Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C6DDC086EF511F18E0E57DDCE1D38B0.roa
File: 4C6DDC086EF511F18E0E57DDCE1D38B0.roa (raw, json)
Hash identifier: W6PqpkkTRn1CkxYs7z0h5UOHUjLxG0UJaEOlVFos20g=
Subject key identifier: 55:7F:2B:9E:64:9E:73:A8:E1:13:48:CE:27:00:46:F3:17:7B:B5:8D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FF7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C6DDC086EF511F18E0E57DDCE1D38B0.roa
Signing time: Tue 23 Jun 2026 11:18:46 +0000
ROA not before: Tue 23 Jun 2026 11:18:41 +0000
ROA not after: Fri 23 Jun 2028 11:18:41 +0000
asID: 212335
IP address blocks: 154.16.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 11:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8183 (0x1ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 23 11:18:41 2026 GMT
Not After : Jun 23 11:18:41 2028 GMT
Subject: CN=6a3a6b96-b9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:a0:b0:77:16:01:74:05:ce:f5:eb:c4:2c:
cb:de:44:07:18:2e:2f:45:3a:90:4b:65:54:15:8c:
e0:30:0d:c0:26:4f:34:fd:a0:5e:6f:05:3b:1a:1b:
7b:22:6e:f4:bc:7b:94:66:70:19:67:77:9a:87:11:
66:f7:6e:4f:d0:6c:cb:3a:31:02:69:56:4b:f8:3c:
41:bb:58:ec:08:16:88:74:79:fd:50:59:df:1f:a1:
c1:46:be:c0:b4:b5:b3:86:8b:ce:5d:8f:89:14:76:
2b:83:0d:69:c2:19:f6:8f:fe:d6:d5:e1:63:fd:a1:
a1:37:8a:52:3a:0b:32:9c:d7:cf:51:24:a0:eb:64:
f9:2e:26:b4:de:c1:e9:25:92:1f:f5:4e:e8:f3:8e:
ab:27:51:71:d3:64:4e:be:bc:93:93:01:17:29:b4:
15:3e:1f:7e:a8:45:ce:8b:12:2d:bd:75:ac:64:18:
0c:14:b0:4a:cf:ce:1c:b3:7d:4e:a8:3b:10:68:a8:
6d:c4:8d:19:c2:ec:6d:97:61:b9:9a:e1:bb:b9:89:
cd:70:fd:3b:f5:da:b0:90:c6:13:6b:2a:db:69:23:
33:80:d0:98:b3:91:c5:7e:e8:bc:d1:32:b6:d6:1f:
27:36:44:4c:d1:02:61:da:a5:e6:f6:a3:6d:fd:62:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:2B:9E:64:9E:73:A8:E1:13:48:CE:27:00:46:F3:17:7B:B5:8D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C6DDC086EF511F18E0E57DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.46.0/24
Signature Algorithm: sha256WithRSAEncryption
87:81:50:43:08:82:83:3d:37:76:3a:34:a4:91:7f:ec:77:e7:
41:40:be:5b:7e:9b:21:11:64:e7:06:55:5a:e8:cc:53:0b:43:
3e:61:62:cf:c9:a8:11:fe:a5:f1:93:c6:f0:a5:b0:a5:f8:75:
c8:38:40:15:00:e6:7f:fa:54:c3:fe:cf:88:d8:4d:8e:2a:ea:
35:ae:6a:b5:6f:3f:e7:9c:86:ed:77:45:2d:73:4b:c2:f2:66:
1c:cd:50:49:e5:62:99:09:64:94:17:a4:d6:47:4c:2d:ba:92:
be:65:74:1e:10:0f:c9:8b:b1:44:a7:6b:a7:62:1c:70:10:ca:
56:b2:e6:4c:81:a5:8b:4a:d1:21:98:56:f2:88:0e:17:80:53:
3d:98:7f:4d:1c:56:9a:10:b2:e1:69:91:61:6e:10:d7:c5:b4:
ae:84:9a:13:8e:d0:ad:6c:36:1f:68:5a:d6:69:6b:f4:25:5f:
18:8f:f2:0d:ea:0b:99:d2:1b:18:03:aa:8e:fd:aa:68:59:98:
3e:3a:68:27:36:14:9c:a2:5d:14:d7:dc:c7:c2:bd:63:37:ae:
19:a2:d4:85:d1:3d:49:45:dc:ab:f3:4b:94:d2:eb:46:4e:60:
b0:b8:fa:74:41:f1:e2:64:73:ed:44:9f:18:0c:bf:d3:d3:ec:
b2:52:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 19:52:01 2026 by rpki-client