Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A5012C3861C811F185569D00CF1D38B0.roa
File: A5012C3861C811F185569D00CF1D38B0.roa (raw, json)
Hash identifier: JnZfx11tMkZ1Vfv3KiXi5vKdf+6KHqs4LWuXz9mxTis=
Subject key identifier: FA:EF:40:0A:1E:A2:CA:24:46:69:25:BF:0E:F5:F5:E9:BE:55:67:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FAE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A5012C3861C811F185569D00CF1D38B0.roa
Signing time: Sat 06 Jun 2026 16:56:22 +0000
ROA not before: Sat 06 Jun 2026 16:56:16 +0000
ROA not after: Tue 06 Jun 2028 16:56:16 +0000
asID: 200221
IP address blocks: 154.16.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8110 (0x1fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 16:56:16 2026 GMT
Not After : Jun 6 16:56:16 2028 GMT
Subject: CN=6a245136-5e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:a4:72:16:39:b4:8b:d9:18:f6:e8:72:b2:
24:04:85:3d:d4:00:90:bb:d1:df:14:bc:89:0a:91:
04:b4:f5:82:be:52:3c:8b:b6:ba:72:9a:d3:fe:d2:
46:6e:4d:d7:1a:2c:9f:61:29:d3:30:84:8f:a0:17:
55:a0:3a:fb:60:1f:e4:a1:fb:72:9f:da:0c:ef:d9:
93:7b:28:02:ff:bd:db:81:20:b2:70:df:aa:18:2c:
78:e3:0a:17:eb:9d:3d:5e:10:b0:44:2e:a1:78:77:
85:18:3f:53:8d:1f:b6:65:a1:0e:1e:d8:ac:8b:8b:
5a:d8:1f:d8:4a:b6:95:f8:e1:ae:e7:aa:d4:76:e5:
bd:13:63:6b:99:65:d8:fb:82:c3:8f:a4:e7:e9:68:
2c:ba:11:1e:f2:7f:30:77:d2:c3:54:4b:b8:74:a0:
e5:00:ee:55:95:ae:7f:12:cd:8f:57:8f:71:6a:d8:
37:c5:ce:c7:1c:ac:7e:f0:fa:b4:8b:73:76:d9:cd:
28:0c:24:dd:14:7a:5f:3a:e3:47:f5:0a:b1:56:d2:
61:8e:e1:3a:84:dd:38:b7:ac:f0:e2:7e:31:53:50:
2c:d0:fe:48:62:7b:d5:e9:d8:05:73:8d:c0:c5:d4:
da:dd:67:2a:89:ac:82:e9:a7:94:7c:40:1a:9c:f0:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:40:0A:1E:A2:CA:24:46:69:25:BF:0E:F5:F5:E9:BE:55:67:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A5012C3861C811F185569D00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:08:44:e1:16:00:ad:71:83:9d:4d:0c:a0:69:46:03:00:4a:
68:06:b2:fb:51:c5:2e:a6:0e:3d:a7:fb:2e:48:b2:2e:b8:cc:
75:66:5c:78:89:39:52:1d:79:c2:e2:ca:c0:a7:34:3a:fc:e6:
13:37:70:df:0f:7f:04:69:c5:8a:54:34:dd:56:83:d7:76:2e:
12:06:13:32:57:79:64:de:2a:14:ae:99:f7:87:d8:6e:88:a3:
ae:24:da:93:fe:31:1d:4f:28:f9:00:6a:d0:41:6f:33:32:86:
8b:72:f4:89:db:ec:19:d1:d7:77:d9:e4:67:a9:f8:5a:c6:ef:
25:23:42:05:b5:a3:ef:4b:10:89:1a:a1:a0:d5:bd:40:0b:26:
ec:ae:c6:72:ce:92:33:d3:e6:67:5b:6e:2f:27:83:0f:6d:8f:
20:2c:98:6c:b9:b4:8a:27:cb:01:76:15:f2:2c:5e:f9:c1:bf:
80:f6:bd:da:08:ef:a5:ca:18:e9:86:02:a6:de:3d:fd:52:12:
fc:1d:2a:89:8e:ce:45:0b:84:d7:f4:b7:ae:db:20:ef:e0:f8:
97:46:7f:4b:84:c8:e3:06:02:fd:ec:8f:8c:59:2a:0e:d4:97:
08:2e:13:ba:98:43:c3:31:61:f4:30:e5:86:39:e6:33:fb:28:
39:00:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 10:03:26 2026 by rpki-client