Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8313A1A48FFA11F1B32478E3CE1D38B0.roa
File: 8313A1A48FFA11F1B32478E3CE1D38B0.roa (raw, json)
Hash identifier: AUObMZghfmpjuplZ7ZvV0w91OsRX0jHN6yNL9Kq8TQk=
Subject key identifier: 27:D8:64:27:F3:FD:23:1B:1B:65:83:3C:71:97:47:33:CC:E1:9A:A1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20A7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8313A1A48FFA11F1B32478E3CE1D38B0.roa
Signing time: Tue 04 Aug 2026 11:49:13 +0000
ROA not before: Tue 04 Aug 2026 11:49:09 +0000
ROA not after: Fri 04 Aug 2028 11:49:09 +0000
asID: 14670
IP address blocks: 154.16.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8359 (0x20a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 11:49:09 2026 GMT
Not After : Aug 4 11:49:09 2028 GMT
Subject: CN=6a71d1b9-da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:ab:1b:06:1f:44:ad:ed:24:ad:b3:50:62:
93:ee:3b:7d:3a:94:e8:9d:b4:be:4c:b1:4e:b1:76:
b1:0c:9d:30:6a:b3:e7:7a:d3:e1:dc:e7:e2:d7:32:
49:00:47:42:e6:2c:0e:e5:48:be:75:99:61:df:28:
6e:2a:a8:f3:a9:8a:5b:79:8c:23:67:22:1a:7e:6d:
27:6f:6c:5a:0e:33:a4:67:f2:3a:08:8a:97:f9:f0:
e1:bf:97:0f:a5:bd:6a:95:35:41:1b:9d:0b:be:53:
3b:d4:e6:4b:a5:ff:3e:79:5b:72:70:20:8c:09:da:
50:c6:28:c2:06:ed:bf:12:14:73:f5:37:0c:c0:41:
c7:31:ac:9b:33:6a:92:95:a2:50:c1:6e:d1:56:05:
eb:66:49:f1:e6:e5:db:6a:bd:b3:82:02:46:9a:08:
03:54:af:6b:eb:68:9b:21:d6:77:9e:48:d9:b5:22:
e0:e2:cd:ab:0e:4a:6e:1c:c7:87:6d:ca:65:bf:cb:
5a:1b:31:07:0b:c2:10:66:fa:d9:ef:13:dd:1e:ba:
3b:bc:5a:e4:ca:26:87:04:76:1c:5b:fa:a4:eb:f2:
5f:72:85:84:ce:b7:ee:22:4d:aa:a3:f9:55:f5:d9:
a2:af:c5:9f:22:b6:7a:82:50:cb:0f:46:08:34:51:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:64:27:F3:FD:23:1B:1B:65:83:3C:71:97:47:33:CC:E1:9A:A1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8313A1A48FFA11F1B32478E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.117.0/24
Signature Algorithm: sha256WithRSAEncryption
21:88:90:a1:f1:31:56:b4:53:b0:39:8a:a5:87:65:b4:df:b4:
72:55:33:4d:05:77:2e:53:f9:50:26:a1:a1:ba:d4:c0:5b:32:
5a:24:03:b6:87:29:11:fd:28:a5:03:de:d3:96:71:ef:ac:d0:
e6:37:50:e6:c3:3f:5c:cf:bf:25:de:8b:db:e9:3d:86:74:ff:
c1:92:9b:db:4c:55:37:ec:72:ca:c2:93:2a:43:54:a6:00:d9:
64:d6:bd:d3:e8:f4:0d:89:c1:15:d8:68:00:84:b1:46:f4:ee:
28:66:d1:e1:69:f2:7c:40:3b:19:41:83:de:ec:f7:6d:de:fb:
74:0c:62:58:fa:85:25:df:40:01:ae:1c:22:68:e7:d8:35:68:
b9:4c:8d:80:82:28:10:9f:ce:42:14:cc:c6:bb:c9:79:2b:8d:
8c:19:ba:37:a9:d4:aa:f5:39:bc:01:a0:46:92:24:3a:67:60:
d6:85:02:77:c0:07:d0:3c:39:3a:91:29:7f:76:0c:a9:d6:68:
e1:26:8b:32:2e:c7:6c:2e:75:22:8c:1e:0b:89:28:8d:d2:89:
a6:0e:f6:70:88:25:56:1b:c0:15:38:d6:1e:39:4e:95:36:53:
c6:88:a6:e1:cf:64:61:c1:37:34:47:6b:2d:6a:e0:78:1b:de:
a7:3f:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:25:14 2026 by rpki-client