Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51B0F1B0865A11F19047ECB6CE1D38B0.roa
File: 51B0F1B0865A11F19047ECB6CE1D38B0.roa (raw, json)
Hash identifier: olMa+Eh69zzEFGJlLLdCzHBV2OAoaP9Xi6inn+ZrK3Q=
Subject key identifier: DB:B2:0A:51:52:F7:CD:BD:F8:CC:2E:EB:44:09:98:A7:E9:CD:7D:FE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 207C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51B0F1B0865A11F19047ECB6CE1D38B0.roa
Signing time: Thu 23 Jul 2026 05:49:50 +0000
ROA not before: Thu 23 Jul 2026 05:49:46 +0000
ROA not after: Sun 23 Jul 2028 05:49:46 +0000
asID: 834
IP address blocks: 154.16.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8316 (0x207c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 23 05:49:46 2026 GMT
Not After : Jul 23 05:49:46 2028 GMT
Subject: CN=6a61ab7e-91ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:68:75:13:05:b5:9b:b3:d0:90:a9:3f:bd:
4e:35:72:72:7b:c2:53:a9:48:28:bc:41:a6:1e:5d:
a2:94:d6:d0:f2:6a:b9:e2:08:fa:a5:53:b9:6d:9e:
bb:e6:e9:58:54:ea:13:da:e0:4d:d7:21:8f:aa:96:
36:36:f4:ee:1d:04:a3:ea:9c:b0:7f:8c:3b:0a:43:
5b:58:9d:37:0a:b7:15:11:63:de:d5:71:e1:8c:96:
0b:78:cd:18:74:1e:b5:e9:02:9f:08:38:ce:0e:18:
c1:f3:33:9b:13:91:d9:2d:6d:1a:a1:34:5f:d9:f1:
73:7d:f5:aa:26:7b:df:ba:b5:fc:10:3d:6c:04:12:
77:aa:3b:20:22:ac:e2:bc:a2:5e:39:fa:c3:5a:52:
76:d5:00:a0:ea:99:c6:de:12:67:ca:8c:40:61:b9:
1c:a0:65:6a:e3:7d:e8:29:c6:3b:a6:22:e7:0d:e3:
1c:35:12:dd:2d:d8:59:94:ab:0c:8d:44:4a:21:58:
b6:2a:48:20:ff:11:a0:dc:49:d8:f3:98:08:be:d5:
fd:35:cd:30:95:ae:1b:99:cf:28:87:d7:ca:c8:6b:
af:76:44:99:74:b5:ed:13:88:a3:e6:6d:21:23:b4:
48:7e:e1:43:d5:9a:fe:df:93:af:b8:d7:f5:38:d6:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:0A:51:52:F7:CD:BD:F8:CC:2E:EB:44:09:98:A7:E9:CD:7D:FE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51B0F1B0865A11F19047ECB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:58:18:b7:ce:03:6d:ab:09:94:49:13:c5:d2:8b:fd:b7:88:
38:3b:8b:e5:a1:43:1c:97:d9:ac:94:53:9b:fe:31:0f:d7:6b:
ac:a0:03:8a:19:4c:15:5c:9c:9b:e3:a3:08:d7:57:9a:11:38:
e6:f2:9a:b6:2a:97:38:4c:fc:f0:88:fa:4e:7f:35:5f:6c:48:
06:01:57:1d:fb:25:c2:76:45:b1:6f:81:74:02:73:4a:1b:1e:
17:f5:35:07:2a:6e:fb:da:48:1b:0a:4e:57:a2:00:cc:8b:94:
4f:47:fc:d0:47:7b:8c:00:94:f4:32:30:46:46:cd:75:84:ee:
ce:75:96:79:c9:25:39:0c:59:7b:64:ee:1e:31:0a:d0:b9:d6:
30:8f:b9:2a:f8:57:b2:d4:1f:93:97:c6:e7:5a:e2:5b:21:7b:
36:39:9a:b1:5a:57:75:01:23:b1:89:1b:ce:87:ff:99:70:62:
79:1a:df:41:96:2d:8e:e5:69:72:c5:bf:c8:3c:70:d7:63:e8:
c7:a0:de:63:77:75:8b:52:bf:f7:33:11:1e:9f:ea:54:33:30:
54:94:fc:c2:c7:97:54:71:e1:69:94:57:cb:42:a2:f0:df:cc:
c8:64:59:ba:80:f2:48:14:f8:fc:d4:ad:30:e3:89:d8:3e:78:
76:0d:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 10:44:14 2026 by rpki-client