Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4D3D177A7ACB11F1B5245CCECE1D38B0.roa
File: 4D3D177A7ACB11F1B5245CCECE1D38B0.roa (raw, json)
Hash identifier: 8VaZOrO81g1qWIwpva57Pg8WzAsC08cgnrz0xcZ/FxQ=
Subject key identifier: A5:8B:29:A8:2C:35:47:76:89:C5:BA:CB:CF:FA:95:F3:0A:51:92:86
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 204C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4D3D177A7ACB11F1B5245CCECE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:48:22 +0000
ROA not before: Wed 08 Jul 2026 12:48:17 +0000
ROA not after: Sat 08 Jul 2028 12:48:17 +0000
asID: 212238
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8268 (0x204c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:48:17 2026 GMT
Not After : Jul 8 12:48:17 2028 GMT
Subject: CN=6a4e4716-e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:09:02:d1:66:0a:9f:d0:54:3d:10:37:02:
89:2b:90:1c:77:96:fd:22:c4:c5:59:81:58:24:f5:
6e:b9:e0:d5:28:83:83:6e:f4:71:ee:15:75:9e:06:
57:41:4a:52:df:6f:88:4b:4b:df:a4:d8:c0:fe:7b:
e9:04:e9:cf:0c:d0:78:3e:97:2b:9d:db:bb:4b:d3:
37:81:31:1a:fd:bd:9a:b1:e6:f3:d0:70:9d:ec:31:
5d:ad:be:1d:89:27:14:9f:78:c9:a4:7d:d6:2a:f3:
ed:b1:4f:9e:ce:02:04:5a:27:e6:03:fa:49:34:3b:
1f:8f:0f:35:a3:a8:97:73:82:e3:cd:f2:38:31:af:
22:ff:de:6a:7a:af:e9:42:36:fb:b3:b7:3d:ef:2f:
7d:f7:6d:56:35:81:c0:71:60:56:b0:e4:e5:93:ac:
7c:f6:cc:65:1e:12:7c:2d:87:a4:fc:26:93:b9:fa:
7a:12:62:fa:3b:84:8e:aa:88:29:e9:58:4d:a2:c4:
bc:1c:25:c0:df:1b:fd:ec:74:c3:a7:1e:5c:60:e3:
16:4e:c0:fb:d0:db:52:9f:88:d7:7a:b9:d4:54:de:
09:94:0b:3f:6e:51:6f:6e:e7:91:a2:9a:a6:ad:b6:
48:7e:36:ec:c0:8e:de:a9:8e:d8:d5:63:74:17:24:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:29:A8:2C:35:47:76:89:C5:BA:CB:CF:FA:95:F3:0A:51:92:86
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4D3D177A7ACB11F1B5245CCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:55:f7:d4:84:33:c4:19:34:8b:0b:f9:ae:2e:3a:2c:07:9b:
ae:61:74:cd:5c:bd:b6:c4:59:f7:e6:76:a3:e8:9a:2a:07:9f:
ff:0d:01:69:29:fa:99:66:85:2b:41:c5:6d:77:99:2c:d3:85:
22:81:0d:f2:6c:0e:d2:1c:7c:5b:af:1f:87:49:f5:4b:f9:fe:
cb:9c:95:8a:12:f3:85:74:df:24:b4:b3:42:ca:85:1c:33:a5:
6a:b5:df:dc:1e:e5:85:d2:a7:c8:6d:c2:d9:94:22:47:f4:a8:
9b:68:ee:ad:00:4b:17:07:14:a6:90:57:a8:05:b1:d0:b8:8d:
6a:4b:5a:13:0c:20:19:1d:e9:bb:c6:cf:6b:3a:05:ee:cc:ae:
19:6a:95:e1:4c:14:4f:6b:8f:c0:7f:03:ef:44:53:88:51:2e:
cb:00:d8:5c:aa:47:77:a9:de:2e:67:b6:8e:f7:b1:4d:9d:1e:
51:b4:be:e5:da:66:69:3d:d9:3c:af:23:23:b7:7a:83:97:7f:
0b:8b:cb:2c:2e:a9:10:66:b9:8b:52:04:c1:be:bf:7f:01:fb:
73:3e:b0:2d:19:5d:2f:59:a6:bf:af:ba:be:b2:bc:cb:ff:fb:
5a:6e:3d:9c:c2:8a:15:b0:4f:be:75:0e:19:c3:b3:13:5f:ba:
25:a7:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:02 2026 by rpki-client