Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AD03D6AA5C2411F1A567F5BCCE1D38B0.roa
File: AD03D6AA5C2411F1A567F5BCCE1D38B0.roa (raw, json)
Hash identifier: hnlARkEJ6IpP3qFP5uBBM80V7VK54WkgI3Sw6ExxSSM=
Subject key identifier: F5:91:D2:E6:EA:95:13:D4:DE:43:10:90:AC:B9:44:49:F1:6F:0E:17
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F8D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AD03D6AA5C2411F1A567F5BCCE1D38B0.roa
Signing time: Sat 30 May 2026 12:40:02 +0000
ROA not before: Sat 30 May 2026 12:39:56 +0000
ROA not after: Tue 30 May 2028 12:39:56 +0000
asID: 154383
IP address blocks: 154.16.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 01 Jun 2026 12:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8077 (0x1f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 30 12:39:56 2026 GMT
Not After : May 30 12:39:56 2028 GMT
Subject: CN=6a1adaa2-8228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:76:95:fe:d3:7b:5d:f7:20:8e:0e:87:46:
b7:67:fd:3c:c0:e7:a4:16:23:16:07:b8:83:5a:81:
ee:aa:99:4c:08:a3:20:09:6e:94:21:36:83:08:4a:
c6:8e:ba:d2:cd:a0:e2:ba:2b:b6:d0:e4:2c:10:dc:
5d:c8:6e:1a:94:26:cb:e7:7e:d1:1a:a0:fd:f5:10:
7f:8c:df:6b:5d:de:8f:e9:24:34:de:11:f2:4b:48:
ba:16:cb:50:cd:85:e9:4c:a3:32:98:c8:ba:bf:d6:
9c:9f:0b:54:7e:6e:54:6e:15:2f:95:61:03:86:38:
e0:09:5e:9f:b7:a2:81:74:20:37:68:b3:60:55:ae:
2c:ff:63:a1:46:40:e6:1c:2b:cb:ff:87:f9:c6:d6:
da:59:35:7e:e5:ca:59:ab:5c:4d:82:c7:bf:d4:6e:
50:a2:d6:c5:1f:b5:f0:d0:ff:ef:4d:39:b6:94:e5:
21:23:d2:25:8b:79:51:4d:f6:6f:4e:a5:4a:c9:99:
05:e2:26:60:4a:24:fd:42:c1:3e:ec:fb:b0:64:d9:
69:a5:7e:67:02:d9:a7:f5:0c:84:53:0a:9b:4f:06:
90:2d:73:f2:e1:61:a4:2e:c6:70:13:5d:c7:91:87:
8b:e5:46:f7:df:d4:ee:8d:33:d2:46:16:19:8f:2f:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:D2:E6:EA:95:13:D4:DE:43:10:90:AC:B9:44:49:F1:6F:0E:17
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AD03D6AA5C2411F1A567F5BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:19:b7:b6:ef:58:0a:43:62:80:62:e0:50:21:f5:c2:68:1d:
4a:68:85:53:9d:12:71:ae:e3:ce:a7:02:f6:af:6e:c7:12:88:
02:fc:f2:a4:d9:c8:48:f7:55:3b:2d:6d:bd:9a:00:6e:0c:05:
a0:51:c3:f9:6f:aa:cf:d3:0f:4f:39:82:d6:fc:f7:21:8d:95:
c6:89:d8:74:e2:6a:11:a2:fc:68:3a:23:54:65:8d:67:57:1f:
1d:b0:d2:da:4e:b4:2c:4d:cf:94:60:8c:f1:96:fc:b2:13:6d:
68:ce:15:46:e5:3e:cf:86:f4:0a:0b:52:5c:79:6c:27:80:81:
e7:03:2c:47:5c:db:b4:48:1c:1c:e6:60:e6:71:9a:16:47:a3:
92:c9:3d:7c:3c:16:f3:ec:7a:43:b6:07:07:cd:59:da:38:59:
c6:89:9f:c9:18:12:8c:51:57:3f:4e:c5:b0:75:8d:e3:d2:ba:
a0:bb:25:73:1b:fc:57:e0:21:50:fa:2c:e8:68:90:1c:b5:58:
a1:ae:05:87:c6:3d:a6:eb:a0:1a:0a:24:e8:d6:e2:b4:9c:67:
8f:df:87:71:40:73:27:25:18:81:56:67:57:33:81:8b:5e:bf:
b7:db:58:b7:20:f0:04:ea:29:d4:94:56:04:58:f5:2c:bc:91:
a2:85:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 02:55:01 2026 by rpki-client