Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7F90C78490C511F18A9D2CB1CE1D38B0.roa
File: 7F90C78490C511F18A9D2CB1CE1D38B0.roa (raw, json)
Hash identifier: Hky5tcsC/+2FrkVhuQACpm62LI3M0hqk7NvhUHvbbzI=
Subject key identifier: E1:47:9B:05:04:EB:05:ED:0D:F9:90:B9:43:8C:EE:5B:A6:5E:4F:63
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20C4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7F90C78490C511F18A9D2CB1CE1D38B0.roa
Signing time: Wed 05 Aug 2026 12:02:15 +0000
ROA not before: Wed 05 Aug 2026 12:02:11 +0000
ROA not after: Sat 05 Aug 2028 12:02:11 +0000
asID: 402487
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8388 (0x20c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 12:02:11 2026 GMT
Not After : Aug 5 12:02:11 2028 GMT
Subject: CN=6a732647-8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:60:31:13:f8:28:b5:80:c3:56:b3:01:51:
5f:76:48:cc:66:16:11:39:65:30:6e:95:04:b7:2a:
14:14:fd:c0:e3:10:24:bb:0b:76:a8:54:c4:6b:6a:
cf:1d:ec:6b:51:7e:d3:3b:d4:0d:e7:95:3a:15:cc:
fb:ea:e6:2f:84:26:e4:e0:a6:ba:ba:ca:e4:86:f6:
a0:2f:b7:15:d8:aa:e0:01:f3:c9:58:05:f2:32:57:
94:7b:0b:ca:e7:05:28:dd:77:9e:dd:a4:1e:40:4f:
c9:d8:20:22:a3:2e:20:92:f0:23:dd:00:21:be:98:
7f:89:77:4a:c7:d7:53:6d:59:ef:db:bc:65:70:75:
c1:21:65:5c:db:28:8a:bd:fb:80:33:4d:65:7a:c0:
4c:03:66:e1:c6:4f:3a:66:f3:63:b5:99:df:fb:40:
2d:89:30:e5:23:04:e8:1f:fb:3b:ce:ae:b6:b3:37:
19:12:32:eb:7d:41:90:ff:8d:dc:b1:2e:06:91:92:
cf:41:f9:47:94:96:01:f7:07:b7:96:da:b0:79:45:
87:1a:6a:3c:13:1a:aa:2e:d8:51:b8:56:2e:d9:22:
97:45:29:ba:ea:da:a9:a7:7c:3a:72:50:3d:69:16:
95:f4:f4:0e:ab:20:e1:95:4e:2c:ab:67:d7:a8:9f:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:9B:05:04:EB:05:ED:0D:F9:90:B9:43:8C:EE:5B:A6:5E:4F:63
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7F90C78490C511F18A9D2CB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
80:67:ec:6e:8a:1b:34:36:eb:5a:38:57:38:45:81:8b:4a:d2:
0a:24:f4:24:e7:fd:73:89:fc:eb:12:d7:02:42:8b:94:86:3c:
d0:14:55:92:6e:96:a2:eb:ad:3c:b1:3f:f2:7e:56:37:fd:77:
81:aa:f1:78:8a:fa:49:eb:0f:31:46:0c:e6:dc:ba:60:37:1b:
93:c6:59:3a:e4:d1:bf:c6:61:cc:5f:46:4f:1c:34:a9:1d:c3:
fd:ed:9c:44:04:8f:3c:ca:bf:da:fc:c3:66:ee:24:d1:7f:80:
d4:41:66:73:bd:1c:3d:29:b5:43:c2:31:37:25:58:ba:49:b1:
68:28:be:72:52:11:00:73:71:01:fc:af:98:ba:88:e2:cb:0a:
62:dd:5d:de:d5:cc:2b:cf:95:e6:d9:7f:40:11:62:96:7b:5d:
a3:7e:d3:f2:f5:8b:3a:44:24:e2:0a:ef:a4:a2:d8:7c:6d:ef:
ac:1a:03:e3:52:30:21:8a:a7:c9:3b:8e:a1:6f:66:b1:9f:95:
55:a7:e2:b2:da:7b:dd:fe:b7:13:ed:00:57:fb:25:3d:2d:a4:
bd:cc:a4:f9:5a:d4:f9:87:5b:c7:62:c6:85:c2:9e:12:fb:f7:
4a:a5:c3:98:a7:10:c8:f5:18:45:f6:cc:f0:81:3b:32:ec:a6:
ce:44:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:57:41 2026 by rpki-client