Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89F688A27E8811F1B771F5CECE1D38B0.roa
File: 89F688A27E8811F1B771F5CECE1D38B0.roa (raw, json)
Hash identifier: YYfqRtY0R+YtbKQnnZ2ZF6vqr7IQdTM/GLoK07wrmPM=
Subject key identifier: 48:DF:C8:B6:30:88:A3:F8:95:4B:F3:D5:37:06:AD:32:12:BB:88:89
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2059
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89F688A27E8811F1B771F5CECE1D38B0.roa
Signing time: Mon 13 Jul 2026 07:00:32 +0000
ROA not before: Mon 13 Jul 2026 07:00:28 +0000
ROA not after: Thu 13 Jul 2028 07:00:28 +0000
asID: 29802
IP address blocks: 154.16.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8281 (0x2059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 13 07:00:28 2026 GMT
Not After : Jul 13 07:00:28 2028 GMT
Subject: CN=6a548d10-6f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:8c:b6:95:8a:17:54:ee:5f:09:8f:0d:2e:
1d:6d:7d:8c:32:8b:1c:4d:49:fe:a3:75:da:c6:e4:
f4:12:80:03:a5:bf:b5:78:79:d5:77:72:8f:bf:43:
19:73:b4:22:95:b0:74:69:4f:ef:c8:43:5c:90:c1:
d5:58:2d:09:d6:c3:55:bd:81:c3:b3:88:75:57:14:
33:f6:63:5b:ed:d4:e3:b1:2d:92:0f:6f:56:c3:49:
6e:72:cf:8f:66:c0:ac:92:e7:bc:3b:63:eb:df:fa:
05:f6:f1:64:d7:60:c3:0f:01:58:08:db:40:2c:df:
75:6b:20:04:94:4e:22:cf:ee:e7:d3:83:73:ac:35:
69:1f:19:6d:2a:91:a8:b6:1b:3b:1f:e8:ce:38:52:
a5:a7:b5:28:61:51:3e:a4:49:dc:54:a4:8b:36:9d:
61:64:ea:c3:3c:b3:fb:55:7a:fa:17:7f:7f:89:01:
ef:5a:38:05:4b:23:b9:70:f0:e4:3d:0d:12:d1:61:
80:20:fe:f9:51:fc:bf:2d:ba:6d:b2:ca:19:b1:40:
05:8e:18:86:07:b2:4e:c6:07:2b:01:f1:40:6b:f6:
53:6e:00:85:1b:27:8f:dc:59:d5:5f:24:21:62:45:
96:90:d8:3c:7b:cc:52:7e:45:3b:14:34:89:50:02:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:C8:B6:30:88:A3:F8:95:4B:F3:D5:37:06:AD:32:12:BB:88:89
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89F688A27E8811F1B771F5CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.155.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b8:4d:9f:88:98:61:35:03:37:2e:f7:84:91:d7:44:a1:03:
a0:96:7b:c8:0a:bb:52:47:89:fd:e6:2a:69:ef:26:f2:b0:ed:
54:70:f2:47:4e:f1:e1:9f:21:93:f0:ec:8c:0a:b5:ba:55:29:
dc:df:8b:a2:b4:75:f0:da:67:13:38:9a:3f:93:a0:37:64:1e:
c7:cb:06:8e:79:9a:5a:60:3e:cc:b5:4b:a0:59:db:77:9e:84:
24:38:0e:20:a4:30:01:73:5d:69:7f:e2:0a:be:18:56:6e:c6:
7d:22:84:d0:59:0c:cf:65:43:cf:62:11:92:ff:20:99:31:46:
ff:16:05:93:05:fe:a2:b8:cd:93:c8:40:e7:57:01:bf:14:3c:
b3:08:8b:54:4e:7f:ef:a7:32:84:b4:24:cc:ab:e7:d0:d8:0c:
6e:91:4f:fe:4c:55:4e:3f:33:23:6f:61:3f:a1:45:1d:af:69:
48:3d:9d:89:72:9d:2f:96:98:a1:b2:31:0c:f2:c7:26:8c:9c:
da:d5:c3:4d:8e:f2:15:a2:4e:6d:80:3c:ed:0f:1c:c2:1a:e2:
fd:36:f9:d7:3d:5c:2b:cb:28:f7:95:a9:71:59:aa:5c:25:34:
62:ab:cb:2a:22:01:2d:46:31:8b:36:71:b4:79:39:07:8e:af:
81:0e:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 20:33:25 2026 by rpki-client