Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FC6911A9AED11F182584FC7CE1D38B0.roa
File: 8FC6911A9AED11F182584FC7CE1D38B0.roa (raw, json)
Hash identifier: hn9SwcElHG4ymHejTcW4YlmUSOfhwmxBELVICX7v13I=
Subject key identifier: BF:0D:01:E5:F8:09:D5:6B:17:E0:2C:41:5B:BF:97:5E:0C:D7:A3:5E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2109
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FC6911A9AED11F182584FC7CE1D38B0.roa
Signing time: Tue 18 Aug 2026 10:14:14 +0000
ROA not before: Tue 18 Aug 2026 10:14:10 +0000
ROA not after: Fri 18 Aug 2028 10:14:10 +0000
asID: 834
IP address blocks: 154.16.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 20 Aug 2026 10:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8457 (0x2109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 18 10:14:10 2026 GMT
Not After : Aug 18 10:14:10 2028 GMT
Subject: CN=6a843076-2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:22:21:fc:d6:56:c2:73:b7:e8:86:fa:27:
3f:d2:1c:1e:28:17:01:c5:78:a4:c1:93:87:5e:2a:
89:16:9d:ed:ad:0d:81:7b:95:da:2a:04:b7:8c:5a:
6f:5a:60:90:a4:b9:f7:b6:dd:28:fe:18:8b:3c:94:
8d:1d:24:e0:f6:d2:0f:18:73:00:21:fc:13:0b:7e:
05:99:b9:81:92:a1:3a:04:8a:45:c8:bf:c7:9a:b5:
4d:4d:e6:53:ca:03:46:b9:90:0b:56:91:3b:f8:8c:
26:10:9c:8c:a2:7e:82:75:c0:2c:14:1b:23:84:46:
ca:e0:46:14:72:32:dc:a5:05:1c:40:9a:1a:eb:69:
37:01:f7:5e:f2:fb:17:60:07:a5:b5:f7:19:55:6a:
38:e2:86:65:10:17:55:db:a4:51:66:0a:4f:7d:00:
68:be:6a:71:78:d4:e8:a9:92:6c:65:01:fe:78:c3:
0d:a4:f2:40:ba:7b:59:67:e6:18:a8:fd:67:dc:ae:
04:a3:c2:e1:06:ca:18:9a:04:4d:d2:a4:e1:e2:ad:
7a:27:4e:7d:af:a8:ca:a9:b7:36:3e:a0:af:cb:cb:
de:ee:91:0a:7c:44:22:b4:da:61:5c:b6:c1:ae:fc:
39:04:7b:df:f7:9e:4a:94:cf:3a:4f:82:65:40:32:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:01:E5:F8:09:D5:6B:17:E0:2C:41:5B:BF:97:5E:0C:D7:A3:5E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FC6911A9AED11F182584FC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.80.0/24
Signature Algorithm: sha256WithRSAEncryption
84:27:bf:ec:cc:b9:a6:66:74:28:21:75:8f:dd:93:15:1d:2b:
7b:b5:5c:eb:0d:6a:19:e7:02:ac:4e:55:b1:c9:a2:12:ac:4b:
54:9b:73:ee:74:ec:4c:f5:98:9c:e9:02:01:a7:a6:96:ab:96:
c4:b8:1e:73:14:6e:11:55:49:c2:c8:62:ac:5c:d6:7b:9f:e8:
b1:ab:88:17:40:2e:41:79:6e:72:34:02:4d:5c:9a:c7:10:84:
06:c1:07:64:29:93:33:cc:12:df:cf:1b:6b:8d:d4:96:14:42:
9c:6f:ce:16:6d:18:8d:89:38:29:90:33:40:9e:58:1f:b7:09:
dd:44:67:a4:3e:87:93:d7:c9:53:b0:44:26:ae:bc:3f:76:4e:
91:8b:df:b2:b2:e7:5d:03:12:ac:bf:c5:02:68:c7:1b:9a:6b:
96:84:6d:88:bc:1e:54:31:2d:66:bc:dd:25:82:82:a4:af:bf:
31:8c:bc:c7:63:b1:1f:e5:d5:01:2b:4e:25:e7:c5:9b:bf:d0:
48:e3:c5:1f:e2:93:d0:c1:f2:87:55:25:d7:f0:2e:89:c9:e4:
29:9c:fd:6f:e6:bd:5b:2e:18:f5:64:2f:88:ff:bd:35:e6:04:
93:08:84:bb:5e:ea:4a:c1:f4:d6:d4:eb:09:5a:87:44:f8:c9:
de:f7:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 17:34:26 2026 by rpki-client