Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/81D789708FFC11F1AB3DFEEDCE1D38B0.roa
File: 81D789708FFC11F1AB3DFEEDCE1D38B0.roa (raw, json)
Hash identifier: p/Kiry4823JGuhvmcP2VdLSxD2JwucqYjvb9LGhC41s=
Subject key identifier: 40:32:D3:9C:9D:C2:B5:3B:1F:E7:17:72:01:01:C9:C6:9F:87:78:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20B0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/81D789708FFC11F1AB3DFEEDCE1D38B0.roa
Signing time: Tue 04 Aug 2026 12:03:30 +0000
ROA not before: Tue 04 Aug 2026 12:03:26 +0000
ROA not after: Fri 04 Aug 2028 12:03:26 +0000
asID: 14670
IP address blocks: 154.16.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8368 (0x20b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 12:03:26 2026 GMT
Not After : Aug 4 12:03:26 2028 GMT
Subject: CN=6a71d512-34b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:49:ce:c5:92:46:95:42:6c:57:4a:0f:b1:
32:89:b1:78:52:43:16:da:8a:80:63:cd:79:62:6c:
5c:45:96:54:29:b9:f5:d5:f2:0e:b4:ab:ba:8f:31:
0f:38:a4:c8:f4:97:4f:26:cc:56:90:1c:5b:70:ed:
c7:fb:e3:ed:4c:54:89:06:09:ae:2a:2c:d9:f4:58:
95:58:90:9b:11:04:ef:ea:f7:02:af:e2:dc:2f:4d:
29:15:a2:f2:5a:5c:77:55:e3:19:62:bf:a7:65:41:
68:9c:d6:13:69:4e:10:3b:1a:00:e2:27:dc:1f:9d:
91:7e:9d:3d:f7:66:9c:f1:84:c0:a4:2f:9a:bf:f4:
59:16:73:17:c0:b7:ea:98:8f:1f:72:11:49:b7:48:
96:50:f5:17:31:98:24:b7:5c:d6:52:3f:52:5b:cf:
74:50:d2:f2:2d:00:a1:b5:8f:0b:61:36:34:22:51:
ad:d5:ee:9a:60:a1:8c:55:9e:ae:82:c7:f8:2c:46:
d8:7d:da:2e:6f:56:24:be:cb:91:dc:3b:c3:a0:3a:
78:af:47:42:c5:d9:3d:d9:03:0d:24:b7:2c:8b:88:
15:53:b3:c0:88:97:b0:34:c8:2f:82:ae:6f:c4:1d:
31:30:01:66:4f:07:4e:92:cd:61:9f:90:10:03:6b:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:32:D3:9C:9D:C2:B5:3B:1F:E7:17:72:01:01:C9:C6:9F:87:78:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/81D789708FFC11F1AB3DFEEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:5a:d4:18:66:bb:31:a5:96:0d:7f:d7:5b:a4:49:bf:00:6d:
f4:49:61:87:6c:96:4d:a2:7b:0c:58:67:93:7e:0d:d9:cd:69:
0e:20:d4:39:a2:1f:25:1d:12:9f:02:f3:bd:ab:33:f5:81:77:
e3:44:68:96:48:b4:6b:49:0a:fe:38:8d:49:eb:cd:d5:30:9e:
14:63:87:4d:3d:6e:44:13:17:ba:75:55:e4:0d:bc:81:79:c9:
c0:c0:43:1a:c0:9d:82:7e:32:41:d4:c3:22:91:ad:a6:a8:9c:
2b:9b:f4:1e:79:24:1c:61:f1:b7:b2:99:34:b9:06:ac:ba:bd:
7b:78:27:6a:b1:f1:4d:4c:50:cc:56:64:e4:81:7d:c0:7e:91:
47:d6:19:df:89:c0:68:0f:22:8e:79:fb:39:bd:ab:7d:8d:74:
c1:90:20:d4:0f:e1:70:ae:72:8e:0a:f4:76:15:62:a9:bc:de:
d4:06:5d:79:56:2b:3b:2a:6f:aa:1c:5b:65:fa:fb:4a:10:38:
bc:7d:8f:c6:6d:15:d7:5b:28:81:cb:bb:64:33:45:88:68:98:
24:d0:35:ad:38:d1:27:08:82:f3:c3:8f:82:f9:8d:a8:00:61:
14:91:26:58:e0:79:2d:b9:c7:b6:93:fb:ac:67:e3:64:80:10:
ac:40:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:24:25 2026 by rpki-client