Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66783A4E8A7011F1BEDBACA2CE1D38B0.roa
File: 66783A4E8A7011F1BEDBACA2CE1D38B0.roa (raw, json)
Hash identifier: 9kcABFjiGhwLl4X1uifr8yHr6ZXzSmtR9BDjeTi+p5E=
Subject key identifier: 7E:3F:F5:79:34:39:0B:F1:5D:E9:DF:DC:32:04:F7:05:23:22:89:E1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2089
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66783A4E8A7011F1BEDBACA2CE1D38B0.roa
Signing time: Tue 28 Jul 2026 10:37:59 +0000
ROA not before: Tue 28 Jul 2026 10:37:55 +0000
ROA not after: Sat 26 Sep 2026 10:37:55 +0000
asID: 61317
IP address blocks: 154.16.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8329 (0x2089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 28 10:37:55 2026 GMT
Not After : Sep 26 10:37:55 2026 GMT
Subject: CN=6a688687-5ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0e:5f:7d:9a:c3:8f:45:bd:6a:0e:7f:71:88:
f5:39:f6:e1:64:5b:42:8d:21:34:8e:96:e2:fe:92:
ce:e2:42:58:76:40:36:04:a8:08:58:21:0b:0f:5e:
7f:ab:3d:61:f6:e7:79:2c:1a:98:cd:c4:af:ec:70:
50:e3:a8:be:07:62:e7:3c:17:88:63:86:32:ec:f0:
4a:3f:8d:94:50:e9:8f:f2:77:dd:e1:95:32:8d:a9:
58:d9:9a:16:00:05:9f:7f:ab:7d:b7:5e:26:70:9c:
19:42:0b:7b:85:67:27:c8:3b:63:ea:a4:e0:2c:ca:
fe:e2:30:d3:41:3d:6f:54:a0:e3:d6:f4:07:6a:3b:
0c:cd:c4:6d:26:ba:c3:cc:6d:21:3c:cf:9a:7f:5c:
51:29:78:f8:e7:99:1d:49:b7:6b:23:13:7b:a9:05:
8e:1e:6e:2e:2a:14:9f:c6:11:a2:56:41:51:05:57:
4e:6a:20:05:d7:47:13:73:6b:fc:8d:ee:3d:fe:09:
62:58:aa:46:69:6f:4f:e6:0b:01:42:20:4c:63:3d:
5e:cc:67:63:0a:ea:43:90:91:d4:c5:6e:25:0d:e7:
ac:02:aa:22:6e:21:e7:5c:99:45:af:ee:45:34:cd:
00:e3:22:02:d7:9d:a9:52:57:82:78:f2:e4:46:5e:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:F5:79:34:39:0B:F1:5D:E9:DF:DC:32:04:F7:05:23:22:89:E1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66783A4E8A7011F1BEDBACA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.40.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7f:dd:ad:5c:13:e3:9d:74:e1:d0:c3:2d:53:ee:d1:f1:fe:
e9:0e:db:55:e2:a2:54:cb:07:69:63:90:86:58:10:33:64:fc:
35:cd:5f:cc:d5:55:ea:b3:00:3d:13:ee:e0:b0:87:96:cb:3a:
b8:51:e2:09:15:25:5e:30:57:58:60:e3:f8:3c:a2:d8:0c:af:
cc:86:43:cb:56:2d:49:03:ba:9a:46:3c:bb:76:9a:1e:bf:53:
07:8c:db:e8:45:86:af:68:61:55:00:19:83:5f:69:2a:10:ab:
d2:5e:87:69:7d:5f:f7:d3:f1:ee:9d:03:c8:50:0c:58:fa:73:
2e:05:80:a8:28:be:14:2b:f4:fd:c8:9d:30:b0:76:8e:f1:22:
fa:6c:46:1f:1e:c7:a0:eb:5c:64:14:a1:22:4d:73:dd:55:9a:
0a:e7:73:aa:ee:08:7e:b3:06:5b:a9:c1:53:69:95:43:18:69:
38:29:2d:2a:d8:5b:26:96:98:06:3a:5d:e2:2a:07:7b:97:06:
a4:0c:d6:5a:53:11:5f:0a:5b:14:a0:2d:e3:cb:51:a2:9c:e2:
05:9d:37:be:d0:86:8a:31:a0:93:35:dd:5b:96:2d:5b:18:b4:
6c:e8:bd:e7:30:5f:28:a1:08:ac:f5:67:fe:c1:6c:1a:08:3c:
db:54:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:28 2026 by rpki-client