Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2AB09088FFA11F186B996E5CE1D38B0.roa
File: A2AB09088FFA11F186B996E5CE1D38B0.roa (raw, json)
Hash identifier: ZRQapGuHJZRhRe0ETf6NQqdtLN92FE5TwQX9WVi47g4=
Subject key identifier: 88:3F:A4:66:6C:01:E3:81:47:AC:27:59:12:77:1D:0A:75:38:9C:F1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20AA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2AB09088FFA11F186B996E5CE1D38B0.roa
Signing time: Tue 04 Aug 2026 11:50:06 +0000
ROA not before: Tue 04 Aug 2026 11:50:02 +0000
ROA not after: Fri 04 Aug 2028 11:50:02 +0000
asID: 14670
IP address blocks: 154.16.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8362 (0x20aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 11:50:02 2026 GMT
Not After : Aug 4 11:50:02 2028 GMT
Subject: CN=6a71d1ee-6f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:2f:56:ba:74:96:bd:fb:b1:5f:e3:92:2d:
9d:86:fc:69:6b:97:4a:d8:f6:a8:47:ae:1b:3a:73:
d1:ea:f3:dc:2d:96:50:10:28:39:05:60:f0:bd:35:
e7:df:49:bb:7e:f7:4f:49:e2:68:a2:1c:75:2c:e9:
5d:a5:fe:4f:7d:63:ba:08:1b:4b:0d:74:e8:2c:d4:
b2:2f:d2:32:9a:57:eb:9e:19:3c:be:6a:e9:37:00:
bc:d3:97:3d:e1:b2:7f:e2:ca:18:21:7f:4f:30:87:
15:82:8a:b4:8c:ce:2d:5a:ef:29:37:46:aa:99:e8:
3c:d5:28:24:4b:9a:ab:62:24:6a:72:c0:ef:07:00:
9a:c3:76:9b:43:81:b7:da:4f:a5:3f:b1:6b:5f:7f:
8e:83:1d:d9:88:02:f3:26:53:b1:af:5b:9c:6d:0c:
23:9f:82:04:c7:d4:69:58:e2:6e:dd:2e:7e:76:2c:
01:c6:52:2c:a9:c5:e3:c0:da:75:60:fc:38:4d:7e:
7a:27:e5:7c:d2:f6:d1:07:bb:e2:58:80:32:01:76:
ff:9a:c3:5c:e3:74:97:9f:ab:4d:a3:f1:30:86:76:
50:83:50:7f:c4:0e:d3:61:48:78:f6:42:46:cb:93:
36:9f:11:a7:0d:88:71:8b:03:fb:67:d8:d2:71:23:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:A4:66:6C:01:E3:81:47:AC:27:59:12:77:1D:0A:75:38:9C:F1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2AB09088FFA11F186B996E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
03:04:27:00:8a:85:a6:8f:de:54:d5:29:bf:6a:dc:47:10:26:
06:dc:f9:4b:22:ed:3a:52:33:4a:ee:c3:3b:0b:46:06:ab:a7:
0a:97:58:b4:15:c2:40:88:09:f1:bd:e7:4e:33:be:d6:8f:71:
0e:f4:96:ad:97:2b:aa:e7:c4:77:76:81:4f:2d:7d:d2:64:62:
7d:0f:9b:9f:12:46:a4:f4:93:56:20:d0:53:19:23:d1:b7:90:
4e:a1:d3:e2:b5:47:90:c6:66:12:2a:d8:db:64:45:2a:8a:92:
85:26:95:d0:83:21:b6:fa:de:7b:5f:5b:a7:6f:8d:5d:3b:24:
fe:3d:66:5a:0c:6e:8a:de:37:cd:53:15:c5:a7:0a:ac:59:91:
ab:8a:50:7e:bb:f9:d8:5d:18:2e:e3:2a:8d:45:a8:36:fb:0e:
c5:7e:e8:6f:80:25:bb:ab:9a:f4:47:b4:67:8d:12:b5:c1:cb:
e8:9e:53:08:b7:9b:57:46:77:fe:47:ca:d2:91:d7:3f:61:67:
0d:4e:c5:ab:da:a9:4b:2d:62:67:b4:3b:09:36:8a:59:06:bb:
c2:92:f5:63:b5:dc:6d:77:9a:32:9d:aa:72:f2:44:f5:6f:f1:
29:d0:b2:6a:6b:62:c2:7a:b2:59:b9:f4:8d:8f:15:bb:f6:31:
f1:08:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:24:53 2026 by rpki-client