Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/62B99EFC90C911F182986ECACE1D38B0.roa
File: 62B99EFC90C911F182986ECACE1D38B0.roa (raw, json)
Hash identifier: xc+bNAoT9k7ex58HdlLe7nuByG2u/sI91AIDXdWz3ck=
Subject key identifier: E9:AD:E1:1D:64:76:80:C7:D5:55:6B:BF:54:CD:3B:86:41:17:60:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20C7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/62B99EFC90C911F182986ECACE1D38B0.roa
Signing time: Wed 05 Aug 2026 12:30:05 +0000
ROA not before: Wed 05 Aug 2026 12:30:00 +0000
ROA not after: Sat 05 Aug 2028 12:30:00 +0000
asID: 402265
IP address blocks: 154.16.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8391 (0x20c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 12:30:00 2026 GMT
Not After : Aug 5 12:30:00 2028 GMT
Subject: CN=6a732ccd-0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:c4:c6:2b:5c:66:ee:5c:10:01:be:a5:17:
bc:12:1e:9c:da:32:66:37:b2:6a:e2:61:87:ed:4f:
0b:4b:6e:17:68:8e:ca:08:76:7e:b9:8b:e6:df:f4:
4b:bd:a8:d7:09:f5:97:41:09:73:cd:63:a9:c3:7f:
61:f9:2d:ff:b8:d9:61:d8:ea:33:d5:39:67:5d:0c:
ef:e2:93:a9:a0:4d:48:76:97:98:d4:55:77:97:5e:
a0:bd:44:f3:cd:38:7d:88:d5:44:a8:ee:97:0e:f4:
77:63:0f:5f:d1:70:89:95:1f:59:1f:d2:d2:c4:69:
9c:25:7d:b2:ce:ee:cc:3d:e9:70:a0:42:73:70:7b:
b1:91:9a:57:5c:23:53:8b:02:57:c4:d2:ad:57:c0:
70:ff:9a:7f:2b:4d:5c:f7:3d:23:94:68:f4:d0:2b:
e0:cb:79:2f:62:82:9a:f4:e1:ad:bc:3a:00:ec:d6:
66:41:90:65:59:ee:fc:f9:58:29:aa:f3:77:dc:9d:
d3:2d:01:52:83:e0:2b:b3:04:06:4a:ef:07:e5:9f:
9d:4a:74:12:75:a4:a6:65:0f:c9:8d:ca:bb:d3:eb:
54:14:66:b5:aa:38:bb:8c:29:1b:9e:65:0a:4a:fb:
82:be:74:82:b1:ea:cc:3e:22:26:4c:2c:7f:5e:f5:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:E1:1D:64:76:80:C7:D5:55:6B:BF:54:CD:3B:86:41:17:60:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/62B99EFC90C911F182986ECACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f2:1a:92:17:ea:be:d2:fb:96:fe:a1:31:a0:b6:b3:cd:f2:
07:4c:a5:22:3a:d6:13:e8:e8:ee:29:04:d2:43:4f:3c:d0:30:
11:02:06:b3:17:96:d8:f3:a1:68:87:b8:4c:8a:62:b9:f3:5f:
59:31:d8:e5:f5:39:fe:65:57:0f:87:7e:d4:54:05:b6:7e:78:
f5:2f:c2:e2:e9:28:da:18:ba:39:33:fb:69:bf:fa:9d:a7:a3:
ad:d7:c6:cc:59:ca:2d:5f:d1:fd:ae:72:b1:28:80:f8:62:43:
ff:b8:e3:21:b7:52:00:81:5e:98:69:91:81:66:62:d8:1c:af:
0c:dd:04:20:37:e4:bb:de:2f:1a:c4:b6:a8:82:90:4d:7f:bd:
1e:9b:ad:6f:8b:88:4e:c8:a8:2c:9c:c6:fe:e5:09:a2:4a:4b:
8a:a0:54:9e:48:3d:58:70:33:b0:26:b5:70:e7:de:30:d2:0d:
5d:10:5d:4b:1d:6e:56:8c:9b:6d:94:49:52:b9:7d:17:65:68:
40:b1:d8:ec:4a:e5:5d:7c:01:49:55:a4:d0:ea:a8:b8:7c:10:
7b:a1:b7:dd:5a:43:32:11:79:1d:49:2c:1d:b7:0a:97:47:60:
98:c0:3a:8b:f5:12:ee:0e:c5:c0:11:1e:9b:a9:e9:0f:47:21:
fc:96:28:c5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIMcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA4MDUxMjMwMDBaFw0yODA4MDUxMjMwMDBaMBgxFjAU
BgNVBAMTDTZhNzMyY2NkLTA4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkosTGK1xm7lwQAb6lF7wSHpzaMmY3smriYYftTwtLbhdojsoIdn65i+bf
9Eu9qNcJ9ZdBCXPNY6nDf2H5Lf+42WHY6jPVOWddDO/ik6mgTUh2l5jUVXeXXqC9
RPPNOH2I1USo7pcO9HdjD1/RcImVH1kf0tLEaZwlfbLO7sw96XCgQnNwe7GRmldc
I1OLAlfE0q1XwHD/mn8rTVz3PSOUaPTQK+DLeS9igpr04a28OgDs1mZBkGVZ7vz5
WCmq83fcndMtAVKD4CuzBAZK7wfln51KdBJ1pKZlD8mNyrvT61QUZrWqOLuMKRue
ZQpK+4K+dIKx6sw+IiZMLH9e9cGRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6a3h
HWR2gMfVVWu/VM07hkEXYHYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzYyQjk5RUZDOTBDOTExRjE4Mjk4NkVDQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIAwDQYJKoZIhvcNAQEL
BQADggEBACzyGpIX6r7S+5b+oTGgtrPN8gdMpSI61hPo6O4pBNJDTzzQMBECBrMX
ltjzoWiHuEyKYrnzX1kx2OX1Of5lVw+HftRUBbZ+ePUvwuLpKNoYujkz+2m/+p2n
o63XxsxZyi1f0f2ucrEogPhiQ/+44yG3UgCBXphpkYFmYtgcrwzdBCA35LveLxrE
tqiCkE1/vR6brW+LiE7IqCycxv7lCaJKS4qgVJ5IPVhwM7AmtXDn3jDSDV0QXUsd
blaMm22USVK5fRdlaECx2OxK5V18AUlVpNDqqLh8EHuht91aQzIReR1JLB23CpdH
YJjAOov1Eu4OxcARHpup6Q9HIfyWKMU=
-----END CERTIFICATE-----
Generated at Wed Aug 5 22:57:41 2026 by rpki-client