Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C5A864E4C3911F190D964E8CE1D38B0.roa
File: 6C5A864E4C3911F190D964E8CE1D38B0.roa (raw, json)
Hash identifier: foDCN79adRVncWAe2UCjoosOWLyUgi4+smq7aZNopPE=
Subject key identifier: 8F:96:59:98:CA:11:E4:D7:E4:1B:CC:04:AD:8A:C8:8A:65:92:48:AD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F30
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C5A864E4C3911F190D964E8CE1D38B0.roa
Signing time: Sun 10 May 2026 06:28:14 +0000
ROA not before: Sun 10 May 2026 06:28:10 +0000
ROA not after: Wed 10 May 2028 06:28:10 +0000
asID: 396356
IP address blocks: 154.16.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7984 (0x1f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 10 06:28:10 2026 GMT
Not After : May 10 06:28:10 2028 GMT
Subject: CN=6a00257e-c8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:a4:95:72:72:28:8e:97:bf:52:4b:e8:57:
0f:b9:55:8e:ca:ef:ac:ef:ae:01:83:6a:fe:61:dd:
19:18:2d:8a:24:ec:82:15:aa:1f:d6:44:21:17:dc:
d3:88:b0:64:5c:34:6b:2c:88:9e:db:4d:e5:60:59:
3a:70:4f:ce:3a:f5:4a:89:f1:69:e8:8a:7b:aa:ee:
2e:fb:05:09:1a:1f:18:e7:c8:63:e7:85:c2:75:41:
70:9a:9a:bf:f3:87:bc:ea:42:a6:02:64:98:a4:80:
3c:ea:2d:2f:61:d0:59:10:17:36:34:7a:d7:e5:d5:
71:3c:4f:19:29:9e:80:ac:fb:5c:eb:3b:1b:a9:d3:
5c:56:40:38:d7:7f:a7:1a:96:76:2a:c5:6a:6a:0b:
7b:84:e7:e4:df:2f:61:b0:a7:c0:6c:9b:e0:53:69:
77:4d:42:06:ab:e2:1d:c5:78:2e:bf:e2:aa:06:9e:
c5:d7:5d:6e:c9:3d:d2:7f:81:fc:36:34:a4:d7:fb:
e2:55:fd:99:79:e6:e3:72:94:5d:5f:d3:c3:b6:ec:
4b:26:22:6d:b4:ab:b1:0b:db:47:8a:16:07:f6:5d:
1d:01:d4:c0:2d:07:33:16:03:a4:92:53:23:bf:db:
fe:4f:83:66:e5:c4:72:c0:9b:79:ec:f4:9e:9c:ec:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:96:59:98:CA:11:E4:D7:E4:1B:CC:04:AD:8A:C8:8A:65:92:48:AD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C5A864E4C3911F190D964E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.193.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8b:94:6b:b9:3e:24:e8:b9:ec:57:26:c1:e8:17:d3:66:f4:
18:59:32:c9:8c:ef:69:2d:c6:c6:ed:29:34:9f:c4:de:ac:3b:
38:c2:1f:c1:62:ea:7e:24:01:f5:20:36:50:09:ff:2f:76:e9:
30:b3:5c:da:9b:34:e4:3e:e5:09:8a:d8:c6:61:a4:7c:4c:cc:
b9:ec:a8:f2:f9:ad:71:95:f4:fe:e0:69:fa:ff:dc:e3:3a:d8:
06:d3:05:48:9a:b1:c6:56:c0:23:d7:c6:aa:2d:b9:dd:3c:0b:
61:64:c1:f2:5f:46:4d:35:c0:f4:7d:f7:83:21:24:80:05:d5:
54:8e:84:99:81:fb:5e:2d:1e:53:f2:52:5e:1f:7b:45:dc:10:
8d:9c:f9:70:bf:86:77:d2:87:35:49:5b:d5:29:c0:da:89:47:
1c:f1:79:86:16:37:72:04:df:b4:ed:3b:b1:0a:47:fb:9c:c3:
99:4d:2d:23:3e:82:8e:a1:20:83:17:92:91:16:36:15:54:ab:
55:d7:6a:04:d3:27:64:18:1b:51:75:30:95:e9:ff:56:11:6e:
5b:5f:79:c9:83:e5:8f:5a:35:72:ca:7a:f8:b5:0e:c6:3c:7d:
5b:1d:de:df:84:34:9b:67:48:3a:ae:19:14:fd:bb:33:79:7a:
7c:0a:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 12:53:09 2026 by rpki-client