Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/615332827AC911F1B7A0ECC1CE1D38B0.roa
File: 615332827AC911F1B7A0ECC1CE1D38B0.roa (raw, json)
Hash identifier: UD4t1qWE60OfdoLYIOPiHehGkMO2b2qxqbDyi+rl4LA=
Subject key identifier: D3:22:DB:F6:D4:DC:8E:00:E4:5F:8F:5C:26:3E:9E:F6:D9:8A:45:5A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2037
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/615332827AC911F1B7A0ECC1CE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:34:37 +0000
ROA not before: Wed 08 Jul 2026 12:34:32 +0000
ROA not after: Sat 08 Jul 2028 12:34:32 +0000
asID: 46337
IP address blocks: 154.16.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8247 (0x2037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:34:32 2026 GMT
Not After : Jul 8 12:34:32 2028 GMT
Subject: CN=6a4e43dd-6390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:3a:8f:4e:a4:fe:f1:c5:62:1c:27:e1:52:
00:dc:09:52:5d:84:b1:ee:c7:d0:8c:63:50:cc:46:
15:3b:72:6b:c5:14:9b:f5:d9:a5:46:c4:39:ea:ff:
28:94:88:81:11:b5:20:d4:ce:19:df:6f:a2:47:38:
bd:b6:cd:b2:e1:ad:5f:3f:e1:d0:b8:67:63:e2:08:
0e:d6:05:56:ab:0e:4b:b4:6e:38:b0:0c:83:04:b9:
08:e1:de:00:d1:97:c1:f5:b8:a7:e8:ce:77:6d:78:
da:34:9c:e0:1b:7e:98:ea:92:dd:33:ba:95:14:b9:
7a:1e:7c:0b:47:c9:6d:55:39:96:fe:05:10:cb:38:
a2:1b:34:e5:ac:9f:7a:4f:bc:52:66:62:cb:c6:1b:
00:e4:af:2a:c1:1a:75:6e:38:3a:2c:c3:44:d7:15:
e5:94:30:e6:15:72:f4:9c:9a:ce:fc:a5:41:c0:87:
a6:77:43:cc:76:b0:87:e7:ae:f3:c0:f1:d3:a6:a7:
bb:b2:f7:82:1e:a0:b7:ae:79:39:66:37:b5:d9:23:
35:41:7a:66:7b:f4:49:a8:9f:a8:11:23:2b:a1:c6:
b6:86:06:69:af:4c:34:5b:f4:b6:ae:7a:a8:1a:bf:
64:e5:fe:24:3f:f5:7d:c7:e7:cb:4d:53:1c:82:c7:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:DB:F6:D4:DC:8E:00:E4:5F:8F:5C:26:3E:9E:F6:D9:8A:45:5A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/615332827AC911F1B7A0ECC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.144.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:9d:26:68:82:45:f2:7c:7f:70:e5:ab:cc:e4:b4:51:48:ac:
e0:45:7a:48:a1:62:f0:63:b8:ac:15:0e:bc:07:4e:79:4b:01:
80:a6:a3:0d:69:05:04:35:22:22:16:7c:ae:ec:d1:bb:14:ef:
92:3d:55:e3:3e:16:cd:86:fe:a7:91:fa:c0:73:af:84:6a:a7:
05:3d:9d:27:94:b1:5f:52:0e:36:a9:af:1f:4b:6d:68:60:1a:
95:f4:49:44:53:dc:2c:78:c6:74:9c:2b:13:51:70:80:cc:d1:
a1:b7:1a:fa:3a:41:64:8b:70:e6:84:00:dc:60:df:76:f4:e4:
5d:1b:43:86:3a:1d:6c:4f:f1:db:60:28:7d:11:fd:c0:69:18:
cc:86:36:c2:34:f3:5a:38:97:6e:aa:14:d2:f5:d7:18:4f:19:
f7:3a:d4:e2:c8:93:a2:44:9a:53:90:fe:e5:04:ce:d4:66:f2:
7c:ed:98:da:7c:0b:ef:37:68:20:dc:da:3b:43:92:27:5b:ac:
c2:6d:e2:8c:71:65:2b:75:80:55:b5:21:61:63:27:57:d6:2e:
56:be:cd:20:ab:f8:13:7b:74:28:6b:cc:06:63:17:82:6c:84:
6d:ce:90:1b:57:1b:3a:ac:4d:68:b7:25:27:55:8a:f9:28:48:
50:43:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:02 2026 by rpki-client