Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/808A0B4884CA11F1B54346AFCE1D38B0.roa
File: 808A0B4884CA11F1B54346AFCE1D38B0.roa (raw, json)
Hash identifier: B3qZU1Zq3G3RQ1HPrrS0nOUozX67z1SOpSsVGwdKQgc=
Subject key identifier: B6:59:B0:20:FB:11:8D:9E:4B:71:4E:4F:D9:CF:32:16:AB:D3:54:D5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2067
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/808A0B4884CA11F1B54346AFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:07:50 +0000
ROA not before: Tue 21 Jul 2026 06:07:46 +0000
ROA not after: Fri 21 Jul 2028 06:07:46 +0000
asID: 397423
IP address blocks: 154.16.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 09:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8295 (0x2067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 06:07:46 2026 GMT
Not After : Jul 21 06:07:46 2028 GMT
Subject: CN=6a5f0cb6-a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:99:5a:93:74:3d:4e:74:2f:68:0d:78:46:
1d:6a:95:24:b2:13:ef:0d:57:3c:2a:2b:9b:00:20:
3b:ef:05:56:81:7b:91:48:04:9f:30:16:80:ad:95:
a6:4b:a5:c4:af:63:f4:dd:a5:5e:8f:6e:4c:1d:37:
fe:65:6f:40:97:31:f5:b7:c0:5b:29:48:4a:95:86:
37:52:6e:1c:73:a2:db:f9:af:2d:49:f5:81:a3:55:
ce:22:3c:54:d1:95:d2:41:83:e9:0e:8f:29:b1:29:
8c:be:a2:fa:88:04:dc:2c:c9:dd:b0:98:ad:3e:2a:
f4:bc:0e:2d:e9:67:38:52:66:62:1a:b0:ff:09:2f:
79:fb:bb:d7:d7:48:ab:be:2a:8e:53:95:e7:4a:bd:
51:ab:20:0c:e1:59:ed:9b:93:66:2e:e8:fc:f9:be:
09:7b:c0:de:9f:3c:cd:64:3d:34:8f:38:8b:17:83:
84:84:23:a5:90:bb:c8:ed:83:a4:76:5b:d1:51:12:
f8:66:9a:39:a0:b7:38:cd:1a:62:d7:6f:1c:05:c5:
0f:87:e5:52:b2:3c:95:55:7a:8e:19:58:74:a2:06:
da:de:06:5b:1f:7e:a0:7d:7f:00:54:4f:8b:0d:d5:
1d:ea:37:63:81:02:13:3e:fd:c8:1c:7e:81:af:62:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:59:B0:20:FB:11:8D:9E:4B:71:4E:4F:D9:CF:32:16:AB:D3:54:D5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/808A0B4884CA11F1B54346AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1d:6c:bd:f7:db:24:7e:08:50:79:ea:1a:b8:68:6a:03:14:
51:ac:16:90:0f:fa:8c:f9:47:d4:1c:f5:75:ba:00:f5:1b:55:
17:b3:14:27:61:2e:68:10:c5:a0:6c:ce:e0:5e:74:8f:fe:09:
6f:5f:99:79:83:72:32:ae:58:ac:69:4f:6c:80:cf:d5:1c:6a:
8d:6c:45:1c:81:2a:e2:27:84:98:ee:be:68:f9:9d:38:3e:59:
39:7f:19:87:17:3c:15:92:4c:45:49:b7:35:3e:18:2c:92:11:
23:ad:09:10:be:5e:30:44:a3:4b:44:3c:73:12:94:4f:84:fb:
5b:9e:27:f4:7f:fb:cc:35:94:8f:0a:3d:d3:21:84:7e:ff:12:
63:95:41:e7:33:0c:fd:f2:f4:df:f5:82:e9:7f:16:eb:57:f3:
42:2c:a9:a0:82:60:b6:45:95:05:e1:93:d3:6f:58:52:9b:4c:
95:7e:b9:20:9c:bd:70:7b:97:b1:79:7e:85:75:d0:50:6d:d9:
ae:1b:d4:7e:ee:67:e3:9d:0a:48:e0:a6:5d:d2:43:f3:e6:08:
f7:b0:49:cb:e0:8a:3b:9b:05:52:11:30:e6:55:23:0e:a7:f5:
b3:dc:d1:b0:ca:08:75:f2:99:ba:46:ab:de:fe:79:09:6d:e1:
4c:54:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:23 2026 by rpki-client