Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89AE781A663111F19D76E2D4CE1D38B0.roa
File: 89AE781A663111F19D76E2D4CE1D38B0.roa (raw, json)
Hash identifier: qFg+o9CRrFsnTy8d3tQFxyRswWFL5WBxg380PE2NL50=
Subject key identifier: 78:33:B0:34:01:14:FC:D7:CB:D5:83:37:78:14:A2:AD:57:71:E4:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FCB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89AE781A663111F19D76E2D4CE1D38B0.roa
Signing time: Fri 12 Jun 2026 07:37:18 +0000
ROA not before: Fri 12 Jun 2026 07:37:12 +0000
ROA not after: Mon 12 Jun 2028 07:37:12 +0000
asID: 154642
IP address blocks: 154.16.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8139 (0x1fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 12 07:37:12 2026 GMT
Not After : Jun 12 07:37:12 2028 GMT
Subject: CN=6a2bb72e-3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:01:63:73:82:fc:a4:20:49:cd:13:03:06:
61:da:b8:a5:df:87:dd:e3:1c:27:82:4e:ed:01:84:
7a:d1:e2:82:29:ae:63:94:6a:ba:c8:64:b3:eb:a4:
a6:08:2a:8f:7e:35:77:74:85:71:56:9a:9d:99:ee:
ee:ce:de:be:10:c7:10:24:8f:1c:9d:3f:cd:a4:9b:
01:92:a8:99:66:dc:b3:5c:6c:97:e7:10:bf:f6:21:
ba:b0:69:df:f1:15:44:f2:7a:97:04:22:7d:9e:0d:
f6:42:51:6f:99:0e:eb:54:5b:ad:44:a3:f1:81:5a:
ec:4a:54:df:35:85:50:2c:52:1d:63:13:e3:a8:c4:
94:56:39:40:b8:a7:6f:f1:52:29:cf:72:21:8d:0f:
57:c0:79:53:42:14:78:9a:05:2a:3a:b4:3d:db:a4:
ff:f4:76:4d:de:9f:67:9c:06:f1:54:ce:d7:71:f3:
53:df:88:48:68:f7:eb:5c:16:d9:25:d5:28:53:38:
f3:9c:9c:e5:4b:19:79:ec:40:08:0b:09:c1:2c:3c:
bc:80:e6:ed:ad:c0:5d:7d:3d:2a:aa:cd:88:ed:8a:
e3:bf:8e:66:eb:00:36:e6:7c:a0:19:f9:a5:33:4f:
6b:8d:2e:7e:bf:3e:7e:b4:ea:b8:87:b9:a7:ab:f6:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:B0:34:01:14:FC:D7:CB:D5:83:37:78:14:A2:AD:57:71:E4:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89AE781A663111F19D76E2D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.62.0/24
Signature Algorithm: sha256WithRSAEncryption
10:30:33:79:60:19:11:8b:19:53:bc:9a:81:ba:55:29:de:65:
9d:62:1f:8c:be:68:f4:6a:9b:bd:c0:e6:af:78:31:33:1e:fa:
cc:f6:b7:1c:2a:60:11:9b:7b:01:08:00:03:ef:2a:62:b4:47:
d2:10:3f:ad:cc:ec:2c:14:66:9f:40:36:2f:21:1e:7f:28:7d:
e9:93:a2:64:11:ad:8b:6e:dc:25:f8:44:1a:d9:11:94:3e:10:
03:34:b0:47:39:df:6b:82:a7:fc:db:cc:8f:54:5e:97:df:ea:
23:8f:2a:a3:bb:98:6c:c6:9e:f5:95:f3:90:c4:eb:d6:46:5f:
eb:7b:6b:25:2a:05:e9:9d:51:8d:98:6f:56:c5:11:cf:4a:df:
00:85:d8:64:56:2b:c2:c0:7e:8e:f0:f2:0e:b9:68:c1:70:6d:
66:b2:48:95:6f:c6:b9:56:eb:d6:02:83:26:b0:c1:b8:dd:26:
73:7d:8f:f5:af:2c:3b:ca:b4:a7:64:68:24:76:69:60:68:0d:
ed:d8:43:7d:90:1b:30:4a:2c:72:c6:fa:6e:9e:c8:3b:ff:61:
06:a4:eb:2a:89:82:75:5c:fe:9a:ef:df:8c:ee:cb:6c:19:eb:
29:bb:15:cc:38:46:c5:b8:b6:9c:ba:29:7a:ac:52:8d:b7:83:
80:2d:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:48:25 2026 by rpki-client