Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACB36BFC2F1F11F1B9889DD4DAE4EC9C.roa
File: ACB36BFC2F1F11F1B9889DD4DAE4EC9C.roa (raw, json)
Hash identifier: rLp3RFCCoV1RHbVLr1mCmCHoivWqu9R0P69flfZlrYg=
Subject key identifier: 23:FA:36:2B:C9:19:E8:3D:9D:4A:7C:05:E2:9A:32:FD:22:FA:A5:55
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EAE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACB36BFC2F1F11F1B9889DD4DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 05:40:52 +0000
ROA not before: Fri 03 Apr 2026 05:40:46 +0000
ROA not after: Mon 03 Apr 2028 05:40:46 +0000
asID: 834
IP address blocks: 154.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 Apr 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7854 (0x1eae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 3 05:40:46 2026 GMT
Not After : Apr 3 05:40:46 2028 GMT
Subject: CN=69cf52e3-9cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:6a:f3:3e:db:a2:bb:e8:e3:8a:24:0a:22:
e0:62:a7:d8:77:20:df:6b:c9:d5:25:88:c4:f5:5c:
c7:68:6d:2c:bf:0d:d1:5b:28:c6:10:6d:5f:33:ea:
53:a2:be:33:c9:dd:6c:f3:e7:8a:55:58:ff:06:b0:
ab:be:9c:69:b7:67:61:89:0d:81:2e:1c:8e:5e:49:
56:df:30:2b:ba:44:ab:02:8d:76:fa:36:6c:1e:2f:
2a:c0:16:79:20:2b:2e:cd:a5:21:63:f6:c6:e6:b5:
b0:9c:de:a2:de:5a:28:03:f9:df:a2:c9:f6:3b:e3:
c9:b5:d3:84:95:f4:6f:7b:94:d9:4a:7a:4c:62:3b:
0b:4f:4d:3b:ae:4d:99:c0:ba:ab:b3:af:f0:a7:62:
f3:c4:e5:78:c8:dd:d8:12:94:03:bd:a7:2d:1c:ed:
b7:ea:d2:ed:73:02:7e:a3:f2:e2:97:a1:53:77:f0:
09:d1:ea:f2:0b:37:e7:82:b0:9e:bf:de:bc:86:69:
b2:74:c1:ba:1a:67:a5:5d:71:f8:a6:af:7e:d0:5d:
30:7e:93:16:c9:b6:c9:a8:e4:7a:6d:29:c6:8a:ec:
8e:d6:4c:af:7c:95:8e:31:d1:c4:2d:9e:a9:5b:47:
94:57:51:c4:71:65:f3:90:15:55:80:da:bf:f0:36:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:36:2B:C9:19:E8:3D:9D:4A:7C:05:E2:9A:32:FD:22:FA:A5:55
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACB36BFC2F1F11F1B9889DD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9f:3c:b3:a5:f6:25:bd:b0:e7:cb:6f:44:89:95:4f:a8:48:
d4:c9:98:78:82:d6:89:f2:08:37:26:bc:47:04:67:2a:e6:74:
a1:da:13:87:59:6f:be:4e:ef:20:18:10:e4:28:5a:17:5e:56:
cb:16:7c:06:73:84:a8:f1:9a:ca:9c:43:e9:24:e5:bb:3c:e0:
90:7b:e4:dd:42:68:f8:d8:2e:dd:af:a1:03:49:6f:90:67:0d:
f9:de:8b:d6:db:de:db:3b:1a:73:1d:6a:f4:a2:49:db:b0:58:
71:7d:0b:33:19:3a:46:99:18:b4:31:77:77:a0:43:fb:bd:a7:
91:a6:a6:1a:5b:d5:9d:1f:98:f9:81:77:d8:50:03:79:3f:ee:
f8:b9:fc:6a:cd:bc:d7:bc:7e:12:06:82:23:a2:cc:c4:fc:a1:
cb:7e:3b:01:91:4e:46:99:df:16:52:99:4a:44:a6:45:8c:ee:
13:8d:98:46:a1:c5:19:83:ec:c6:2d:45:30:5c:13:41:0a:f9:
69:8f:1b:a4:ad:6f:64:54:73:0d:c0:0d:6a:c4:35:11:c2:c7:
8b:f0:12:68:c9:f7:98:22:fc:80:37:31:42:7b:1f:05:2f:11:
b4:60:4d:5c:5c:79:dd:b8:5c:f7:7e:d5:88:a0:fe:09:78:7f:
2f:0e:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 11:51:41 2026 by rpki-client