Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80070ECA85B311F18E7D7AB6CE1D38B0.roa
File: 80070ECA85B311F18E7D7AB6CE1D38B0.roa (raw, json)
Hash identifier: D2mXm3Ut5w18tYX6HUTX8TRCtTnRJo8zge0VNtc1CI0=
Subject key identifier: DC:AC:6E:C7:EB:EA:90:08:55:07:0E:25:A3:DD:4E:AE:7E:1E:1B:1F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2073
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80070ECA85B311F18E7D7AB6CE1D38B0.roa
Signing time: Wed 22 Jul 2026 09:55:42 +0000
ROA not before: Wed 22 Jul 2026 09:55:38 +0000
ROA not after: Sat 22 Jul 2028 09:55:38 +0000
asID: 216138
IP address blocks: 154.16.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Jul 2026 12:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8307 (0x2073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 22 09:55:38 2026 GMT
Not After : Jul 22 09:55:38 2028 GMT
Subject: CN=6a60939e-9180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:a4:3e:dc:7a:3e:70:26:be:53:35:d1:01:
e2:3c:32:7b:ee:83:4f:63:42:52:83:48:9c:67:8f:
9e:47:7e:36:91:3b:16:31:6e:59:e6:0e:7c:45:24:
8b:a4:33:b5:93:c6:c7:44:83:3a:5d:6e:07:20:c6:
c0:f3:57:b0:e3:bb:dd:0f:96:7e:de:94:ca:0c:d1:
4b:2a:ee:c6:35:0d:56:88:1d:57:44:41:ba:8b:50:
02:e1:01:50:f1:86:6d:71:94:f8:ff:b9:45:f2:92:
8a:88:81:9a:4a:20:ea:fa:18:f8:39:d0:00:32:e1:
8e:d1:35:be:14:5c:78:18:ad:b7:1d:4b:cc:05:1b:
68:1c:0b:4b:8f:87:2e:21:a6:1a:b5:0d:a6:80:2a:
b0:70:a1:69:43:b0:fb:9a:7a:34:50:76:43:6f:f4:
c7:5d:59:1f:f5:02:17:0d:30:ea:07:d7:d7:1b:66:
31:f1:9c:f8:fb:ba:80:c3:98:19:df:26:fa:6b:c8:
2c:ed:e1:89:99:40:b1:0e:dd:e8:91:41:9d:12:d8:
4c:f1:57:a5:b5:34:19:8d:87:c1:f3:9f:4a:d1:8d:
7a:d7:c3:c2:0f:70:22:5e:af:33:65:f9:bf:22:a4:
58:f1:1d:00:00:18:3c:b4:f9:87:e9:d4:7d:86:a6:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:6E:C7:EB:EA:90:08:55:07:0E:25:A3:DD:4E:AE:7E:1E:1B:1F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80070ECA85B311F18E7D7AB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.150.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b8:1e:31:c6:b0:7a:f7:3b:9d:57:d0:29:3a:ec:27:bb:45:
74:81:a4:b0:eb:56:ef:57:70:ad:ca:bc:99:9e:c5:af:c5:b8:
fb:45:95:15:2c:e7:b6:69:51:3a:f4:1f:f6:c8:6f:0a:5b:f8:
b9:29:30:d5:5f:f9:af:a3:9b:70:87:5c:da:c4:65:89:07:38:
c7:76:65:72:f9:37:1f:72:ac:42:58:ea:e9:07:bc:16:33:07:
a5:2c:04:b3:25:64:48:96:85:f7:03:39:b7:29:07:36:dd:ce:
ee:cb:4c:d8:77:db:68:f8:1c:95:0a:8c:9d:4f:6e:ab:e7:dc:
a0:e4:a3:be:4a:89:b7:b7:00:6b:a7:fe:9e:44:f6:cd:35:c9:
3f:52:52:89:a3:9d:01:73:f2:38:12:2d:cb:dd:22:16:14:64:
f9:e6:71:13:4c:10:34:88:1e:2f:3d:95:81:ea:12:9b:9f:8a:
b2:f7:be:43:cf:08:8f:5e:63:ca:81:d7:02:65:e3:6d:8c:f4:
9d:82:b0:51:97:3b:78:3f:83:f6:41:ea:83:3b:2c:e0:6a:39:
fd:13:3b:d4:d2:6a:ae:6c:d1:e5:2e:27:7b:55:f2:60:d8:e5:
f4:3e:7f:51:00:23:dc:ed:45:bd:0d:86:e8:5e:84:03:d0:67:
36:05:e5:f1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIHMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MjIwOTU1MzhaFw0yODA3MjIwOTU1MzhaMBgxFjAU
BgNVBAMTDTZhNjA5MzllLTkxODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCScKQ+3Ho+cCa+UzXRAeI8Mnvug09jQlKDSJxnj55HfjaROxYxblnmDnxF
JIukM7WTxsdEgzpdbgcgxsDzV7Dju90Pln7elMoM0Usq7sY1DVaIHVdEQbqLUALh
AVDxhm1xlPj/uUXykoqIgZpKIOr6GPg50AAy4Y7RNb4UXHgYrbcdS8wFG2gcC0uP
hy4hphq1DaaAKrBwoWlDsPuaejRQdkNv9MddWR/1AhcNMOoH19cbZjHxnPj7uoDD
mBnfJvpryCzt4YmZQLEO3eiRQZ0S2EzxV6W1NBmNh8Hzn0rRjXrXw8IPcCJerzNl
+b8ipFjxHQAAGDy0+Yfp1H2Gpul/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3Kxu
x+vqkAhVBw4lo91Orn4eGx8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzgwMDcwRUNBODVCMzExRjE4RTdEN0FCNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEJYwDQYJKoZIhvcNAQEL
BQADggEBAGC4HjHGsHr3O51X0Ck67Ce7RXSBpLDrVu9XcK3KvJmexa/FuPtFlRUs
57ZpUTr0H/bIbwpb+LkpMNVf+a+jm3CHXNrEZYkHOMd2ZXL5Nx9yrEJY6ukHvBYz
B6UsBLMlZEiWhfcDObcpBzbdzu7LTNh322j4HJUKjJ1Pbqvn3KDko75Kibe3AGun
/p5E9s01yT9SUomjnQFz8jgSLcvdIhYUZPnmcRNMEDSIHi89lYHqEpufirL3vkPP
CI9eY8qB1wJl422M9J2CsFGXO3g/g/ZB6oM7LOBqOf0TO9TSaq5s0eUuJ3tV8mDY
5fQ+f1EAI9ztRb0NhuhehAPQZzYF5fE=
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:41 2026 by rpki-client