Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA88F03C67B311F188822CFECE1D38B0.roa
File: AA88F03C67B311F188822CFECE1D38B0.roa (raw, json)
Hash identifier: 12RexEH0qT5WeiPqbohqgn7aFJtfbry2kydgXlDXFq0=
Subject key identifier: EA:56:E5:8E:D6:02:A9:85:E8:3E:3E:75:51:E1:DF:AE:95:A1:76:94
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1FD4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA88F03C67B311F188822CFECE1D38B0.roa
Signing time: Sun 14 Jun 2026 05:41:19 +0000
ROA not before: Sun 14 Jun 2026 05:41:14 +0000
ROA not after: Wed 14 Jun 2028 05:41:14 +0000
asID: 211440
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8148 (0x1fd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 05:41:14 2026 GMT
Not After : Jun 14 05:41:14 2028 GMT
Subject: CN=6a2e3efe-e2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:3a:d6:b7:e3:44:95:f4:ea:43:d1:40:77:
e1:9c:83:15:4d:72:21:1d:1d:11:49:d9:de:00:9f:
eb:93:1c:87:63:3d:18:65:e5:a0:fc:56:85:d3:4e:
12:90:bb:1d:33:1e:bc:1f:93:ea:2d:63:c3:8b:be:
e4:55:00:ed:e6:ed:3c:8e:6e:56:1a:03:88:39:57:
25:1e:43:de:43:1f:d5:dd:23:97:3a:a6:de:9b:62:
f2:53:75:23:36:c4:f5:8e:20:05:e4:4d:07:e4:2b:
a4:86:22:59:fd:01:4d:b8:dc:16:21:ee:63:16:8a:
b6:17:5c:a4:b5:c4:c5:c3:e4:7c:3d:1a:25:19:11:
e6:98:58:17:eb:ff:91:4c:22:f8:d6:8e:13:42:c6:
52:2b:fb:0f:08:d6:e2:2a:1b:b6:cf:56:15:6f:13:
70:c9:fe:1e:dd:27:4b:d2:c2:69:43:91:bd:82:7d:
6a:0c:05:f3:1a:7e:41:b7:a6:fe:45:78:6b:46:ab:
d8:6c:89:e4:1c:ee:6d:1f:cd:08:ce:6d:a4:72:5d:
89:3e:79:0c:0a:0e:41:3d:7c:cc:2b:dc:cf:87:56:
91:2b:91:4e:f4:f8:7d:e2:3e:0c:d6:0f:08:73:74:
c4:77:a8:e7:4a:60:40:3e:64:8d:98:b5:0d:c3:cb:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:E5:8E:D6:02:A9:85:E8:3E:3E:75:51:E1:DF:AE:95:A1:76:94
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA88F03C67B311F188822CFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
09:25:1a:dc:11:4e:1b:77:f0:3f:2b:c1:dd:67:3e:ab:37:73:
1c:b4:47:39:bc:f2:9a:c5:36:35:af:47:ef:81:4c:cc:5e:bc:
b0:aa:39:b5:0e:a5:70:8d:be:28:21:55:41:c7:05:7e:54:76:
6b:34:1f:6c:79:b1:ae:5c:f3:e0:8d:ea:81:7e:0f:cc:f1:92:
23:9a:a4:a5:c0:b5:d0:80:7c:d1:43:23:df:c2:b4:f6:62:d1:
e4:85:b2:cd:68:17:f0:55:b3:4c:15:72:e8:a8:e2:82:3d:29:
27:01:b9:7a:ee:a6:c8:97:38:56:2a:d9:e3:f1:bc:12:4e:eb:
a4:5a:01:1c:25:f5:ad:fc:63:c7:1c:47:1e:bc:bb:be:ae:48:
6c:93:bd:44:1a:40:b1:87:55:fe:cd:da:0e:9a:ca:06:70:0e:
70:5b:ae:ec:06:9f:77:6e:dd:c8:9a:e8:1c:40:d0:1d:f6:9a:
7e:0d:42:72:82:52:af:44:8a:5a:ab:7f:67:40:03:d2:cc:a7:
2d:d5:28:72:98:4f:e6:56:3c:2d:cd:84:e1:98:3e:86:65:5c:
37:37:4c:51:63:ab:92:6a:0d:26:ee:ea:66:c3:b6:13:af:46:
b8:3e:fa:53:96:14:13:3b:9e:43:06:bd:1f:b6:92:44:45:c8:
46:a3:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 19:12:42 2026 by rpki-client