Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/79598CE8745011F183C42EF5CE1D38B0.roa
File: 79598CE8745011F183C42EF5CE1D38B0.roa (raw, json)
Hash identifier: iUJL5lHg5DkcRkJKlY+4AQltwgklJ5nKFs+yle+tmCs=
Subject key identifier: 49:64:B9:05:9C:C0:83:67:C3:09:F4:9E:5E:A3:AD:B2:57:34:54:C2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2013
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/79598CE8745011F183C42EF5CE1D38B0.roa
Signing time: Tue 30 Jun 2026 06:54:01 +0000
ROA not before: Tue 30 Jun 2026 06:53:56 +0000
ROA not after: Fri 30 Jun 2028 06:53:56 +0000
asID: 212238
IP address blocks: 154.70.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 06:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8211 (0x2013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 30 06:53:56 2026 GMT
Not After : Jun 30 06:53:56 2028 GMT
Subject: CN=6a436809-f69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:34:d3:8d:76:a1:52:45:f4:be:d4:dd:a9:
0a:0f:2c:7c:de:9a:03:ce:ce:86:39:0f:ab:1b:2e:
96:70:fc:b3:07:93:ec:61:0d:b0:65:77:67:f5:7e:
83:7f:7a:76:71:77:98:f0:e6:97:88:56:ec:19:27:
18:c1:93:5e:12:30:e9:3a:9f:86:cf:35:4a:7b:dc:
d7:f7:64:d5:a3:6c:63:f6:b9:f8:d5:07:d7:d3:19:
53:7e:64:b0:e3:a2:83:fd:68:26:b8:64:72:4c:be:
89:03:4a:3a:19:e0:df:3e:07:1b:7c:8c:83:0f:c2:
15:90:fb:98:f7:fa:0f:51:6e:8a:2a:4a:f7:45:8a:
94:fb:6c:6c:73:3f:6f:22:eb:b4:7f:46:2e:a7:62:
03:08:9f:a5:d3:90:75:b9:2d:c0:3c:3d:2e:b5:ce:
7c:a7:2a:6d:63:50:df:c3:db:ed:7d:f1:76:e9:62:
2e:6c:b7:35:7d:65:b9:30:9e:38:4d:53:95:d8:f3:
ae:fe:ab:9a:d3:c2:4c:96:b8:c3:13:3a:55:d5:be:
cc:9c:aa:09:a9:e3:06:11:39:1c:66:d8:14:2d:16:
36:89:08:b0:91:16:1f:6c:9b:30:19:ee:de:66:4c:
0d:a1:17:5c:90:21:69:98:c4:d3:ff:73:ff:ef:e7:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:B9:05:9C:C0:83:67:C3:09:F4:9E:5E:A3:AD:B2:57:34:54:C2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/79598CE8745011F183C42EF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:60:1b:30:ad:a2:a9:94:7a:4b:ae:22:72:75:8a:4a:1f:8c:
c3:49:84:a5:71:22:32:0c:fe:ae:f7:70:cf:75:3d:d3:1c:b4:
65:e3:2e:38:01:8b:b9:25:3b:49:98:07:1e:e5:b3:23:f0:a6:
24:1f:98:71:a9:0e:fc:2e:76:cc:a7:60:f2:49:98:95:c1:1f:
7b:c7:3b:21:34:8b:6b:c4:a1:0c:cf:b9:68:fa:f5:aa:25:13:
b7:45:02:58:98:70:7c:77:19:8a:88:77:46:3d:b9:cd:57:bf:
c8:b5:5d:f3:09:9f:e3:30:56:5c:cf:65:89:9b:34:5c:e1:e5:
2e:a2:cf:e9:3c:d0:5e:60:15:78:5a:7a:07:3e:9f:50:ca:33:
62:44:4b:ec:f4:cc:75:46:b7:14:59:cb:87:94:cd:bb:93:09:
60:9b:ad:ec:bd:0e:c2:9e:4d:e9:de:ae:bf:c5:67:08:85:c3:
91:b8:5f:98:20:a5:a5:ee:ba:8a:04:f6:ca:5f:7e:f6:d6:a8:
ff:29:83:7c:71:5d:6c:8d:13:8f:d7:f4:93:2c:69:94:7d:de:
99:2f:ad:5d:6d:af:7f:be:be:5e:2f:c0:51:b2:c8:6a:92:5d:
3d:28:95:3c:fa:4d:26:6f:9f:6a:f1:87:ae:10:40:19:08:51:
a3:f9:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:01:32 2026 by rpki-client