Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/59470028484211F1BD2E09C8CE1D38B0.roa
File: 59470028484211F1BD2E09C8CE1D38B0.roa (raw, json)
Hash identifier: hykFN21lXOuhUm1/MfupVqaT1c5zhCxkXjoeka8OKQ0=
Subject key identifier: 11:81:EE:7D:FF:81:CC:35:91:37:72:79:3D:99:DE:B8:FB:41:59:54
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F0A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/59470028484211F1BD2E09C8CE1D38B0.roa
Signing time: Tue 05 May 2026 05:22:03 +0000
ROA not before: Tue 05 May 2026 05:21:58 +0000
ROA not after: Fri 05 May 2028 05:21:58 +0000
asID: 834
IP address blocks: 154.16.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7946 (0x1f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 5 05:21:58 2026 GMT
Not After : May 5 05:21:58 2028 GMT
Subject: CN=69f97e7b-3b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:a7:fd:03:8c:fe:2d:34:24:78:fd:aa:b0:
b0:70:6c:e0:cb:9d:b6:da:c0:fd:c3:14:a0:c3:cc:
ca:5e:81:ce:20:47:ce:78:22:df:ad:64:31:b5:9c:
b9:32:50:3d:ce:6b:d7:ea:c6:b6:10:a5:0d:9c:24:
ab:b1:3c:2a:95:57:e4:8d:ca:70:7b:af:1c:52:25:
73:91:a8:b9:c6:59:5a:ce:a3:00:42:cf:97:bb:a0:
76:f0:ad:1d:cd:fc:4f:22:b0:69:6c:f7:ff:2c:9b:
ed:9a:0b:94:b4:83:b9:49:96:8e:d1:58:27:8c:be:
db:15:48:3b:ba:df:38:48:72:84:4a:f0:d0:fa:00:
fa:7c:59:13:87:51:f2:47:58:74:7c:b2:cf:34:5e:
9b:f5:de:35:ce:ef:b6:32:86:2e:ed:af:1f:a9:a2:
5e:66:48:6e:01:e6:30:89:7c:b7:b5:b6:da:7f:cf:
82:64:bd:eb:44:f5:53:2d:fe:8d:64:37:fb:87:fd:
3b:58:6e:b5:e0:99:c5:0c:37:d1:60:f1:8e:71:c5:
4d:41:46:36:0f:6a:26:2b:04:2e:b3:b7:1d:68:f5:
46:0e:de:29:6b:b4:4c:91:30:f4:3a:26:a8:c1:ad:
75:bb:68:df:76:4f:3c:51:e3:69:9c:40:c0:3b:15:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:81:EE:7D:FF:81:CC:35:91:37:72:79:3D:99:DE:B8:FB:41:59:54
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/59470028484211F1BD2E09C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.128.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1f:b3:02:d7:40:45:1e:83:4e:ca:41:72:32:41:79:c3:0d:
e5:a8:7a:d6:44:4b:7e:93:50:ec:86:8d:11:84:49:72:04:39:
69:5a:ab:17:02:1e:20:fb:a2:1d:54:0f:4e:c8:6f:ad:a5:d5:
5a:ca:f1:6b:45:a6:13:ce:80:b7:cc:e7:24:13:d1:04:61:f4:
cd:ee:15:ce:4a:d3:b1:9b:d0:b8:7e:84:a9:e4:fb:65:9f:72:
de:55:5f:a3:ec:5c:ff:49:41:a0:f7:b1:d5:8b:39:8d:04:17:
b2:f1:d1:14:91:1a:e4:30:92:39:78:45:a8:f1:00:1b:fa:a5:
b9:f2:66:09:24:39:b6:9c:05:93:f8:5a:3e:86:fe:e7:0a:e1:
3a:eb:de:6d:58:03:3c:f3:b5:6e:e1:2d:5b:a1:1e:7d:86:21:
a1:ac:91:58:db:1c:e4:e1:8f:eb:93:22:8c:9a:41:cd:82:ae:
9e:84:2a:a7:67:1e:27:70:d8:64:7d:78:f4:1b:e0:ae:36:12:
b3:ab:75:b6:e9:5e:42:ea:00:4a:a7:b5:60:40:59:79:0b:f9:
b6:3e:1f:ab:1c:0f:e0:be:e5:4b:5a:a7:d8:d9:d5:86:a0:e1:
24:b8:75:52:d2:7c:c6:29:2f:5f:0a:97:b6:46:6b:8e:e6:d6:
24:ad:ee:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHwowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA1MDUwNTIxNThaFw0yODA1MDUwNTIxNThaMBgxFjAU
BgNVBAMTDTY5Zjk3ZTdiLTNiOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvCKf9A4z+LTQkeP2qsLBwbODLnbbawP3DFKDDzMpegc4gR854It+tZDG1
nLkyUD3Oa9fqxrYQpQ2cJKuxPCqVV+SNynB7rxxSJXORqLnGWVrOowBCz5e7oHbw
rR3N/E8isGls9/8sm+2aC5S0g7lJlo7RWCeMvtsVSDu63zhIcoRK8ND6APp8WROH
UfJHWHR8ss80Xpv13jXO77Yyhi7trx+pol5mSG4B5jCJfLe1ttp/z4JkvetE9VMt
/o1kN/uH/TtYbrXgmcUMN9Fg8Y5xxU1BRjYPaiYrBC6ztx1o9UYO3ilrtEyRMPQ6
JqjBrXW7aN92TzxR42mcQMA7FW8lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEYHu
ff+BzDWRN3J5PZneuPtBWVQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU5NDcwMDI4NDg0MjExRjFCRDJFMDlDOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIAwDQYJKoZIhvcNAQEL
BQADggEBAEEfswLXQEUeg07KQXIyQXnDDeWoetZES36TUOyGjRGESXIEOWlaqxcC
HiD7oh1UD07Ib62l1VrK8WtFphPOgLfM5yQT0QRh9M3uFc5K07Gb0Lh+hKnk+2Wf
ct5VX6PsXP9JQaD3sdWLOY0EF7Lx0RSRGuQwkjl4RajxABv6pbnyZgkkObacBZP4
Wj6G/ucK4Trr3m1YAzzztW7hLVuhHn2GIaGskVjbHOThj+uTIoyaQc2Crp6EKqdn
Hidw2GR9ePQb4K42ErOrdbbpXkLqAEqntWBAWXkL+bY+H6scD+C+5Utap9jZ1Yag
4SS4dVLSfMYpL18Kl7ZGa47m1iSt7uI=
-----END CERTIFICATE-----
Generated at Wed May 6 04:03:33 2026 by rpki-client