Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/85B839A67AC911F1A44654C2CE1D38B0.roa
File: 85B839A67AC911F1A44654C2CE1D38B0.roa (raw, json)
Hash identifier: 4knsUvPNMmrB5DxmB9Adl683PDls1tVAH0tJBHMVGDk=
Subject key identifier: 47:E9:63:6B:62:D3:41:FC:DE:F4:AB:90:3C:0B:BB:99:EB:79:02:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 203A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/85B839A67AC911F1A44654C2CE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:35:38 +0000
ROA not before: Wed 08 Jul 2026 12:35:33 +0000
ROA not after: Sat 08 Jul 2028 12:35:33 +0000
asID: 397423
IP address blocks: 154.16.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8250 (0x203a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:35:33 2026 GMT
Not After : Jul 8 12:35:33 2028 GMT
Subject: CN=6a4e441a-b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:6f:b2:b7:7c:0d:ca:f8:5f:39:a5:48:27:
de:1c:df:12:29:b3:5b:95:d0:6a:fa:56:18:31:77:
bd:f4:34:5e:14:48:c7:4c:e4:3e:38:bb:8b:08:e5:
9e:1e:9d:81:2e:41:d7:6b:5f:53:21:48:d9:57:b2:
5a:76:51:bd:bc:f9:4f:7a:53:03:08:11:a3:f6:d0:
5e:97:05:44:12:c6:e3:73:42:0d:1b:f8:63:f9:87:
f2:f1:4e:07:da:05:7f:96:f3:2e:e9:bf:a7:fb:ba:
4f:ea:68:5d:99:fa:79:18:08:b0:aa:56:1f:a5:af:
2e:ad:30:3b:95:34:01:1d:bd:8b:e9:a3:11:ef:20:
82:42:96:88:78:59:8b:c4:c2:23:bb:d6:e3:9c:72:
9d:ac:0b:39:8e:32:9b:13:9f:c2:96:9c:b2:27:f0:
b9:79:37:cc:59:19:32:1b:e0:52:9b:20:a8:6b:d3:
4f:bd:c7:6f:58:75:3c:51:8a:0a:23:9d:02:82:41:
51:a5:5a:73:82:9c:65:6c:d2:48:8a:fe:1b:ae:e0:
2b:64:f6:bb:a9:e4:eb:ba:33:f7:18:00:dd:91:26:
c1:d0:e9:75:ee:47:79:20:58:50:c4:1b:77:7b:31:
8b:aa:47:0d:78:7c:cb:c7:62:ec:e4:1f:2f:49:15:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:63:6B:62:D3:41:FC:DE:F4:AB:90:3C:0B:BB:99:EB:79:02:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/85B839A67AC911F1A44654C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:56:85:af:69:81:03:51:bd:74:24:d2:f1:e1:a2:bc:77:f5:
8b:ad:73:8a:0f:ac:2d:77:ea:02:6a:84:4a:b1:f8:92:0a:eb:
b9:6a:be:03:2d:af:27:62:26:4d:58:3b:a4:fe:fd:3a:7c:0a:
b3:36:34:57:02:fb:d2:5d:84:e5:ea:54:e4:81:fb:43:e2:8a:
36:54:74:a7:6f:ca:18:f7:9b:32:ce:a5:53:d1:d2:9d:a4:d9:
d4:19:eb:71:70:4b:21:1e:2b:bf:a3:4b:ba:1d:b8:d0:95:08:
cc:43:98:6a:5f:db:04:4c:87:ec:27:9e:28:61:99:a6:7f:60:
c7:b4:c4:61:54:bb:b4:5e:f8:f1:c0:6b:f0:a8:56:e4:c3:66:
7f:3a:ae:a3:ce:b5:14:c5:8e:16:c0:f0:da:e9:b6:d9:a0:34:
18:94:1c:2b:68:9a:ed:e5:2f:77:ef:b4:8d:d3:b1:f2:c3:49:
06:a9:b2:d2:ba:36:db:48:a3:9c:73:c3:05:6f:b1:b6:a8:89:
63:6e:d1:24:c8:e0:88:05:7c:26:de:93:6d:b5:e2:01:d2:bd:
d2:1c:7e:76:14:4a:ab:64:03:d7:98:72:45:cf:b7:a1:d3:fa:
0c:da:18:8a:54:1b:39:60:ba:6e:96:a0:dd:f3:9f:e3:b7:15:
af:46:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:01 2026 by rpki-client