Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/755B3578633F11F183DFADECCE1D38B0.roa
File: 755B3578633F11F183DFADECCE1D38B0.roa (raw, json)
Hash identifier: 0kUkBANiLfQY8mwTe5Q8Ubhu8PYx4+kTayLJ+zWMNgs=
Subject key identifier: 75:47:6D:12:77:56:A2:77:98:D6:88:A9:29:64:F2:F4:ED:C2:86:A1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FB9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/755B3578633F11F183DFADECCE1D38B0.roa
Signing time: Mon 08 Jun 2026 13:39:23 +0000
ROA not before: Mon 08 Jun 2026 13:39:19 +0000
ROA not after: Thu 08 Jun 2028 13:39:19 +0000
asID: 41171
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Jun 2026 10:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8121 (0x1fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 8 13:39:19 2026 GMT
Not After : Jun 8 13:39:19 2028 GMT
Subject: CN=6a26c60b-e19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:7f:92:3f:27:f3:c9:53:92:ab:bb:0c:03:
c3:2b:dd:a3:33:59:87:5b:21:66:5a:dd:33:85:99:
3e:1f:69:92:bb:6c:cc:90:ea:ca:df:9c:fa:8c:f1:
b2:a3:1c:9b:d2:8b:ec:6d:40:d5:c1:0e:9a:bc:bd:
bc:f1:09:32:e7:ab:a0:f2:d5:7f:cc:f3:e8:f1:85:
94:e0:81:b4:22:b3:1f:74:8b:3c:8a:d1:cf:eb:da:
85:18:f9:25:58:39:74:1d:95:86:d2:52:59:f2:48:
65:75:a2:c0:03:1b:85:27:80:41:ec:df:c7:d7:7e:
c3:21:16:c3:f1:8d:8a:c4:78:75:d5:1d:49:88:9e:
b7:a2:19:4c:ba:ec:01:cc:ae:f0:5e:dd:5b:22:76:
cf:8b:95:8d:28:66:87:0e:8c:96:94:77:1f:32:52:
bf:df:bd:08:6b:9d:2c:d8:7e:66:06:81:21:42:ca:
2c:42:af:97:88:1b:fd:c9:07:a5:7c:9f:b1:ec:5a:
55:19:cd:c7:1e:2a:64:c3:fa:30:91:92:12:21:d9:
ad:b0:69:2c:32:e7:29:7c:6c:c6:50:89:75:fe:6d:
62:e6:79:73:f6:c8:75:dd:27:7b:c0:9a:1e:e4:b2:
76:ba:13:0d:dd:12:28:f2:98:0e:b5:ec:7b:df:77:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:6D:12:77:56:A2:77:98:D6:88:A9:29:64:F2:F4:ED:C2:86:A1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/755B3578633F11F183DFADECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:2b:cc:52:d8:9b:0f:b6:d2:f9:a3:5d:e4:7d:1a:88:49:
a2:9d:f7:c8:33:f1:4c:21:63:fc:c5:9d:2c:7a:08:91:f7:30:
fc:00:eb:a2:a7:ca:1e:df:18:fb:6d:2c:6c:d7:06:2d:bd:4e:
0e:04:e9:ac:29:25:67:ad:e0:8f:08:81:65:18:13:94:d0:52:
2a:50:e9:2b:8f:ea:00:5a:08:a5:69:9e:21:40:0f:a7:92:53:
01:36:0d:1a:98:61:a9:55:8b:5b:0f:82:17:3a:c2:97:6b:f2:
6e:cf:1c:7d:80:4f:1c:f6:50:45:22:08:e7:3f:10:0e:e5:33:
ed:5c:89:05:c0:6b:15:e0:d7:7f:c4:d2:37:1c:c7:c3:0e:26:
4d:f4:db:f9:06:0e:52:af:d8:9b:ae:a2:ba:a0:25:4b:27:2b:
ff:d5:15:e3:4f:0a:82:72:86:cc:d3:29:03:a3:9e:c9:9f:7f:
05:8d:7c:12:29:de:7d:02:5c:af:ed:1d:47:1e:25:51:d3:16:
4c:56:28:b6:06:f7:54:80:3d:70:1c:92:1f:cd:14:23:52:13:
dd:dd:6d:e2:3c:87:ab:ba:78:5f:1c:af:7a:b5:46:3c:df:8d:
66:fc:89:96:ab:08:fa:ff:6d:9c:c4:05:0a:22:2a:d2:c1:c9:
02:aa:9c:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICH7kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA2MDgxMzM5MTlaFw0yODA2MDgxMzM5MTlaMBgxFjAU
BgNVBAMTDTZhMjZjNjBiLWUxOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQJX+SPyfzyVOSq7sMA8Mr3aMzWYdbIWZa3TOFmT4faZK7bMyQ6srfnPqM
8bKjHJvSi+xtQNXBDpq8vbzxCTLnq6Dy1X/M8+jxhZTggbQisx90izyK0c/r2oUY
+SVYOXQdlYbSUlnySGV1osADG4UngEHs38fXfsMhFsPxjYrEeHXVHUmInreiGUy6
7AHMrvBe3Vsids+LlY0oZocOjJaUdx8yUr/fvQhrnSzYfmYGgSFCyixCr5eIG/3J
B6V8n7HsWlUZzcceKmTD+jCRkhIh2a2waSwy5yl8bMZQiXX+bWLmeXP2yHXdJ3vA
mh7ksna6Ew3dEijymA617Hvfd15VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdUdt
EndWoneY1oipKWTy9O3ChqEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzc1NUIzNTc4NjMzRjExRjE4M0RGQURFQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDQwDQYJKoZIhvcNAQEL
BQADggEBAEXbK8xS2JsPttL5o13kfRqISaKd98gz8UwhY/zFnSx6CJH3MPwA66Kn
yh7fGPttLGzXBi29Tg4E6awpJWet4I8IgWUYE5TQUipQ6SuP6gBaCKVpniFAD6eS
UwE2DRqYYalVi1sPghc6wpdr8m7PHH2ATxz2UEUiCOc/EA7lM+1ciQXAaxXg13/E
0jccx8MOJk302/kGDlKv2JuuorqgJUsnK//VFeNPCoJyhszTKQOjnsmffwWNfBIp
3n0CXK/tHUceJVHTFkxWKLYG91SAPXAckh/NFCNSE93dbeI8h6u6eF8cr3q1Rjzf
jWb8iZarCPr/bZzEBQoiKtLByQKqnOc=
-----END CERTIFICATE-----
Generated at Mon Jun 8 23:31:22 2026 by rpki-client