Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6827BABA59B811F1A40C7705CF1D38B0.roa
File: 6827BABA59B811F1A40C7705CF1D38B0.roa (raw, json)
Hash identifier: UE2VXTNmXhsGZXsyaI8yoJSUbpksbY0A23cRrfpIpOU=
Subject key identifier: 2A:62:8D:1B:74:C0:CE:5B:65:7C:DF:BF:28:E6:7D:B4:48:E2:15:E2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F78
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6827BABA59B811F1A40C7705CF1D38B0.roa
Signing time: Wed 27 May 2026 10:39:59 +0000
ROA not before: Wed 27 May 2026 10:39:54 +0000
ROA not after: Sat 27 May 2028 10:39:54 +0000
asID: 213476
IP address blocks: 154.16.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 29 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8056 (0x1f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 10:39:54 2026 GMT
Not After : May 27 10:39:54 2028 GMT
Subject: CN=6a16c9fe-78bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:ee:a3:b3:96:0b:de:78:3e:5e:aa:e3:a8:
93:9d:b6:ef:d4:48:4a:a2:89:4c:60:e4:e3:dd:17:
a7:76:8c:c1:be:cc:c1:b0:0c:3d:91:e7:9e:a9:f4:
b2:d1:9d:15:77:bd:78:e3:20:8d:ad:5a:30:7f:0b:
7c:18:d0:89:ac:1e:ed:72:b6:d0:d5:6c:e8:95:31:
7b:4b:2b:6f:d4:9f:e2:52:a6:13:1e:a1:12:52:95:
56:f0:99:4e:18:61:93:e9:46:80:fb:ca:49:6d:91:
29:24:51:7c:29:91:15:37:6d:36:51:74:fd:9b:40:
4c:a5:8d:16:46:b6:0b:2c:99:f7:2b:c4:f6:72:54:
a1:d7:74:61:e3:42:85:78:de:61:ba:92:c4:ae:5d:
63:6e:b8:6e:7c:b8:cd:37:d9:20:b9:c4:31:3c:f3:
9a:f0:2d:6d:00:6e:91:35:d4:41:6d:a8:1e:2d:be:
7a:e8:75:6d:d1:ca:ea:ef:96:a7:86:1c:90:a6:3f:
3f:38:97:e6:0e:ff:e2:4a:44:b6:44:a2:53:e6:b3:
b4:d1:6a:72:f0:a0:a4:c4:99:ec:48:e6:f9:60:0e:
5f:c6:0f:d6:b5:f5:9e:a8:1a:ee:0a:74:95:9a:96:
8a:0c:3e:28:bf:89:e8:d8:13:10:86:14:6c:b0:5f:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:62:8D:1B:74:C0:CE:5B:65:7C:DF:BF:28:E6:7D:B4:48:E2:15:E2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6827BABA59B811F1A40C7705CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d5:fe:21:61:c3:27:32:43:0c:b0:b7:54:dc:14:0e:d5:75:
24:2b:5c:99:a9:b1:a2:ad:d3:e4:52:e1:7b:91:37:ab:8f:8e:
33:97:9b:54:8b:81:cf:17:13:f0:fb:28:40:3d:7a:77:b5:a7:
af:46:36:52:da:66:5b:2b:13:9c:20:13:e7:b2:7e:5b:2c:c6:
25:88:8d:dd:3f:85:3a:f2:15:9f:bc:37:7b:55:f3:58:4a:1c:
80:81:27:0e:f4:5d:f3:cd:40:e4:29:ad:2b:e5:89:1b:05:36:
0d:a0:83:50:52:7c:c8:24:4d:80:12:c5:77:cc:a3:a8:fd:13:
55:60:4a:8a:98:41:27:d5:bb:f4:50:c1:a7:17:7c:e5:c9:15:
d1:28:0d:0c:db:9d:60:4f:c1:40:9a:e0:84:15:12:bc:a0:d2:
1a:73:30:f4:da:6d:90:3a:f2:6f:e9:00:37:77:2d:4a:f6:fb:
b7:29:cd:8d:ce:c4:b9:e1:28:ba:52:5f:64:a8:b2:40:7a:03:
67:b1:f4:6d:35:eb:13:1b:69:83:4a:21:47:14:c2:1c:74:03:
6c:e4:9c:70:2e:73:7d:e0:23:11:85:d0:c2:ec:fb:db:1c:bd:
60:fb:64:e9:81:5d:d2:36:bb:cc:b8:ee:0b:f4:9c:b5:5c:5b:
6a:74:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:16:35 2026 by rpki-client