Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/683C2E047DE011F1B8D3F5CDCE1D38B0.roa
File: 683C2E047DE011F1B8D3F5CDCE1D38B0.roa (raw, json)
Hash identifier: IvaHeiZCcXrI65tb38zBAdyp6Wtk8DtUSetjyNYkhM8=
Subject key identifier: 36:82:79:57:35:9E:CC:92:85:86:55:0C:E2:2A:E9:AF:FE:2F:49:39
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2056
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/683C2E047DE011F1B8D3F5CDCE1D38B0.roa
Signing time: Sun 12 Jul 2026 10:57:00 +0000
ROA not before: Sun 12 Jul 2026 10:56:56 +0000
ROA not after: Wed 12 Jul 2028 10:56:56 +0000
asID: 834
IP address blocks: 154.16.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 14 Jul 2026 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8278 (0x2056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 12 10:56:56 2026 GMT
Not After : Jul 12 10:56:56 2028 GMT
Subject: CN=6a5372fc-1895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0f:e6:fb:53:b8:e5:ff:83:29:2a:bb:a2:14:
49:49:5d:fa:22:80:d0:55:83:be:2a:94:f0:67:65:
ec:a5:75:79:87:2e:16:e0:b9:a9:45:db:de:35:a0:
a8:47:88:dc:cf:a8:29:ea:1d:bc:ab:9f:4b:b8:3f:
bc:a0:01:81:75:85:db:2e:b1:e4:70:fb:fe:63:63:
5b:4a:18:ca:bc:0d:0f:b5:15:8e:d1:0a:b0:d9:db:
54:4f:cb:f8:b7:aa:d4:09:6d:8e:ff:26:a2:91:0b:
91:ba:1c:f5:59:d5:91:21:59:ba:e1:37:0b:84:33:
d0:31:55:91:d8:9e:d6:c8:7d:4d:a1:fa:e9:51:cc:
2d:c3:29:14:ac:80:7a:b6:94:e0:4d:81:46:f1:a8:
3b:1b:53:3e:d7:54:ec:b7:e9:d7:34:4e:d8:24:c6:
84:14:98:29:3b:6f:e4:41:b0:87:d2:05:92:5a:80:
58:f6:b1:89:f3:0d:f7:3c:19:eb:cc:86:9e:73:a4:
bb:35:c7:54:aa:7f:ba:d9:9f:7a:8f:1e:13:3d:0c:
53:39:3d:72:22:d9:98:38:a8:5b:61:5a:55:bb:a6:
95:c2:e3:e8:82:ba:40:de:c9:11:7b:f5:0f:48:47:
ef:18:61:f4:4b:1f:37:c7:f8:0d:c1:e6:3e:75:40:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:79:57:35:9E:CC:92:85:86:55:0C:E2:2A:E9:AF:FE:2F:49:39
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/683C2E047DE011F1B8D3F5CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.62.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a3:d3:9e:d0:23:be:c7:de:2d:d9:d1:88:86:df:cb:d9:4f:
35:4e:58:80:ab:dc:bf:63:f6:0c:06:55:f3:17:a1:15:05:b3:
2e:55:64:db:58:3d:8a:44:f4:c2:86:25:a5:db:57:f5:8f:7d:
fd:2c:85:cf:cd:03:ad:fb:9a:29:f6:13:3c:ab:fa:5c:8e:da:
be:26:d4:36:36:b9:64:a2:0e:e4:a9:e3:c9:ae:af:5f:35:a6:
d9:8b:38:06:9d:32:60:3f:a2:4c:d2:f7:b6:ad:82:4a:6b:da:
a1:36:12:ea:01:ec:7e:38:13:5c:c7:0b:c5:cd:c1:86:87:d8:
d9:92:66:8c:7e:41:a1:c4:bc:d5:d9:05:36:40:11:02:2a:0c:
a6:0a:51:97:f6:19:6f:99:59:b4:90:5c:0a:5f:66:1e:5d:b5:
97:39:9e:a2:c5:ec:17:73:65:07:e4:c6:43:8b:5d:a3:80:57:
5c:87:15:c5:0d:48:0b:73:b8:67:c8:3a:50:48:9a:e3:ae:5b:
5c:89:0f:84:21:40:f9:94:a4:6d:09:1d:a5:33:7e:d3:c3:52:
9d:72:62:06:67:77:d3:74:9b:90:06:82:45:ec:7c:45:12:07:
11:a6:b2:df:2d:89:c1:0b:23:54:41:6b:ad:8e:1e:ed:e9:0e:
c7:3c:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 14:43:51 2026 by rpki-client