Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/95CD396E90E411F183F77AEBCE1D38B0.roa
File: 95CD396E90E411F183F77AEBCE1D38B0.roa (raw, json)
Hash identifier: g+4YqRAMKN0wRO01x/Q1aJyw5RQsJMfb+DVFEvRiMs0=
Subject key identifier: 02:59:54:BD:54:FD:DC:AD:F4:CC:B4:27:19:21:25:8F:E6:21:F8:C9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20CD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/95CD396E90E411F183F77AEBCE1D38B0.roa
Signing time: Wed 05 Aug 2026 15:44:47 +0000
ROA not before: Wed 05 Aug 2026 15:44:43 +0000
ROA not after: Sat 05 Aug 2028 15:44:43 +0000
asID: 402265
IP address blocks: 154.16.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8397 (0x20cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 15:44:43 2026 GMT
Not After : Aug 5 15:44:43 2028 GMT
Subject: CN=6a735a6f-6204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:f7:3a:1c:f3:c8:7c:c7:14:14:d0:0c:d3:
ae:c1:e2:d7:a6:c1:e3:14:41:17:b4:c3:03:32:5c:
17:c5:96:f3:7b:28:f5:13:39:c4:fc:0e:a0:69:3e:
d4:db:45:3c:c7:cc:a7:8a:b0:8a:b0:b3:82:f6:42:
2c:24:e8:13:d4:9d:db:dc:9b:56:99:d4:0d:79:16:
91:e1:c1:d9:7e:63:39:38:d7:a0:6b:1f:89:87:09:
8b:be:f7:7d:c5:fe:ec:a1:86:cc:ec:3f:48:7c:73:
07:da:f9:2e:63:c5:50:1e:6c:ee:3a:58:95:b9:6d:
76:6e:21:f1:3b:87:9e:21:3b:c8:9c:3f:e8:a6:31:
c2:ae:30:95:4d:4a:31:06:83:67:c2:10:94:af:6d:
42:73:1a:0a:fc:3b:8d:f2:6b:29:e0:fe:a9:02:bf:
c5:76:47:57:11:4c:77:ca:7e:ce:34:29:08:a1:3a:
88:8a:64:59:ed:08:e0:fc:76:df:e4:a1:a9:62:ad:
2c:0d:27:f2:8c:76:72:67:73:14:41:5d:f7:35:7f:
28:48:90:36:29:5e:95:32:37:7c:99:bd:3f:0b:c6:
c2:09:59:fa:16:c9:8e:96:4f:7f:aa:1c:ae:01:60:
5b:85:72:67:e6:26:22:f6:d7:c4:d1:cc:b1:de:0e:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:54:BD:54:FD:DC:AD:F4:CC:B4:27:19:21:25:8F:E6:21:F8:C9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/95CD396E90E411F183F77AEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:26:84:69:9e:4d:6d:71:73:d1:41:b1:9e:5f:b4:f5:b0:a9:
9e:23:54:df:8d:ff:10:b8:70:9e:ff:b2:c0:28:0b:53:88:8b:
f3:ac:aa:8a:dd:8a:02:06:07:a7:c5:62:e0:76:61:c3:3e:39:
f8:65:24:93:a5:96:ab:10:24:c5:27:01:43:5b:52:66:1d:3f:
04:62:4f:d7:2b:53:fd:9f:26:50:42:46:49:e4:0d:34:59:7e:
f8:ba:d5:a0:6c:ba:6e:7b:67:41:d7:b6:7d:38:59:59:f7:23:
f1:9f:4d:22:e6:8f:d8:d0:c0:40:8d:10:ea:b8:52:1f:aa:00:
5d:64:1d:3e:0f:be:9e:04:72:02:bd:e8:f9:59:75:5b:52:1b:
da:13:de:32:5a:27:eb:5f:42:7b:4d:50:72:ec:31:2a:f9:2d:
da:1c:99:07:6a:dd:5e:72:5a:d0:45:f1:ba:07:8c:78:3c:a5:
53:55:48:a4:eb:46:e4:94:37:38:d3:b5:a9:d7:16:5e:d9:d0:
89:10:f7:ea:3e:b3:47:4a:c8:9a:3b:0f:44:7b:96:48:da:91:
07:24:ef:24:2a:fb:38:01:09:cc:cf:81:da:da:b4:4f:6c:fa:
61:43:ed:5b:e6:64:84:d4:5a:fd:7b:7d:47:cb:b5:6e:50:bc:
89:2d:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:57:59 2026 by rpki-client