Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/91AA7FE29D2611F1B03EDAC6CE1D38B0.roa
File: 91AA7FE29D2611F1B03EDAC6CE1D38B0.roa (raw, json)
Hash identifier: KHW3rfEo6yiKzkwLiWAJL+tRn9Bn0ooOY4ZHNNMV4WY=
Subject key identifier: 46:68:75:71:3A:96:D9:9D:C1:42:31:43:BE:42:87:93:14:1F:1F:12
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 212D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/91AA7FE29D2611F1B03EDAC6CE1D38B0.roa
Signing time: Fri 21 Aug 2026 06:07:21 +0000
ROA not before: Fri 21 Aug 2026 06:07:17 +0000
ROA not after: Mon 21 Aug 2028 06:07:17 +0000
asID: 152698
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Aug 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8493 (0x212d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 21 06:07:17 2026 GMT
Not After : Aug 21 06:07:17 2028 GMT
Subject: CN=6a87eb18-5107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:da:7c:fb:45:22:b5:6c:1a:51:ff:e7:44:
7f:ec:2a:77:10:93:1e:55:bb:b9:8d:7b:46:3c:d9:
28:aa:48:9f:86:c0:37:e5:43:36:fa:42:a2:63:41:
1a:35:1e:e8:a7:01:c5:d1:83:b7:81:85:fe:55:58:
08:09:72:ca:81:f4:2e:5f:d9:39:e1:1d:d0:39:0b:
ad:3e:24:0b:65:15:8e:fa:00:7a:3a:1e:3c:4f:e2:
b7:be:5f:e2:4f:99:9f:4a:b4:d8:25:d0:17:3a:6a:
31:90:76:6e:58:d3:d8:a4:07:02:25:c0:8f:44:a4:
17:d6:47:3e:48:d0:13:e3:6c:8d:a2:4b:e3:78:3d:
fd:c8:c1:27:a6:99:7c:05:57:58:bc:96:c0:62:31:
1a:4b:5d:0b:3b:d6:e3:40:9e:a6:a4:3c:d1:90:4f:
fb:31:9a:c4:60:d5:73:6f:11:7e:1d:a2:6f:7e:db:
0e:ec:ea:a0:b3:5f:f1:8f:37:5e:22:12:49:2d:48:
4e:1a:6a:84:f9:c0:2d:d5:c8:15:b4:5d:85:78:ea:
0e:aa:3b:1e:cd:c1:8d:91:49:8c:d3:ee:c8:e9:00:
a9:72:21:fd:d5:89:b8:21:63:06:55:94:3b:c3:5d:
21:89:67:44:61:48:84:57:6e:06:35:74:14:b9:b5:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:75:71:3A:96:D9:9D:C1:42:31:43:BE:42:87:93:14:1F:1F:12
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/91AA7FE29D2611F1B03EDAC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e7:d9:58:51:c3:71:d8:31:81:b7:b9:77:cd:10:d6:ef:27:
f5:77:45:3d:1e:51:77:ac:b5:89:b6:a0:18:58:08:21:34:06:
5b:54:5d:e1:57:4f:bf:c2:4d:7b:63:4c:ae:72:6f:33:94:37:
a0:be:48:19:84:79:86:07:c2:20:98:84:fe:f8:b2:83:00:3e:
cd:e7:80:a7:fe:fd:ec:a5:e0:e8:c5:73:f3:49:ea:e8:16:b3:
38:67:51:cf:70:10:bb:68:b4:c7:b8:70:d8:f2:05:a4:6f:97:
01:de:dc:f4:3f:ee:b4:72:f6:6d:7c:9c:a0:c7:6e:7e:d0:d0:
4f:e8:5d:b2:a3:94:92:2c:40:5c:91:96:d2:12:18:e2:4b:2b:
dd:95:e2:b7:13:0d:58:37:36:38:5f:1f:12:12:9e:af:ef:f8:
cf:70:6f:77:8d:b6:cf:b7:fd:54:ab:36:8d:c6:4d:03:44:db:
ca:26:f2:05:ff:71:e8:58:67:32:e6:43:91:ce:96:9b:48:fc:
d4:92:7f:ee:f3:1f:97:0b:6b:f2:fb:de:29:fe:13:65:45:c6:
df:db:b3:7e:d8:19:60:7c:6e:77:aa:70:2a:a5:64:a2:63:66:
7b:8d:12:89:e1:4e:39:29:5f:7f:ab:dd:5d:e4:26:02:c6:3f:
ea:28:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 09:00:06 2026 by rpki-client