Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56A0F67A75F711F197D208FBCE1D38B0.roa
File: 56A0F67A75F711F197D208FBCE1D38B0.roa (raw, json)
Hash identifier: W3ZXqhP0UVY4Q/XMPOBDm5E7FB90RsupfosYYuQJH+Q=
Subject key identifier: C2:1B:52:5E:2F:ED:7F:3C:66:B0:D5:B5:F6:1B:3C:D4:6B:D2:E3:D6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2018
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56A0F67A75F711F197D208FBCE1D38B0.roa
Signing time: Thu 02 Jul 2026 09:21:00 +0000
ROA not before: Thu 02 Jul 2026 09:20:55 +0000
ROA not after: Sun 02 Jul 2028 09:20:55 +0000
asID: 834
IP address blocks: 154.127.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 Jul 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8216 (0x2018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 2 09:20:55 2026 GMT
Not After : Jul 2 09:20:55 2028 GMT
Subject: CN=6a462d7c-e8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:17:46:12:bb:00:f5:86:76:5d:ba:3f:f2:
08:9b:89:1f:93:9e:48:58:b7:b5:6f:58:f3:c5:ee:
c5:19:75:a0:bc:9b:e6:bd:98:ef:9c:ec:f1:ec:d7:
da:36:57:29:bc:a3:a2:37:17:80:b1:ba:f1:ab:10:
e0:c9:36:f8:c8:43:d5:79:ae:9f:52:dd:21:2e:28:
62:fc:c5:83:71:fc:72:4b:d6:cd:1d:97:1e:c1:82:
f8:f7:14:1c:5b:2e:a9:f3:5a:db:83:11:23:c7:23:
19:08:63:0a:49:4a:11:85:85:bb:6f:c6:7b:83:1c:
59:3f:e6:de:9e:c4:75:cf:e8:a2:46:f8:2c:99:92:
b8:7b:26:c8:ab:03:59:48:0c:71:38:96:45:c2:f7:
bc:22:5e:d3:d5:fc:30:7b:ee:9c:36:df:d3:bd:93:
d1:82:8d:9b:df:12:88:ff:b3:b8:b6:48:54:a8:2b:
fe:20:d4:73:17:61:da:f6:74:dc:94:ed:3c:dd:b7:
56:0b:95:27:b6:e2:9b:e2:d9:ff:aa:ce:29:b4:6c:
f8:e4:18:33:0b:a8:f7:52:7f:14:0f:e2:65:55:2b:
dc:55:6b:3a:80:1d:f1:86:a2:fc:49:23:41:b4:ac:
86:88:94:49:1f:79:69:60:4a:7b:3b:2e:37:b3:8a:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:52:5E:2F:ED:7F:3C:66:B0:D5:B5:F6:1B:3C:D4:6B:D2:E3:D6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56A0F67A75F711F197D208FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:16:b1:78:c1:3b:a2:a5:94:50:8a:2d:92:b0:65:8d:77:a9:
38:75:11:35:8e:b6:81:3c:d6:4d:87:0e:8e:fa:8b:16:5e:b2:
7c:f6:2e:72:40:13:14:c8:5d:0b:fb:dc:65:f3:e0:06:c2:66:
a3:04:1b:e7:01:ff:fc:73:33:ff:50:6d:b6:32:26:cc:ca:e1:
97:a2:11:a8:0c:cb:c7:c4:22:a7:5b:a9:81:24:a1:88:13:57:
80:1d:bb:35:a5:ae:ba:db:0c:c3:0a:36:ce:9d:fe:02:67:25:
b5:44:2d:53:33:69:28:b4:bc:f4:18:0d:d0:a5:32:7f:dc:40:
d7:4d:66:6f:7b:14:d4:92:ab:3e:a9:db:0e:44:36:f3:e5:89:
a9:84:14:55:b3:3f:9d:30:4d:31:b2:8b:62:57:64:01:92:ad:
bc:58:48:76:48:49:7a:14:e2:51:68:0d:cd:19:1d:92:1e:b4:
4a:b7:f9:08:bb:94:db:c9:4a:c3:8e:70:d7:8f:bf:c5:28:a8:
67:e0:7f:b2:4f:37:ce:14:ad:1d:70:a9:ff:ab:30:ff:7b:7b:
1b:2b:55:54:1d:e7:ed:00:05:23:21:a9:a4:24:4f:6c:d5:a9:
8b:66:31:25:24:a4:1c:54:9b:9f:ac:87:fe:2f:42:ba:49:69:
be:46:81:58
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIBgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MDIwOTIwNTVaFw0yODA3MDIwOTIwNTVaMBgxFjAU
BgNVBAMTDTZhNDYyZDdjLWU4ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPxRdGErsA9YZ2Xbo/8gibiR+TnkhYt7VvWPPF7sUZdaC8m+a9mO+c7PHs
19o2Vym8o6I3F4CxuvGrEODJNvjIQ9V5rp9S3SEuKGL8xYNx/HJL1s0dlx7Bgvj3
FBxbLqnzWtuDESPHIxkIYwpJShGFhbtvxnuDHFk/5t6exHXP6KJG+CyZkrh7Jsir
A1lIDHE4lkXC97wiXtPV/DB77pw239O9k9GCjZvfEoj/s7i2SFSoK/4g1HMXYdr2
dNyU7Tzdt1YLlSe24pvi2f+qzim0bPjkGDMLqPdSfxQP4mVVK9xVazqAHfGGovxJ
I0G0rIaIlEkfeWlgSns7Ljezis3bAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUwhtS
Xi/tfzxmsNW19hs81GvS49YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU2QTBGNjdBNzVGNzExRjE5N0QyMDhGQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzMwDQYJKoZIhvcNAQEL
BQADggEBADMWsXjBO6KllFCKLZKwZY13qTh1ETWOtoE81k2HDo76ixZesnz2LnJA
ExTIXQv73GXz4AbCZqMEG+cB//xzM/9QbbYyJszK4ZeiEagMy8fEIqdbqYEkoYgT
V4AduzWlrrrbDMMKNs6d/gJnJbVELVMzaSi0vPQYDdClMn/cQNdNZm97FNSSqz6p
2w5ENvPliamEFFWzP50wTTGyi2JXZAGSrbxYSHZISXoU4lFoDc0ZHZIetEq3+Qi7
lNvJSsOOcNePv8UoqGfgf7JPN84UrR1wqf+rMP97exsrVVQd5+0ABSMhqaQkT2zV
qYtmMSUkpBxUm5+sh/4vQrpJab5GgVg=
-----END CERTIFICATE-----
Generated at Thu Jul 2 13:02:22 2026 by rpki-client