Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A08EDD884F9611F1BCF5B9D2CE1D38B0.roa
File: A08EDD884F9611F1BCF5B9D2CE1D38B0.roa (raw, json)
Hash identifier: 4L+ZtJtm4RH948LHYDAcmkGBVAg7Ywt6FNWd7p3yfCo=
Subject key identifier: 80:E6:F8:78:EE:7F:9B:35:E1:64:91:4D:D8:3D:D5:C1:2D:37:B7:C3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F3B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A08EDD884F9611F1BCF5B9D2CE1D38B0.roa
Signing time: Thu 14 May 2026 13:12:59 +0000
ROA not before: Thu 14 May 2026 13:12:53 +0000
ROA not after: Sun 14 May 2028 13:12:53 +0000
asID: 13213
IP address blocks: 154.16.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 16 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7995 (0x1f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 14 13:12:53 2026 GMT
Not After : May 14 13:12:53 2028 GMT
Subject: CN=6a05ca5a-b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:dc:c0:96:16:9a:08:c2:50:e4:8c:0e:c7:
30:70:79:25:a4:4f:36:87:59:fe:d0:fa:ed:16:28:
ee:60:fd:d4:97:dd:b6:d7:55:70:88:66:10:ca:e1:
1f:66:43:4a:b6:ca:d9:a5:f5:97:46:1f:12:ab:d1:
6b:bc:d4:ec:7c:a1:e1:06:d1:35:7e:69:0d:ef:7f:
85:d9:18:46:e0:4a:50:cc:ce:73:c2:51:e1:ef:1f:
0c:4e:9f:25:f2:0c:a8:1e:4a:d1:cd:1e:25:b9:2b:
20:4c:17:d4:b2:99:dc:df:fa:9a:ff:0c:19:2c:a0:
85:6f:95:d1:e1:6a:36:af:0b:d5:02:cb:9e:c5:66:
0c:c6:29:b6:09:9d:5f:b2:1d:e6:65:09:3f:84:a3:
e7:61:27:db:aa:8d:df:3c:fc:1a:98:0b:c4:a9:8a:
83:2b:90:80:3c:dd:09:24:74:b9:b0:18:2a:bf:a3:
2f:07:a9:30:3b:7b:d0:f4:12:d7:77:d4:a3:d6:08:
bc:4d:8d:8d:7f:31:e8:41:8a:a7:6d:4a:02:da:01:
8c:31:61:ec:50:4c:90:64:13:f8:b4:29:3b:ec:b4:
f6:ba:04:16:5a:30:8a:84:5e:d2:4c:bd:9c:55:c3:
ed:bb:7b:50:9d:52:d1:cd:4a:96:12:4a:bc:bf:b0:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:F8:78:EE:7F:9B:35:E1:64:91:4D:D8:3D:D5:C1:2D:37:B7:C3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A08EDD884F9611F1BCF5B9D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8a:25:3e:bc:73:f2:44:38:d4:3c:42:aa:11:85:f9:7d:7c:
f6:24:6a:3d:67:90:d4:7b:b7:24:6b:17:6a:44:f6:ea:d8:f6:
b7:0a:4b:e4:f8:2e:93:d2:eb:f9:bf:17:b9:14:43:53:07:10:
cf:96:a6:8e:0e:e7:de:7d:cb:f0:46:29:c2:d6:f5:f5:6d:6f:
0c:d0:fd:ba:11:67:cf:38:26:14:e8:3a:6b:23:cc:48:c4:ac:
5e:52:24:02:38:c0:30:a0:43:14:fc:fe:2a:38:89:1c:c6:a3:
24:e6:ce:ca:26:37:74:32:5a:bc:a8:21:87:d0:b2:11:5d:38:
2c:32:04:33:1f:3b:e2:07:a1:61:78:16:d0:a7:58:d2:a7:be:
12:d6:a8:2c:cc:07:e3:42:26:c8:9f:ff:fd:83:19:a1:6e:14:
f2:6c:ab:1b:64:5a:de:d3:ed:a8:25:19:ce:99:62:50:96:a9:
83:26:20:34:7c:00:a0:07:71:28:35:7f:be:e2:d6:e7:55:f4:
e0:f2:19:99:5c:85:3d:d4:12:70:c7:99:fa:43:72:e3:09:a8:
26:5d:09:97:93:56:f0:4e:9d:33:97:e0:8c:33:c6:65:e1:ed:
1d:10:0f:34:1f:0a:a3:bd:26:a9:d0:ee:e6:4c:15:11:cc:72:
b5:5a:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 18:37:19 2026 by rpki-client