject: CN=6a745fa8-1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:8b:55:b5:48:11:41:3c:49:e3:52:bb:38:
fc:3a:d3:e7:f5:4a:59:45:0a:58:e0:55:bf:0d:cb:
69:05:73:eb:d5:3e:f3:a3:97:3c:fa:17:75:ba:ec:
37:bc:e4:ce:d8:f3:10:f0:0e:60:c3:58:0d:ce:cc:
43:8a:cd:e9:2b:7c:72:f0:47:c0:11:09:84:a9:5c:
45:b0:f9:26:0a:ca:bd:04:c4:7e:5c:e6:15:98:d1:
bd:8a:be:75:be:d0:8c:4a:43:9a:20:11:62:ee:90:
da:e7:97:21:d3:ca:ed:3d:a9:f0:00:fd:85:b1:eb:
d6:c2:da:9c:4d:90:a0:56:7d:45:22:2c:4b:a3:dd:
bf:1b:c5:1e:b3:f9:04:18:f0:1c:49:d3:34:97:b8:
39:b6:27:fc:7a:c3:cd:ac:1b:b6:f1:e4:7b:3f:94:
11:75:5d:45:e2:33:5a:da:14:b2:e5:a3:b3:7c:b0:
07:cf:ba:1c:a5:03:17:1e:09:cc:b1:0e:00:cd:52:
95:ca:ae:46:f5:44:20:5f:b2:19:1c:4e:c8:15:48:
1d:ab:8d:5e:80:25:f6:0a:aa:45:e6:0f:f6:d3:c8:
5b:42:32:80:b5:e7:e1:11:35:c3:a5:36:d1:98:0f:
d6:4a:1f:8c:0d:7d:c6:d7:e8:65:6b:4f:bb:7d:e5:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A5:24:98:52:0A:D2:20:18:B8:75:55:AB:AD:9E:EB:BB:63:6F:4E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4920C044918011F1BB4B391ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8b:3a:8d:da:06:2d:e6:2c:b1:d5:ba:f2:63:6c:f4:8f:8c:
30:8a:df:09:c2:24:3b:cd:c4:1c:e6:c5:7d:b9:03:87:27:93:
c4:82:04:64:38:53:c5:fb:d3:9e:c3:d6:89:a4:ef:65:93:98:
af:01:76:62:57:2b:86:42:c1:d4:9c:0c:5a:9c:54:57:92:60:
d0:81:8d:57:29:38:5f:75:9b:a8:9f:5a:50:3c:33:b0:be:5f:
33:33:c3:5c:0c:cb:bc:ef:38:f2:ca:71:ce:a0:1e:c1:9b:74:
3d:56:cb:39:d7:62:3d:c0:cc:74:dc:00:e2:4b:cc:7a:4b:b0:
0e:b0:ec:46:dd:6a:55:ca:cc:b7:66:5d:9d:4e:7f:9f:99:d1:
5d:2c:83:d8:26:c0:ac:23:e5:b9:fc:a4:5a:04:d4:79:76:b3:
7f:e0:e1:a1:2c:b8:81:29:b1:92:5b:96:cc:0c:63:3e:31:dd:
f7:4c:36:2c:b4:64:29:5b:ee:67:32:0d:5b:65:36:b6:14:f0:
50:f9:2c:65:ab:58:c7:12:35:bb:a4:f1:86:7a:eb:1a:ac:bc:
f4:fb:35:e5:52:78:79:4e:fb:f8:cc:ab:1d:86:d7:6f:92:8c:
b5:d4:67:90:81:a4:29:aa:38:1b:e7:5f:8a:19:00:07:32:b3:
f4:db:58:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 00:29:20 2026 by rpki-client