Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/91BC5DF87ACA11F18C1D38CACE1D38B0.roa
File: 91BC5DF87ACA11F18C1D38CACE1D38B0.roa (raw, json)
Hash identifier: lyusy4+oz1AjZzgAm5E20XRaqDf7ZkvHuSMD4mbcLXE=
Subject key identifier: 9E:BC:C1:45:D6:00:76:03:51:37:72:67:E9:A5:5B:7A:53:E9:89:40
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2046
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/91BC5DF87ACA11F18C1D38CACE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:43:08 +0000
ROA not before: Wed 08 Jul 2026 12:43:03 +0000
ROA not after: Sat 08 Jul 2028 12:43:03 +0000
asID: 9009
IP address blocks: 154.16.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8262 (0x2046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:43:03 2026 GMT
Not After : Jul 8 12:43:03 2028 GMT
Subject: CN=6a4e45db-fc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:b1:03:bc:f4:0f:0c:98:dc:ff:15:a5:c8:
2b:97:16:d0:23:16:9e:a1:1b:fd:39:67:c7:49:a2:
80:d8:a2:50:47:1a:1f:e1:8c:fc:5d:d7:1b:34:0b:
10:ce:ca:3d:28:d3:8d:33:d8:d7:60:6f:91:e6:9b:
65:8a:16:8a:02:fd:b5:9a:4c:a7:65:42:67:22:a8:
c0:9c:0d:87:57:27:e1:92:a6:03:bf:d9:6a:28:8a:
52:ef:be:c3:41:a4:17:1a:91:ae:1c:8e:fc:f9:1e:
a0:0d:aa:85:f4:32:76:d8:46:78:d7:b4:bf:a3:0d:
f7:16:da:66:3f:a6:64:e9:5b:1b:2a:d7:9d:52:59:
2d:9d:5a:0d:e5:85:95:c7:f6:1b:fd:45:12:df:f0:
4d:58:18:89:52:a8:0d:3e:17:3f:b5:38:2d:fe:b2:
ab:39:ce:b9:cf:61:98:e9:e5:e3:9f:a1:be:53:41:
42:a1:7b:a7:01:c5:52:dc:b1:57:90:50:05:fd:4f:
83:17:8e:61:71:11:7f:a1:24:75:a0:ec:a1:9f:c5:
d8:74:bf:c4:20:7a:2f:3d:25:a4:9d:fc:94:61:b3:
a7:d9:a2:fa:21:fc:17:8a:16:fa:26:bb:32:9c:bc:
56:82:31:0e:3e:15:b3:40:d9:a3:37:1a:a8:e2:33:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:C1:45:D6:00:76:03:51:37:72:67:E9:A5:5B:7A:53:E9:89:40
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/91BC5DF87ACA11F18C1D38CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.196.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:da:e4:91:5d:7e:31:c6:e1:94:21:76:63:9f:ef:7e:5c:
54:3c:f5:5f:4a:13:75:56:c8:06:40:eb:99:b4:bb:46:9d:37:
ed:5b:2a:fd:97:6d:00:7d:62:eb:37:5e:0a:04:e1:6e:97:1c:
8b:5a:93:95:c8:ff:c5:74:0e:7a:95:b1:f6:bc:10:a4:97:5e:
90:03:bf:ce:22:e2:db:25:75:c1:80:ec:9f:e8:68:a4:01:6c:
6e:23:31:84:5f:a0:00:ce:d0:7d:70:19:38:14:e2:c5:10:b0:
40:bb:6b:48:91:9c:87:9c:22:da:1b:8c:96:5f:32:73:95:6b:
a2:28:ac:71:01:22:d3:81:70:30:bf:fa:2f:6e:9f:f8:02:fb:
40:d0:7e:53:42:2d:9a:50:cd:82:8c:a5:70:fc:13:40:28:34:
82:f2:c6:1a:c4:77:da:81:67:7b:e2:ac:d0:82:48:65:8d:41:
81:1c:f8:2f:e4:57:79:7b:29:a1:ee:3a:18:2c:b5:44:ba:ab:
62:e5:57:dd:e1:7f:46:ea:d8:49:ec:48:11:f2:ca:74:d9:be:
06:28:f2:da:6f:f7:b6:b0:34:ee:e5:87:d9:96:5e:00:68:d0:
f4:ba:c2:d6:30:82:51:c6:1f:de:af:44:3d:ec:36:bc:4c:1e:
9b:56:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:02 2026 by rpki-client