Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8AB3CAEA2CC911F1B48465B4DAE4EC9C.roa
File: 8AB3CAEA2CC911F1B48465B4DAE4EC9C.roa (raw, json)
Hash identifier: JM67k848sO/DMZIQ8ejEfKER1RS4Vm6J1PLIzKanSlA=
Subject key identifier: 4F:80:4A:0B:58:9C:9A:07:E2:0E:14:F8:2D:BF:B1:DE:0C:01:51:FE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EA4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8AB3CAEA2CC911F1B48465B4DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 06:19:15 +0000
ROA not before: Tue 31 Mar 2026 06:19:11 +0000
ROA not after: Fri 31 Mar 2028 06:19:11 +0000
asID: 32159
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Apr 2026 00:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7844 (0x1ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 06:19:11 2026 GMT
Not After : Mar 31 06:19:11 2028 GMT
Subject: CN=69cb6763-32eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:94:23:47:81:01:0e:56:d8:15:f9:12:6e:
6d:15:74:ed:94:f8:86:9b:17:63:f4:dd:ec:52:17:
74:5b:88:fa:94:df:ef:23:c2:c0:55:fa:c9:06:bc:
db:f8:8e:e9:12:50:25:12:62:d2:91:b8:7b:05:7c:
c3:13:45:67:14:41:f8:c2:df:82:60:2a:15:9e:b9:
93:3e:23:b0:f6:02:8c:12:80:08:fd:a7:7c:02:64:
fc:50:23:ec:4b:55:da:d0:2e:c5:4f:45:dd:44:c9:
7b:86:18:59:06:e8:7a:18:e0:ba:c6:b4:6b:c5:a6:
82:27:be:fa:69:c7:15:e6:aa:3e:9b:f0:0c:ed:34:
ef:72:09:bd:a5:3c:61:bb:b0:eb:2f:1f:84:a8:fe:
08:cd:f5:12:3b:77:3a:c2:fc:0a:d5:67:ae:89:de:
67:05:1e:d0:f5:87:27:38:8c:8d:0b:c9:01:70:14:
49:d7:b3:d4:18:a3:98:da:cb:84:bf:3f:3f:f6:2c:
f5:9e:69:4c:b5:db:b1:c8:eb:33:7d:51:7f:6f:78:
49:05:37:42:fd:f5:d4:bf:9b:0c:9c:83:d5:f8:92:
01:40:ac:50:18:23:76:cb:57:15:08:db:ef:2d:70:
83:54:1b:f3:fe:74:96:04:6e:f3:dc:6a:b2:69:77:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:4A:0B:58:9C:9A:07:E2:0E:14:F8:2D:BF:B1:DE:0C:01:51:FE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8AB3CAEA2CC911F1B48465B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:25:20:5d:b3:a1:ba:7c:ac:18:71:5b:a9:9b:43:84:dd:
7e:05:7e:37:df:0f:cc:71:ad:c9:a8:03:6d:28:ce:40:76:04:
27:9f:6c:44:32:75:7b:89:4b:c3:01:dc:f1:11:21:80:e1:b1:
58:fb:32:77:d9:eb:69:e4:7e:49:03:02:a1:15:6a:11:52:16:
a1:e5:cd:f8:8d:62:7e:dd:f7:d2:76:e9:dc:f2:f2:a8:27:18:
97:5b:ef:70:a1:62:3a:0b:44:d0:58:b4:27:a4:8b:69:f3:93:
0f:e1:90:23:c5:e9:4d:0b:d5:eb:3d:c0:46:76:df:91:06:59:
1e:a5:74:4b:08:0f:8b:ad:00:02:c3:3e:6c:7d:06:5e:46:72:
08:ae:61:75:0e:c3:ad:0c:3c:cd:5b:18:1a:ab:a9:70:a8:57:
54:fd:f0:e5:b9:12:55:fc:2d:89:5d:07:1a:80:c1:81:ed:c1:
dc:fd:b4:23:cd:e6:55:a3:b6:c1:02:e4:6e:f7:39:6d:36:a1:
b9:06:5e:25:47:d0:f8:68:29:b1:70:32:f5:9d:75:dc:be:d3:
8f:73:11:ec:f7:79:a7:d0:ea:1b:55:19:22:8d:d8:46:18:f0:
45:05:d7:5a:61:b7:a3:9a:a1:d1:0a:a0:5a:31:53:e0:fa:2b:
5f:94:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 13:23:14 2026 by rpki-client