Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A1AF1EA4918011F198FAF8A1CE1D38B0.roa
File: A1AF1EA4918011F198FAF8A1CE1D38B0.roa (raw, json)
Hash identifier: WMImvKWkGbhpiUZg2G7zdYAr/hnhtDeSQmquX0tdAus=
Subject key identifier: F5:C3:6C:95:F1:22:BA:21:D3:80:7A:A5:3B:47:F8:9A:FA:1F:8A:85
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20E5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A1AF1EA4918011F198FAF8A1CE1D38B0.roa
Signing time: Thu 06 Aug 2026 10:21:48 +0000
ROA not before: Thu 06 Aug 2026 10:21:44 +0000
ROA not after: Sun 06 Aug 2028 10:21:44 +0000
asID: 402265
IP address blocks: 154.16.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8421 (0x20e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 10:21:44 2026 GMT
Not After : Aug 6 10:21:44 2028 GMT
Subject: CN=6a74603c-b414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:68:a3:b6:2e:6a:aa:e0:ff:39:33:04:d4:
da:6f:2a:44:94:f9:b4:12:e0:cc:57:0c:f5:2d:dc:
e5:01:33:39:75:b8:3b:33:5f:69:b7:c4:5a:b5:ba:
06:1c:a2:06:66:4a:fc:8c:be:75:c2:bf:4a:ce:9b:
f8:8d:7c:c9:23:3a:a3:75:68:67:2c:4c:28:8e:cd:
3b:df:73:93:27:6a:c4:cc:92:4c:73:b4:fa:d9:6c:
6d:2d:67:11:e4:02:47:8c:ba:f9:93:c7:62:63:5a:
66:ff:55:35:fa:60:31:e5:07:4b:2e:67:6f:48:a3:
40:22:a1:40:12:74:f0:af:a4:61:4e:54:4b:58:fb:
de:9e:a0:ed:3e:d4:e4:75:e7:bc:54:ab:c9:43:d7:
d1:cd:62:04:73:7b:e2:a2:a5:29:68:ef:54:57:82:
5a:17:6a:4e:e4:e6:28:1b:24:d4:8d:0d:0a:b8:be:
39:f4:d0:44:2d:29:f6:6b:8d:f9:12:95:43:7e:e7:
a6:35:b3:8f:92:85:ab:8c:3a:1b:9a:d1:74:59:cf:
45:01:de:ed:53:00:6d:aa:82:46:68:c1:18:ae:26:
01:a3:7e:7b:ad:59:2f:53:4a:2d:95:a0:30:f0:69:
ad:8f:d0:4d:58:38:ff:ab:2b:4d:b2:c7:34:fd:84:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:6C:95:F1:22:BA:21:D3:80:7A:A5:3B:47:F8:9A:FA:1F:8A:85
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A1AF1EA4918011F198FAF8A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a6:14:02:da:b4:03:bc:c6:92:72:cf:b0:51:35:9f:d4:2b:
5c:d6:ba:0e:c6:b0:5b:58:e4:fb:a1:bd:44:23:ca:04:35:1c:
da:c8:5a:cf:8b:2c:f1:34:f9:40:9e:14:ea:00:7f:5d:9d:2e:
ae:86:6e:33:88:e5:e3:80:74:12:4c:ee:82:61:46:70:ce:f0:
a9:2c:de:3c:98:d0:a6:c8:6b:21:6a:9e:0a:27:94:63:2a:15:
87:3f:5d:35:53:18:1f:de:8f:b3:e6:49:24:d7:22:36:60:1f:
e6:97:ca:24:7e:7d:87:f5:c3:be:ff:f5:e5:8a:a1:5b:c5:67:
90:b9:f4:5d:8b:b3:89:07:65:e5:f5:49:ef:6f:f1:ce:fa:d1:
06:15:df:f2:cb:55:c3:c9:4a:2a:ca:59:2b:4a:58:57:1e:be:
ea:57:83:44:7a:5f:c5:42:f7:4d:9a:46:6f:b2:4b:aa:e3:5c:
34:78:6c:bf:4f:65:c3:05:44:43:4f:c9:6a:ad:44:f9:61:c1:
05:3b:69:8b:93:c6:0b:47:7d:34:90:c5:42:8a:5b:62:25:10:
bd:49:e3:06:e9:2a:42:b2:d2:0d:6c:4f:0a:3e:db:7e:29:5f:
2c:49:93:a9:cb:47:0a:b2:ad:6f:b1:c9:56:32:a4:c5:bc:83:
9f:64:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 00:29:19 2026 by rpki-client