Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/57D5CC90656311F181C5CFF2CE1D38B0.roa
File: 57D5CC90656311F181C5CFF2CE1D38B0.roa (raw, json)
Hash identifier: pEvvewlb68SqomlJLj7X6RFFfYnpQ//WOIXoTMpWdgY=
Subject key identifier: B7:39:29:50:A9:FB:3C:0E:9C:05:B7:EF:69:91:B4:32:87:DC:E0:B8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FC7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/57D5CC90656311F181C5CFF2CE1D38B0.roa
Signing time: Thu 11 Jun 2026 07:01:18 +0000
ROA not before: Thu 11 Jun 2026 07:01:13 +0000
ROA not after: Sun 11 Jun 2028 07:01:13 +0000
asID: 9009
IP address blocks: 154.127.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8135 (0x1fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 11 07:01:13 2026 GMT
Not After : Jun 11 07:01:13 2028 GMT
Subject: CN=6a2a5d3e-238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:25:39:1a:79:52:a6:60:1b:b0:26:77:b5:
1e:ce:7e:da:7f:4e:88:26:29:54:c8:60:b7:c1:2c:
ec:05:fa:a9:12:47:74:6a:40:7d:cd:70:7f:33:40:
c0:1e:f1:16:7c:e4:ee:e4:5b:14:84:a0:21:cb:18:
29:b6:5b:d8:ec:7f:b4:23:dd:9c:56:ed:c1:d0:0a:
c1:3d:bb:4d:6b:2a:74:c3:a7:6d:3b:b9:8c:6c:0d:
f3:8a:62:b3:61:01:5f:be:62:31:5e:8e:65:7b:1d:
72:ab:11:6e:e4:f7:bb:d4:37:97:af:a3:e1:18:ef:
ef:bd:0e:44:3e:dc:67:87:4f:99:cc:d9:10:91:eb:
6c:52:04:b5:e0:9a:a0:cb:de:c7:3d:e9:aa:d5:74:
f7:b1:14:ab:4c:73:e6:07:12:0c:f8:6a:96:8e:03:
a9:9e:00:43:05:35:6f:70:c2:65:a9:e9:62:02:ed:
ad:33:d6:6b:9c:41:f1:de:51:0b:5c:12:ae:a1:59:
ee:c8:df:b0:a0:1b:64:09:90:04:1f:f4:54:b2:09:
79:f6:3c:09:b7:b6:a8:02:ab:da:0a:0d:9c:fa:70:
8d:df:e1:46:de:9b:c3:32:fc:ed:b2:9d:0a:6e:12:
82:b5:e0:18:89:d3:11:f5:60:6d:71:68:e9:f6:c8:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:29:50:A9:FB:3C:0E:9C:05:B7:EF:69:91:B4:32:87:DC:E0:B8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/57D5CC90656311F181C5CFF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.49.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2b:95:56:d2:5f:c7:5a:bf:60:11:fc:75:9d:33:16:6f:b1:
c8:f3:15:60:1e:a9:22:98:dd:71:f0:64:b1:ac:c3:3b:36:3c:
c7:5d:a0:e5:c7:3a:9a:38:ae:4a:cf:a3:2c:ca:45:54:46:35:
4c:c5:6d:b9:fa:3f:70:ea:79:dc:88:b8:d6:9d:c4:79:7b:ff:
0f:65:77:c6:0e:6d:34:3e:eb:bd:b6:21:1a:1c:84:06:6e:d2:
9d:02:5c:00:ea:7d:83:72:af:93:73:5c:0e:e0:44:03:b6:77:
5a:01:21:cb:8b:d5:34:cf:e7:17:f9:a9:b7:c5:c2:9f:5a:ec:
1f:91:6b:27:4b:27:66:12:14:e7:16:eb:a7:e6:ff:f4:2f:64:
85:9b:3a:18:23:54:0f:62:c0:69:d3:a3:5a:f3:fa:a8:e3:76:
67:ea:40:d9:6d:40:cd:b3:5c:f8:59:20:f6:6e:f1:46:cd:55:
86:54:a7:02:aa:a4:96:2b:11:bc:3e:d4:39:7d:63:e0:19:ae:
27:75:f0:7c:b1:2f:5a:59:df:14:6f:74:ea:9b:1a:ff:e7:b1:
af:24:8b:5f:0b:3f:fd:11:bf:fb:33:89:f8:c8:09:c5:b9:12:
a8:68:b8:58:45:39:0a:ad:45:c7:40:7b:d7:72:0e:f9:35:e9:
08:8b:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:40:52 2026 by rpki-client