Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C48D4127A9E11F18D8267C0CE1D38B0.roa
File: 4C48D4127A9E11F18D8267C0CE1D38B0.roa (raw, json)
Hash identifier: w1VgbfquBGHHHDLMAPy1qUnxXKsBXHqUXnN+k2CCaIk=
Subject key identifier: AC:7E:A9:B9:A7:96:07:DA:A8:74:F4:44:B9:C7:4E:4B:52:48:5F:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 202B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C48D4127A9E11F18D8267C0CE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:26:13 +0000
ROA not before: Wed 08 Jul 2026 07:26:08 +0000
ROA not after: Sat 08 Jul 2028 07:26:08 +0000
asID: 40244
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8235 (0x202b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 07:26:08 2026 GMT
Not After : Jul 8 07:26:08 2028 GMT
Subject: CN=6a4dfb95-c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:b5:28:62:bf:91:9b:ce:e1:12:09:2b:d3:
28:ba:78:21:71:ed:7c:f2:d4:0d:8a:5a:89:93:5b:
eb:73:da:d1:5b:46:c4:ea:4c:d2:fd:6f:af:8e:14:
97:c8:72:93:66:fa:35:ca:29:7b:7d:25:1d:52:d5:
51:da:c9:61:e2:13:4d:fb:17:3e:91:6b:79:21:65:
c8:cd:18:fa:b3:af:69:f8:56:85:e9:48:04:b2:ed:
a9:04:f6:d7:da:7d:8c:d9:b6:8b:45:b1:e5:51:7e:
be:10:a0:7e:1f:04:95:c2:c6:11:b2:1e:3e:4c:35:
18:de:08:69:6e:b4:51:a0:cd:09:56:cc:1b:c0:8d:
c2:bc:93:54:06:99:76:f9:30:7e:22:f1:30:73:6f:
4b:27:b6:9d:fd:04:2a:38:af:35:ba:e0:86:a1:cf:
ba:65:e4:ed:85:c1:2d:ed:7f:05:e5:74:98:55:bd:
77:f4:19:67:3b:a2:e1:86:9f:59:0e:1e:22:3f:4d:
20:95:9f:a9:65:86:75:cc:47:46:c9:f0:cf:26:3c:
5c:cc:0a:b9:2e:50:72:e4:90:11:aa:41:95:1a:57:
76:9d:e9:8b:ab:9f:9c:10:d6:1b:df:91:4f:a2:af:
ff:a4:06:bc:47:45:29:c7:d3:52:43:99:d6:c3:b4:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:A9:B9:A7:96:07:DA:A8:74:F4:44:B9:C7:4E:4B:52:48:5F:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C48D4127A9E11F18D8267C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ca:f8:ff:19:cc:8b:ee:e9:e4:56:80:ca:51:0b:e9:4f:5e:
5d:e0:3d:73:9c:b3:4c:5d:a4:0a:57:62:41:81:61:5f:39:82:
1d:bb:3c:04:72:99:7e:17:1e:ba:86:96:b7:4d:f0:38:27:1a:
3f:93:ab:01:ba:61:37:5b:3a:4e:9c:b5:9e:47:04:a8:ed:f4:
7c:7a:30:a7:77:88:63:47:62:73:22:78:c1:48:cf:3e:1d:2e:
88:40:27:f4:37:7d:ed:7f:42:08:26:07:04:f0:c9:50:80:26:
09:b8:41:b3:c7:86:95:5c:b0:39:6b:6b:d9:0d:58:f4:d4:5f:
64:40:92:8d:d8:74:29:c7:26:bf:78:9b:53:74:0e:95:1e:89:
8b:0f:93:b6:01:c5:37:d3:3a:95:a4:e2:f8:12:d4:4a:77:58:
29:5e:1c:4d:3e:7f:da:cf:05:c4:eb:7c:90:c9:0e:7d:44:59:
24:b6:ec:9a:5b:52:5b:f8:d8:5f:6f:b4:7c:1a:50:8a:64:45:
91:fe:94:80:5f:5f:15:27:c2:96:c8:ef:9b:c0:ff:b5:00:44:
39:20:09:4b:79:50:a9:a2:cc:62:20:9b:c7:76:e0:97:34:29:
a9:04:07:1b:2d:4e:19:6d:64:64:ac:8b:7b:ba:94:14:83:01:
a1:62:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:02 2026 by rpki-client