Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/502D27BA64D011F1B97DDBEFCE1D38B0.roa
File: 502D27BA64D011F1B97DDBEFCE1D38B0.roa (raw, json)
Hash identifier: ubopBhxw/bmCJDS3xkWlFAYtqXrNeXa0q5J3gOK1L0c=
Subject key identifier: 64:04:76:2F:DE:EE:83:A0:24:F4:CE:D9:20:6F:18:01:14:8F:BA:F7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FC4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/502D27BA64D011F1B97DDBEFCE1D38B0.roa
Signing time: Wed 10 Jun 2026 13:28:49 +0000
ROA not before: Wed 10 Jun 2026 13:28:44 +0000
ROA not after: Sat 10 Jun 2028 13:28:44 +0000
asID: 198487
IP address blocks: 154.16.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 13:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8132 (0x1fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 13:28:44 2026 GMT
Not After : Jun 10 13:28:44 2028 GMT
Subject: CN=6a296691-3264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:f0:a0:3e:c9:0f:75:dc:d3:a5:61:23:8e:
d1:ec:b5:1a:86:b5:18:e7:17:4d:88:fa:61:f7:af:
29:a7:77:5f:ed:8c:61:1b:a2:72:5c:dc:96:52:0b:
b0:87:b4:86:00:85:54:b0:83:a2:21:f4:4c:38:2d:
46:f8:c1:84:ef:22:4a:3d:c2:8c:6d:03:61:e0:d1:
47:b8:3f:af:62:1c:6f:38:d2:e6:c1:15:8d:58:76:
2e:d0:5c:3b:d5:6b:47:4a:41:b3:5c:00:ce:76:35:
b1:1f:f3:72:cc:34:60:00:c2:25:1a:d5:7c:60:cb:
bf:8f:1e:38:c4:29:da:83:e3:4c:a5:d0:49:01:71:
c9:22:40:a0:0f:9b:98:76:17:9e:9a:ff:0a:14:82:
7e:15:0e:c2:25:45:7b:72:b7:fc:e4:d1:04:2f:21:
5e:0c:5a:68:e1:02:c8:d7:b3:6f:7d:ac:a7:c1:fa:
d0:7b:cd:4d:8a:d8:1a:02:d0:33:f4:a1:12:46:69:
83:de:1a:82:98:af:5f:06:60:3d:0b:18:2f:d8:78:
38:1f:b7:90:86:ae:3d:16:e5:15:89:42:8f:2d:fb:
fe:e0:54:ec:ae:5d:7b:e2:ef:46:85:39:7d:d3:52:
b6:ed:06:4f:46:38:1f:8e:49:cd:3d:6e:18:84:09:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:76:2F:DE:EE:83:A0:24:F4:CE:D9:20:6F:18:01:14:8F:BA:F7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/502D27BA64D011F1B97DDBEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:6e:c1:31:b0:90:21:a0:5a:18:f1:d1:61:fa:95:69:d0:ba:
9c:1f:ee:eb:d5:2f:73:26:92:94:09:3a:17:a5:b9:eb:a0:7c:
a4:d1:51:22:30:28:3e:d5:87:17:26:8a:90:87:6b:12:a6:b8:
0f:71:fc:47:0f:58:8e:da:cd:fb:1d:df:e3:23:ee:da:66:e1:
d2:0e:c6:07:6a:55:08:b3:ab:37:5a:0d:63:d2:bf:d2:04:ea:
07:9d:59:1c:af:e5:c9:86:1d:f1:72:1e:d9:dd:34:40:63:8d:
44:c3:84:90:ac:56:fa:d7:75:37:be:03:8d:81:df:61:02:7e:
6a:8a:42:a5:47:2a:92:6b:1b:ac:c6:39:e5:0c:d5:4a:58:5d:
cc:46:f7:58:8d:30:42:7a:6e:e2:52:40:3a:fd:c2:c5:64:0f:
ad:ec:55:52:da:47:d4:25:8a:f6:8b:26:89:34:28:f4:41:c9:
db:45:46:b5:79:08:8a:7b:43:d7:be:dc:61:c5:cc:eb:12:1c:
db:6e:05:0d:a7:8b:18:da:f8:7a:2a:89:77:9e:5b:b1:71:3a:
e0:89:e0:bb:1d:f2:f6:4e:19:fc:7f:4a:67:ff:47:10:2f:01:
0b:22:91:e9:0a:fb:0f:ec:c1:12:1f:a2:3b:f1:28:a9:57:8e:
77:ce:0a:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICH8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA2MTAxMzI4NDRaFw0yODA2MTAxMzI4NDRaMBgxFjAU
BgNVBAMTDTZhMjk2NjkxLTMyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDurfCgPskPddzTpWEjjtHstRqGtRjnF02I+mH3rymnd1/tjGEbonJc3JZS
C7CHtIYAhVSwg6Ih9Ew4LUb4wYTvIko9woxtA2Hg0Ue4P69iHG840ubBFY1Ydi7Q
XDvVa0dKQbNcAM52NbEf83LMNGAAwiUa1Xxgy7+PHjjEKdqD40yl0EkBcckiQKAP
m5h2F56a/woUgn4VDsIlRXtyt/zk0QQvIV4MWmjhAsjXs299rKfB+tB7zU2K2BoC
0DP0oRJGaYPeGoKYr18GYD0LGC/YeDgft5CGrj0W5RWJQo8t+/7gVOyuXXvi70aF
OX3TUrbtBk9GOB+OSc09bhiECV0fAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZAR2
L97ug6Ak9M7ZIG8YARSPuvcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzUwMkQyN0JBNjREMDExRjFCOTdEREJFRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDAwDQYJKoZIhvcNAQEL
BQADggEBAMBuwTGwkCGgWhjx0WH6lWnQupwf7uvVL3MmkpQJOhelueugfKTRUSIw
KD7VhxcmipCHaxKmuA9x/EcPWI7azfsd3+Mj7tpm4dIOxgdqVQizqzdaDWPSv9IE
6gedWRyv5cmGHfFyHtndNEBjjUTDhJCsVvrXdTe+A42B32ECfmqKQqVHKpJrG6zG
OeUM1UpYXcxG91iNMEJ6buJSQDr9wsVkD63sVVLaR9QlivaLJok0KPRBydtFRrV5
CIp7Q9e+3GHFzOsSHNtuBQ2nixja+HoqiXeeW7FxOuCJ4Lsd8vZOGfx/Smf/RxAv
AQsikekK+w/swRIfojvxKKlXjnfOCjI=
-----END CERTIFICATE-----
Generated at Wed Jun 10 22:39:37 2026 by rpki-client